Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: C9efZv9iDjlH5z2ysG1WwUg6Pqrjaqd5+HN2psgdkNM=
Subject key identifier: 13:91:5E:FF:B1:21:57:12:72:0E:63:77:A5:30:4D:09:70:A2:CC:57
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019E1F7ED019669A26CE0692679F12C90701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:01:04 +0000
Manifest this update: Wed 13 May 2026 04:01:04 +0000
Manifest next update: Thu 14 May 2026 04:01:04 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: PK5uQBlcLRYyLoJWreViUFtn6ERbuEm3mWVZFBzgsKU=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d0:19:66:9a:26:ce:06:92:67:9f:12:c9:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: May 13 04:01:04 2026 GMT
Not After : May 14 04:01:04 2026 GMT
Subject: CN=13915effb1215712720e6377a5304d0970a2cc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:34:2e:87:43:08:27:b0:63:cd:8c:66:bd:
eb:fe:f5:d1:36:2b:67:e3:f9:97:1c:1a:a4:e3:86:
60:11:ee:fc:90:a0:7c:ce:fd:90:e8:10:e6:f1:4c:
49:8e:4f:cc:18:39:61:76:80:de:b8:b9:f8:cf:54:
4e:e7:3f:fc:87:4b:e1:ea:9a:1d:a9:20:94:d8:d2:
91:c4:57:1b:8e:f5:09:a8:6d:da:db:da:f8:55:7c:
34:51:1f:bd:a5:a4:8b:96:da:2b:48:43:f8:f0:7f:
81:65:21:39:91:f6:ee:2c:9f:b8:bd:b1:ea:37:74:
98:23:36:12:4f:da:a5:c4:17:10:02:af:93:1b:b6:
49:96:e5:46:17:66:fe:dc:6e:ed:fe:98:76:07:7e:
4a:f5:4d:15:54:d7:7e:31:bc:c3:7f:c8:94:e3:7f:
f5:5d:75:ca:02:82:82:3d:fe:b7:17:01:54:58:f1:
b8:04:0f:b5:49:8e:63:57:f4:4d:ae:31:73:55:b8:
60:c2:c9:3e:a0:03:09:f4:7e:b2:52:3b:c1:16:2e:
11:bf:0c:7e:97:0d:30:25:aa:59:03:fd:ad:2f:f8:
72:c8:85:60:82:d1:94:a5:66:5a:6c:75:18:90:e4:
35:2e:ce:7a:ae:c7:03:b4:ba:8e:67:71:35:c9:7f:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:5E:FF:B1:21:57:12:72:0E:63:77:A5:30:4D:09:70:A2:CC:57
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:bc:c0:87:14:a9:99:46:00:e1:5a:b8:53:a0:32:c5:d9:
df:f3:0a:f8:5a:0d:6f:55:c1:54:77:a1:47:7f:fb:5c:db:53:
32:ef:9e:a0:5b:e1:fa:9e:e6:ce:4d:7b:fc:6f:e2:ef:95:63:
eb:c8:46:d0:18:5c:c5:5f:18:6f:43:a1:d4:e7:ee:c9:54:72:
bc:46:93:c3:7e:e4:2f:d7:e9:7c:8c:34:22:5e:bb:54:b8:ba:
ba:fb:86:0a:28:94:61:5b:5c:66:01:d9:fa:31:a8:d0:5b:d5:
a3:e7:7f:e8:e7:ab:f3:73:ae:7e:13:80:b4:94:9e:41:0d:94:
49:e6:a8:6b:19:34:32:b5:09:60:e4:15:9b:09:df:28:fd:2c:
6f:0c:4f:b8:ae:6b:4f:ec:2b:24:b7:72:ae:de:97:4b:c0:99:
11:fa:5c:6f:e5:05:9b:c3:5e:21:65:21:66:d7:10:8d:3c:13:
18:17:e9:fa:1e:05:fb:a0:22:0f:33:f2:aa:bb:c1:41:4a:ed:
9c:60:94:cf:b3:44:07:6f:44:0e:44:96:bd:03:ce:a5:31:8c:
71:99:b8:fc:3f:fc:5c:ec:f3:50:a7:c3:b2:6d:cd:f4:88:27:
a8:6e:5f:42:51:e4:ae:37:ce:69:7b:be:df:38:80:41:5b:7e:
6d:ee:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:32 2026 by rpki-client