Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: eNvaLOaKHh6Yoy41cKfhTsBYSu2JQkKhiCyRncpqUfU=
Subject key identifier: 40:91:6A:3D:38:A5:65:4C:A8:98:BE:F3:F6:30:A5:F4:B9:94:07:6D
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019DED489398A7A4B83F611D32A3482E62A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 18ED
Signing time: Sun 03 May 2026 10:00:49 +0000
Manifest this update: Sun 03 May 2026 10:00:49 +0000
Manifest next update: Mon 04 May 2026 10:00:49 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: mZVELjypvoAMhFlfybmeq4QKWCLtHlnV+azbN/8XVLg=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:48:93:98:a7:a4:b8:3f:61:1d:32:a3:48:2e:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: May 3 10:00:49 2026 GMT
Not After : May 4 10:00:49 2026 GMT
Subject: CN=40916a3d38a5654ca898bef3f630a5f4b994076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:11:9e:19:e6:9d:84:91:69:49:bd:82:6e:
70:da:ab:c0:5b:67:05:1e:d6:18:63:57:ca:18:ac:
05:77:36:c2:d8:bf:ff:19:2a:bb:9b:47:70:15:e0:
80:2e:53:e5:9b:2b:e9:10:88:df:b0:6d:98:f9:35:
44:9d:30:3f:a1:2c:69:1a:e6:c3:39:b9:82:51:e7:
f0:bb:1e:14:b2:7f:48:8f:fb:eb:ed:67:8a:f7:92:
bd:fb:d9:4d:aa:b0:01:21:8f:64:f0:17:72:75:00:
67:01:ca:fa:a3:8e:8a:2c:31:c5:c3:ab:8b:3b:71:
d9:c9:1e:b5:09:b7:08:61:2e:3e:5a:b4:a6:10:8d:
7b:79:e3:e6:90:3f:38:f1:a0:6f:4a:ad:08:21:b7:
d1:99:6b:de:a3:ce:35:f0:11:d1:c3:cf:bc:5d:38:
b6:f1:7b:05:71:d9:ac:22:c0:c1:d6:80:f0:61:2e:
cb:e5:bf:c2:2d:25:f0:52:c6:18:e0:77:41:ba:0e:
a5:24:66:f1:2f:87:d0:69:3b:74:e4:b1:d7:d2:20:
90:e9:7b:17:6f:75:42:30:29:0e:b9:80:5e:e1:fc:
fd:d0:d4:53:10:dc:d6:07:a1:86:9a:dd:88:0f:a2:
08:3c:50:e7:71:f7:99:d8:12:6e:9d:48:e3:5e:84:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:6A:3D:38:A5:65:4C:A8:98:BE:F3:F6:30:A5:F4:B9:94:07:6D
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:27:5c:c7:a1:ca:5d:9b:4d:30:21:8e:8c:81:aa:36:85:f6:
b0:64:84:a0:1b:58:a2:9d:14:10:70:40:62:df:cf:f5:d7:ba:
98:bc:93:9f:f6:17:0d:87:58:be:12:a8:8d:b5:93:84:5f:0f:
13:fa:10:5a:7f:33:92:57:65:33:e4:2f:ba:00:84:0a:1c:f6:
f7:f3:25:6e:1e:47:72:57:32:84:b1:4b:5f:34:59:3e:3f:b8:
bd:02:5b:ff:b7:59:69:7f:b7:3e:8a:be:9c:b7:2b:61:2a:30:
ae:a9:4c:f8:fd:36:3e:93:27:8a:03:6e:3f:64:ef:dd:bf:82:
b6:2f:9a:a0:20:4f:5d:27:3e:dd:7d:93:9a:49:22:e6:cf:57:
d9:a8:51:28:39:8a:a1:65:31:a6:09:80:cd:39:cb:6f:d7:bc:
5a:03:1a:9f:08:a9:9b:1f:7f:95:24:55:be:36:e5:6f:87:3c:
ea:fa:41:62:ed:08:90:8b:f8:82:24:96:fc:65:f5:67:3b:5b:
6a:5f:5c:43:d1:e4:b4:27:58:3f:18:96:83:ee:a4:a6:af:d9:
ca:3e:60:86:36:fb:0a:19:5d:14:96:67:0d:ca:1e:ee:c4:e1:
2c:f4:ab:77:94:38:87:20:d8:ac:c7:df:bb:45:00:55:4f:8d:
b1:96:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:50:58 2026 by rpki-client