Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: ZP+r05jmBS5JsW4HQEDG0zhjQf0Ric3Dew+KEA17vRs=
Subject key identifier: 8B:B7:B7:4E:4C:B0:13:76:1F:C1:B1:3B:B1:C7:60:81:33:43:F9:F4
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019D371B507AB14AA9FF351BCA0AB2691934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0F80
Signing time: Sun 29 Mar 2026 01:00:30 +0000
Manifest this update: Sun 29 Mar 2026 01:00:30 +0000
Manifest next update: Mon 30 Mar 2026 01:00:30 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: ZEELP0gIHjPVFil+CDekmFl3yvqHkXmR6Q10EbPYNtA=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:50:7a:b1:4a:a9:ff:35:1b:ca:0a:b2:69:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Mar 29 01:00:30 2026 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=8bb7b74e4cb013761fc1b13bb1c760813343f9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:69:01:a2:bc:52:c2:65:37:90:cd:03:3f:
ea:ec:4e:bc:be:57:3d:43:43:94:08:b6:a8:ab:23:
09:c4:3b:42:09:59:fa:c7:ba:29:f7:27:41:b2:bf:
47:4a:a6:23:96:e6:59:ce:00:1b:78:4d:80:fc:f2:
c9:4d:9e:c6:27:3e:f1:a5:16:34:08:33:51:d8:7b:
34:3d:8e:af:05:f0:50:32:76:d9:db:26:bf:89:26:
1a:17:10:9e:6b:a8:4c:8a:c1:19:22:8c:93:38:51:
26:c7:78:00:02:57:d3:6b:ee:f2:e0:d5:bb:c0:8c:
30:f8:23:fd:28:cd:78:0f:b8:bd:7d:5e:6a:d6:54:
7f:4c:d0:90:c3:94:36:65:d0:58:94:5b:28:5f:68:
e4:68:d3:60:cd:bf:0c:a0:d4:51:95:1c:74:ce:d0:
53:f0:a1:b5:65:c7:fe:8f:b8:14:a2:60:e7:fe:c7:
13:dc:aa:d1:3e:d4:2d:e0:ac:9f:38:17:47:e5:d6:
43:98:0e:1a:72:1e:21:ab:2f:9a:a3:b4:09:0e:35:
b2:a9:88:62:9c:ca:0d:a8:fd:1f:75:8b:31:07:5c:
77:1f:fb:63:7c:30:f8:25:60:3c:21:a8:24:40:54:
84:70:9d:3e:d5:a2:72:02:24:d2:cc:08:f2:4c:db:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:B7:4E:4C:B0:13:76:1F:C1:B1:3B:B1:C7:60:81:33:43:F9:F4
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:70:1e:80:4b:60:54:86:d6:ef:74:54:ed:9a:c1:32:24:a0:
62:72:c2:68:d8:3c:a5:8e:bd:25:6d:40:c0:28:53:5f:e1:14:
4c:f7:cc:f2:f8:47:f2:49:f5:04:ec:cc:6c:14:8d:28:07:27:
52:40:ce:d9:64:7a:b3:95:a6:31:19:a1:f4:7a:df:58:9e:c0:
28:57:78:f7:82:06:2c:4c:71:24:98:3d:85:53:b7:20:0c:e3:
b2:be:21:11:25:ad:10:e5:f7:29:62:2d:d1:0d:ae:df:7e:e9:
09:88:7f:57:45:90:54:7f:33:1c:a5:50:84:9e:db:22:a5:c9:
bc:b0:b7:46:98:50:f1:db:25:e9:c4:de:ce:cb:6a:ea:33:a5:
8c:fa:db:9a:51:27:bd:f4:e7:c9:36:ee:1e:49:d2:93:16:a6:
1b:87:23:77:63:1d:56:ef:25:01:cb:07:4d:93:82:31:d5:68:
24:6a:51:7d:d0:23:17:33:52:ed:bf:b1:ae:fe:c8:e3:22:59:
a7:d0:3b:13:e3:99:f9:f1:e9:83:75:fa:63:bf:3e:47:d1:14:
66:4c:c4:4d:9d:3d:9e:27:68:df:44:12:67:52:c4:53:5f:a2:
37:40:43:db:41:0f:6b:81:1a:47:0d:24:c2:10:49:05:96:08:
67:65:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client