Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: Y9UkAr27xrU7fHbuPxQw5Y7VYnvxD4GNagHZOVHgG2w=
Subject key identifier: 27:42:BA:DF:3A:45:97:1D:1C:F1:9C:B1:18:CE:14:CC:90:AC:CC:26
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 01A0D3B8FF3E0AA956B2C5515082DC5B07C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0AEA
Signing time: Thu 24 Sep 2026 14:01:51 +0000
Manifest this update: Thu 24 Sep 2026 14:01:51 +0000
Manifest next update: Fri 25 Sep 2026 14:01:51 +0000
Files and hashes: 1: 1JpN7FHKM4FO6E7uv4B84-IqbP0.roa (hash: LFF4bpL91df6PUePqFkpslW9FOtrELZ1z7Xtg08v9IQ=)
2: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: 2Mny0EwyUs6juQelAVgGfZpd9P/5+P3CjF2HqUryEKs=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ff:3e:0a:a9:56:b2:c5:51:50:82:dc:5b:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Sep 24 14:01:51 2026 GMT
Not After : Sep 25 14:01:51 2026 GMT
Subject: CN=2742badf3a45971d1cf19cb118ce14cc90accc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:82:e3:16:8c:7b:94:c1:7c:80:d1:17:10:
0c:79:d5:70:8d:16:68:b9:e2:fe:1c:71:0b:da:5f:
20:8a:25:f8:84:81:e3:78:84:47:54:ea:cb:9c:ab:
a9:1b:d1:f6:4b:51:c8:08:e4:51:bd:9c:7f:b0:4a:
5f:6b:74:62:bd:3e:88:70:b6:52:10:c2:80:9a:62:
8b:08:f7:bb:aa:fc:07:40:4f:78:28:4d:14:10:33:
ab:fe:af:65:42:71:0e:af:ec:bd:ca:b1:fa:d7:65:
66:0f:f5:51:b3:d7:97:87:ac:f6:4c:58:ce:b8:23:
00:73:52:4c:52:2e:e6:93:63:8a:b5:dc:54:9c:5d:
b4:a5:80:50:26:72:e3:7f:da:9c:18:62:c5:04:94:
98:4b:b1:71:dc:b0:26:3e:67:0d:bb:95:e4:58:bf:
ee:40:8d:71:2a:69:73:59:31:aa:13:a3:c2:fc:70:
21:8d:74:12:cd:c0:ae:de:48:b8:31:c1:01:a8:6f:
2c:a7:f5:19:9e:8d:fb:19:7a:81:e0:28:81:1a:ad:
b4:5b:1b:eb:7e:39:27:65:5b:cc:04:94:7d:67:c8:
ba:1f:ba:17:8a:f8:40:d9:66:95:5f:62:ea:63:8d:
80:28:1d:8e:00:1e:9d:e1:5a:c2:02:ac:eb:64:1b:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:BA:DF:3A:45:97:1D:1C:F1:9C:B1:18:CE:14:CC:90:AC:CC:26
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:88:36:68:91:e7:d7:79:ac:a8:4d:b7:0d:0c:1f:cd:a0:a2:
78:57:18:cb:4b:e2:ce:58:1c:3b:0d:4d:ca:af:95:26:56:e6:
fa:92:98:26:8b:1f:72:d3:aa:65:b3:3f:fe:c3:48:d1:12:71:
1a:b7:1c:97:5c:97:b9:b3:80:a5:00:4d:97:70:32:8e:20:f1:
0e:2b:7b:5b:ea:4c:6e:f2:7e:c7:08:2d:30:99:30:22:bb:27:
7f:ba:80:be:a3:02:6b:92:65:e8:12:ca:84:4b:e5:22:b7:96:
ca:87:33:3c:98:33:9a:32:b9:5e:25:3b:23:61:79:4c:78:38:
ff:0f:72:9d:20:5b:e8:d5:3d:a3:43:83:c4:1f:7f:0d:a3:0d:
c7:96:45:69:c6:b0:53:c1:f4:85:cf:e2:58:5f:22:5a:ba:61:
a7:65:f1:81:6d:59:f2:71:22:0b:0b:13:af:94:dd:bb:da:23:
85:c0:58:df:04:b6:4b:81:82:df:6c:fb:c0:e3:65:cd:f9:4d:
30:8c:d0:02:8d:18:64:74:fc:4e:3a:b0:f2:18:ab:70:ab:85:
0e:24:ea:44:45:a6:4a:8e:5b:81:6b:3d:76:3b:48:54:ad:53:
d2:55:d5:6c:c9:75:14:3b:92:49:27:ef:e7:8c:8d:8c:54:96:
ac:2e:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:05:53 2026 by rpki-client