Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: kEsoGc+fd7sJYnSjk7CBzFm8aFbr7Bl/oaHJeDoqY/8=
Subject key identifier: 0F:A5:CC:CD:EE:CA:2A:A9:B5:64:C6:08:BD:7B:EF:07:C3:9E:A8:A8
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019D27DF904F5951F1ABF3D2BE555A844CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0903
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: f/S/44352Mvym5iiZA9qYtePzT6CpHMUmKGGDyFrBjw=)
2: T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa (hash: i3KW8teSoi0sbHI5DCnh1Lo1CTu11nrhhb/yogb0zzM=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:90:4f:59:51:f1:ab:f3:d2:be:55:5a:84:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=0fa5cccdeeca2aa9b564c608bd7bef07c39ea8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:3e:44:13:23:05:9b:d8:ba:d8:fb:f5:e2:
7f:17:40:7e:bd:30:c0:77:06:fa:50:16:dc:cc:33:
a2:f7:5b:0e:c1:38:6a:5a:8e:1e:0e:61:f7:ac:74:
55:aa:5c:2c:a1:7d:91:ea:4e:03:7e:fd:71:c3:7b:
ce:6b:e9:55:c0:9f:a0:e4:a7:e2:be:59:19:a2:af:
9a:f0:ef:c0:e0:f7:14:e1:51:f5:a4:b3:c7:f7:2e:
b5:b7:12:b5:e0:17:cc:08:d9:d5:0b:82:cf:4d:95:
f9:66:bb:b5:96:11:3e:03:f3:8f:3a:98:43:3f:cc:
d7:90:b4:3c:51:16:1b:a1:c9:23:fd:06:74:f2:ab:
eb:52:a6:cd:8f:a1:a0:25:c5:50:d6:26:f5:32:69:
d7:c8:b6:15:3b:9a:67:12:c0:25:29:04:57:c5:a9:
2e:92:f7:94:fa:68:be:7e:92:37:52:e9:b8:c4:99:
fe:7d:ae:6f:87:6e:21:ce:78:fc:c6:0f:8c:35:54:
99:01:f7:14:a4:0c:1a:9b:f0:36:41:31:d3:d5:53:
fb:b7:c3:79:82:64:40:3a:1e:4e:54:45:76:0b:37:
e8:94:5d:70:0d:b5:0d:08:06:2a:0f:28:ea:90:68:
6a:68:14:33:7b:92:c3:dd:b6:a2:02:fa:83:89:d2:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A5:CC:CD:EE:CA:2A:A9:B5:64:C6:08:BD:7B:EF:07:C3:9E:A8:A8
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e5:4a:cf:e8:67:dd:84:83:21:76:43:54:7b:28:7e:b4:12:
9b:5d:4d:b7:a4:23:c3:e9:e5:92:70:db:56:a4:8a:23:b2:d4:
2f:d9:dc:fd:1a:2d:5e:2b:63:be:48:4c:86:78:c5:30:d1:73:
43:e0:9d:0d:c1:a8:62:f1:75:c0:e0:ed:56:0a:50:af:12:00:
12:6d:d2:8c:c5:d4:92:f4:f5:bd:e0:e9:f1:6a:91:12:86:5f:
03:58:b3:fb:e8:0a:24:a0:c3:32:ea:cf:1f:5c:f6:cc:da:ed:
d9:76:14:2f:b7:61:c6:0c:1b:f5:02:f0:30:15:ed:4f:63:ea:
3d:dd:3b:20:55:db:9f:e7:41:83:e4:72:97:69:ea:9f:50:3a:
6f:e5:66:0f:18:6c:40:45:47:23:37:32:e2:1d:b9:3e:7f:06:
a9:3c:fe:21:07:20:b3:66:08:b6:2f:d3:71:51:6a:be:6c:75:
bf:83:0e:78:81:af:3d:c8:99:56:f0:ba:39:57:b2:e7:ca:67:
8d:9d:d9:4b:af:2a:f5:45:67:58:6f:fd:1c:af:79:9a:f0:34:
e7:84:9a:07:cf:63:52:ff:1f:bb:b0:5b:32:64:2d:64:64:f0:
de:c2:75:ce:91:13:57:eb:24:80:71:4f:6b:0c:43:1d:51:c2:
b1:b8:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:19 2026 by rpki-client