Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: KP6co1gdSUt4q01BB1xY5I886+VvK5ZwlsbuOH8Cx0Y=
Subject key identifier: 8B:09:DB:E8:96:01:9A:2B:FB:DF:BE:FF:F5:9D:A4:C7:27:8C:1D:08
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019E3072B5E6AD0B36521E44D56093FE57E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 098C
Signing time: Sat 16 May 2026 11:01:24 +0000
Manifest this update: Sat 16 May 2026 11:01:24 +0000
Manifest next update: Sun 17 May 2026 11:01:24 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: 7egtCSDOfLuEBXnq024990iKFtr68vdqWb4GxzyCYT8=)
2: T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa (hash: i3KW8teSoi0sbHI5DCnh1Lo1CTu11nrhhb/yogb0zzM=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:b5:e6:ad:0b:36:52:1e:44:d5:60:93:fe:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: May 16 11:01:24 2026 GMT
Not After : May 17 11:01:24 2026 GMT
Subject: CN=8b09dbe896019a2bfbdfbefff59da4c7278c1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:c8:03:ec:9e:93:e8:04:17:4a:36:7c:6c:
88:28:d3:9a:b1:a4:4f:86:da:9e:af:b3:fb:14:ae:
65:2a:d6:9e:cf:ce:2c:fa:9c:e4:9a:01:13:94:b8:
8f:03:00:a4:18:2e:90:14:32:26:7a:fd:dd:56:30:
f6:13:77:75:95:27:6f:d2:58:31:84:f7:18:7e:04:
f8:9a:39:87:15:3b:0b:81:f4:2e:75:9f:72:2e:15:
63:51:b7:f1:7c:fe:61:67:a3:60:2a:e7:94:da:f2:
73:36:41:0d:59:af:27:2d:46:41:05:23:0a:d3:5d:
53:5f:ee:fe:1a:af:b8:17:04:a8:a7:29:5d:b1:90:
7c:34:3e:3c:66:70:fa:16:3e:3e:be:09:dc:43:be:
60:92:d5:90:ef:b0:b6:a3:a1:00:0b:bf:16:ba:e6:
57:e7:b3:65:b9:57:ab:27:97:70:2c:03:20:e9:f4:
f7:a3:06:0c:4a:80:ed:5a:a0:9b:08:b2:fe:0d:70:
24:0d:d4:db:9f:b1:83:62:df:6d:78:3a:c8:74:7e:
dd:5d:2f:ea:c3:52:6a:3c:a9:31:ca:cb:90:fc:45:
2d:03:57:e9:b9:93:aa:34:94:2d:8d:c5:47:11:0d:
ff:72:d6:58:4d:83:23:f7:90:1d:a3:77:8d:3e:e6:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:DB:E8:96:01:9A:2B:FB:DF:BE:FF:F5:9D:A4:C7:27:8C:1D:08
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:30:0c:bb:c2:a2:93:30:45:7d:50:ec:80:e6:c6:ac:95:
3c:8e:47:cc:d5:e9:aa:8f:27:66:04:1f:e2:14:14:84:cd:9e:
45:7c:14:33:82:db:45:cf:41:fb:38:99:46:ba:88:17:11:f2:
2a:6e:2f:17:45:ed:78:ef:59:e9:01:76:b5:02:d1:f9:36:e9:
36:b4:c3:9c:72:df:5c:0b:ab:50:16:09:f9:75:26:45:a9:c8:
56:cc:76:22:eb:ff:f8:70:9d:f4:f7:1d:c3:c1:bb:3b:10:95:
c4:c2:fb:15:f7:07:35:7f:f5:f6:6e:60:14:38:e4:5b:5e:00:
9e:c5:05:ec:14:86:52:69:6b:d2:28:19:04:d1:e9:e4:9e:c9:
e5:4b:2d:a8:6c:f8:42:53:83:5e:21:eb:f2:7b:ab:54:2e:a9:
48:15:c6:2c:1c:67:5b:b1:67:75:b5:0c:4b:be:b3:ad:b2:67:
c9:7d:bc:19:67:68:20:4c:12:aa:14:26:1a:a8:60:64:0e:3e:
b7:79:53:b9:dc:00:45:a2:41:51:17:a8:51:3d:1d:88:f3:15:
c5:b5:c8:dc:8f:d5:e4:22:f0:d9:48:de:91:31:7b:bb:46:1a:
75:39:65:10:8b:91:e9:d8:4e:a2:35:62:1c:bb:39:4f:91:22:
43:6e:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:52 2026 by rpki-client