Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: uHDuWm3Zdt86hA6B318RmKVSucDT4upLAkWKeTkDcRI=
Subject key identifier: CB:56:5C:77:35:F9:43:A4:7B:CB:4B:C6:EE:C8:C5:D9:08:B4:4B:23
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019F93241220101C7E09B0859862A358B121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0A44
Signing time: Fri 24 Jul 2026 08:00:42 +0000
Manifest this update: Fri 24 Jul 2026 08:00:42 +0000
Manifest next update: Sat 25 Jul 2026 08:00:42 +0000
Files and hashes: 1: 1JpN7FHKM4FO6E7uv4B84-IqbP0.roa (hash: LFF4bpL91df6PUePqFkpslW9FOtrELZ1z7Xtg08v9IQ=)
2: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: yo/QP8gB0st+0Kws5u0tocoWurPhdgPF6+JA0uvXMGg=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:12:20:10:1c:7e:09:b0:85:98:62:a3:58:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Jul 24 08:00:42 2026 GMT
Not After : Jul 25 08:00:42 2026 GMT
Subject: CN=cb565c7735f943a47bcb4bc6eec8c5d908b44b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:91:86:07:bc:10:82:38:de:2d:fd:22:96:
b5:76:13:de:ec:a9:73:9f:07:09:4b:58:af:09:82:
c3:39:65:8d:1a:e9:be:a0:16:36:31:7d:11:d8:d9:
40:71:75:bd:10:9b:1f:e5:79:5f:c0:5a:bf:60:ea:
a7:49:e0:db:a7:7f:5f:ed:23:b6:fe:92:6d:fb:c3:
11:fd:02:6b:59:cc:82:09:0e:56:0b:01:06:ad:83:
b0:d5:2c:9d:ee:e6:0a:30:04:97:9a:d7:eb:32:a9:
8c:2b:8f:3d:b9:32:d7:c0:bb:a6:38:9a:c8:97:3c:
3f:d5:11:9a:50:73:7b:a1:99:24:e8:91:12:f4:3b:
ba:f0:1c:72:dd:14:d2:5f:16:be:4b:e4:82:80:26:
cc:7d:7d:a9:8c:21:50:83:19:08:a3:af:57:20:ff:
53:00:a9:58:3f:54:30:7e:2d:1c:3d:09:97:ee:5d:
f8:54:e5:a3:20:9b:07:9b:12:2a:6a:0c:6d:21:d0:
d2:de:ef:f8:34:7e:6e:83:4e:90:30:aa:bf:94:e4:
06:6c:51:3b:d7:0d:f9:06:da:7b:51:ed:79:3f:52:
36:fb:81:de:84:3f:62:1f:03:7f:1a:d7:c8:4a:dd:
97:af:eb:fa:72:bd:21:c9:35:94:0b:d6:2e:5b:3e:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:5C:77:35:F9:43:A4:7B:CB:4B:C6:EE:C8:C5:D9:08:B4:4B:23
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:0c:23:45:f3:ad:bb:18:c1:2d:31:11:9c:f2:5c:e1:b0:
c7:0c:8d:85:66:db:2f:20:e4:30:54:34:62:76:bd:ff:61:c3:
d1:59:5a:16:f3:6a:82:34:c5:9c:46:b7:e4:85:79:0f:8d:8b:
0d:be:80:b4:9e:30:72:c4:7f:0f:db:10:64:d6:fc:ba:4c:71:
87:fd:2a:c7:e7:65:8f:b4:a6:29:c2:ca:d4:c8:74:bc:fe:52:
b0:c2:49:0f:b1:04:93:86:42:a7:2c:3c:fb:4f:54:f9:d5:d3:
91:80:48:94:32:d4:be:cc:3a:0e:78:ae:ab:0e:58:d8:a0:38:
93:22:ea:2b:34:13:7f:83:3a:74:85:e8:8e:b7:ea:45:1d:8d:
48:1f:c6:f2:b4:2a:8e:99:28:b7:46:d2:39:2e:b3:35:f6:b4:
ed:8e:62:e0:ce:d6:97:d7:2f:c3:bd:92:4c:bc:e5:a8:15:72:
3e:d4:2a:75:8f:bb:16:81:4e:39:2f:d7:7f:32:52:6e:49:a4:
05:47:01:39:ae:fb:20:62:38:00:9e:a0:10:8f:83:96:10:8b:
3c:1c:3d:68:b0:7b:e5:ca:1e:93:01:8f:54:d3:33:d3:4f:a7:
b2:89:34:b0:32:4e:8e:de:8c:1b:4b:c8:8b:d1:28:83:b0:61:
70:61:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:34 2026 by rpki-client