Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: qmno/eP2W7kFYH7Vxf4hV/MArfF6+9C96quh+WQX3Mc=
Subject key identifier: E8:9F:93:3D:7D:30:15:DB:F0:8F:E6:95:3F:5F:D7:78:3C:9D:32:8B
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 01A17A3AD87B99232AAD5ADBA106592366F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 11B5
Signing time: Mon 26 Oct 2026 22:00:39 +0000
Manifest this update: Mon 26 Oct 2026 22:00:39 +0000
Manifest next update: Tue 27 Oct 2026 22:00:39 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 6N2/P4I68L64LNwxFZWXvZcjNiX4A8RnBY7cOZHbH9Y=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:d8:7b:99:23:2a:ad:5a:db:a1:06:59:23:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Oct 26 22:00:39 2026 GMT
Not After : Oct 27 22:00:39 2026 GMT
Subject: CN=e89f933d7d3015dbf08fe6953f5fd7783c9d328b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:dc:53:3f:19:11:fd:3c:38:7c:0b:a9:07:
95:06:36:16:08:01:2e:6b:47:1b:83:6b:6e:6e:10:
d4:c3:db:83:c5:a6:1d:0a:b4:dd:bd:71:58:09:e2:
ae:cb:c6:0d:56:9f:76:6d:a3:2b:be:71:cd:fc:4f:
e8:fc:49:35:bb:da:ef:2c:1e:84:2e:79:7b:d4:44:
da:30:cb:28:4d:e0:c8:e9:19:ed:00:b2:48:5b:d9:
9e:df:2b:ee:08:0d:e3:3b:24:16:54:bf:5e:fd:af:
e2:c0:d1:11:fb:53:16:52:f6:d7:d4:34:15:e5:3f:
92:55:2c:fa:65:11:dd:f9:94:10:50:ef:79:dc:61:
0f:5b:71:6b:48:e4:73:ae:2a:7d:71:98:c9:29:de:
b3:5e:6a:e6:7d:1f:91:d7:e1:bf:e8:53:53:9e:1c:
98:9a:f4:5a:da:f4:35:47:af:c3:43:19:90:32:f8:
a9:7f:cd:06:43:4f:f5:e1:e8:ce:d4:9a:c9:10:fc:
1d:a6:3c:ad:17:4c:1d:93:eb:c4:8d:fd:a7:fc:44:
a6:10:7b:91:da:0a:4c:30:21:d0:29:a0:84:ff:22:
9e:d9:71:7a:f3:36:29:b6:b0:af:8f:c9:6b:4c:37:
4a:f9:7c:26:97:9f:92:fe:59:da:18:5a:63:10:b2:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:93:3D:7D:30:15:DB:F0:8F:E6:95:3F:5F:D7:78:3C:9D:32:8B
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:fa:17:d6:95:bb:47:ed:15:1d:c0:bb:d1:b6:5e:13:12:
d6:34:9a:93:d6:4d:3e:46:a2:f9:50:08:4f:18:b8:4e:61:fb:
bb:af:dd:42:ac:06:b5:42:84:df:af:ee:cd:9b:52:91:90:01:
c6:bb:40:0e:7c:e8:2d:fb:70:f5:71:55:35:30:87:c0:2f:17:
b6:d9:a3:9e:2e:b2:60:7a:42:85:48:c5:62:fc:18:0a:6d:cf:
af:01:a9:2e:39:89:44:6b:b8:b6:8e:0c:e7:e0:ab:60:89:ff:
2a:70:d2:f2:99:98:66:97:c5:a0:74:b0:3a:dc:d3:36:7b:5f:
43:16:03:06:b2:a2:5e:31:a1:9d:b2:7c:bd:81:0f:8b:db:ce:
45:85:0e:c6:f4:c4:e5:e3:79:bf:54:ae:20:cc:55:14:73:d7:
4d:79:27:d6:c2:34:33:c3:d0:16:30:05:ff:e1:d2:47:65:cd:
d4:e3:24:1d:3d:68:37:2e:10:95:01:17:a8:3b:79:01:48:cd:
a2:d5:79:06:3e:78:ca:4b:5d:8d:59:82:17:6d:f9:0d:e9:b6:
3d:93:e5:c4:50:99:62:4e:0f:2d:7d:7f:4c:de:86:92:1c:a8:
40:00:b7:89:c9:88:bd:d9:6f:f6:5a:73:74:60:7d:1c:6c:d3:
d3:78:a1:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6Oth7mSMqrVrboQZZI2b3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjYxMDI2MjIwMDM5WhcNMjYxMDI3MjIwMDM5WjAzMTEwLwYDVQQD
EyhlODlmOTMzZDdkMzAxNWRiZjA4ZmU2OTUzZjVmZDc3ODNjOWQzMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfncUz8ZEf08OHwLqQeVBjYWCAEu
a0cbg2tubhDUw9uDxaYdCrTdvXFYCeKuy8YNVp92baMrvnHN/E/o/Ek1u9rvLB6E
Lnl71ETaMMsoTeDI6RntALJIW9me3yvuCA3jOyQWVL9e/a/iwNER+1MWUvbX1DQV
5T+SVSz6ZRHd+ZQQUO953GEPW3FrSORzrip9cZjJKd6zXmrmfR+R1+G/6FNTnhyY
mvRa2vQ1R6/DQxmQMvipf80GQ0/14ejO1JrJEPwdpjytF0wdk+vEjf2n/ESmEHuR
2gpMMCHQKaCE/yKe2XF68zYptrCvj8lrTDdK+Xwml5+S/lnaGFpjELJI9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOifkz19MBXb8I/mlT9f13g8nTKLMB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoT6F9aV
u0ftFR3Au9G2XhMS1jSak9ZNPkai+VAITxi4TmH7u6/dQqwGtUKE36/uzZtSkZAB
xrtADnzoLftw9XFVNTCHwC8Xttmjni6yYHpChUjFYvwYCm3PrwGpLjmJRGu4to4M
5+CrYIn/KnDS8pmYZpfFoHSwOtzTNntfQxYDBrKiXjGhnbJ8vYEPi9vORYUOxvTE
5eN5v1SuIMxVFHPXTXkn1sI0M8PQFjAF/+HSR2XN1OMkHT1oNy4QlQEXqDt5AUjN
otV5Bj54yktdjVmCF235Dem2PZPlxFCZYk4PLX1/TN6GkhyoQAC3icmIvdlv9lpz
dGB9HGzT03ihwg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:05 2026 by rpki-client