Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: jeZoZRfEOr7z9T9EX3PqnadrXFyP83tZbOXHTS3bvYA=
Subject key identifier: A1:8E:6F:67:34:1D:E2:E5:7B:65:A3:F6:62:AD:1C:1A:87:CB:A3:AA
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019D3941127BB4D7B6B61B2B60C1CBBD80D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 090C
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: Anv9IjlF+HdaaLoz7cn5No9MhSB7PYye2KN5Y3YGj/g=)
2: T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa (hash: i3KW8teSoi0sbHI5DCnh1Lo1CTu11nrhhb/yogb0zzM=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:12:7b:b4:d7:b6:b6:1b:2b:60:c1:cb:bd:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=a18e6f67341de2e57b65a3f662ad1c1a87cba3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:f2:26:22:e9:0d:59:d2:8e:7f:19:b3:45:
3e:55:af:d0:48:a7:e7:4e:f0:d5:be:b2:62:82:50:
11:fa:4f:15:bc:2d:68:03:72:7d:2e:7b:5e:8d:dc:
f1:89:83:f6:40:5c:21:ad:a8:32:8e:8b:4d:c3:08:
a3:37:1a:ae:c2:e9:55:62:7d:09:66:89:2e:06:0c:
62:40:3f:fd:30:5d:c2:6b:a3:36:1c:28:43:58:15:
ab:b3:42:a2:4f:f5:0e:63:5b:fe:47:26:a9:a8:78:
19:7c:2c:c0:c8:0b:f2:2b:eb:94:dc:10:cf:1b:f9:
90:8b:28:b4:2a:f0:53:99:d6:2a:c1:9b:0f:ce:50:
18:7e:3d:7a:ed:b1:df:7f:78:3d:ea:30:6b:d5:a0:
fa:15:47:75:80:81:c6:04:b3:2b:2b:f4:50:7f:72:
7e:e0:7b:a9:bb:3b:13:91:1a:05:f6:f6:0e:4d:a8:
4e:cb:93:bd:b0:aa:15:b0:77:e0:cc:25:4c:9a:e1:
88:be:be:6e:19:28:31:44:3f:dd:d6:45:6a:31:1e:
d5:e5:19:3a:41:93:ac:38:e1:9d:d0:68:aa:de:fc:
2a:1d:e9:cf:94:d1:02:0d:67:81:ba:b4:60:43:9d:
62:f6:ff:4a:26:c3:69:91:ad:dd:85:83:db:bb:bf:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:6F:67:34:1D:E2:E5:7B:65:A3:F6:62:AD:1C:1A:87:CB:A3:AA
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ed:8a:46:45:b0:30:34:33:64:60:49:a0:12:26:aa:40:98:
ea:01:f4:f3:41:3f:55:5d:bd:63:35:de:c0:cf:8d:12:45:20:
42:1d:4e:5a:74:f0:b4:a4:3d:59:c3:7e:b9:af:30:9a:ef:ed:
91:1f:5e:a6:a2:dc:6c:53:6b:e3:25:18:db:88:cd:0d:04:56:
55:e8:2f:d7:1a:ca:bd:73:cf:1f:9b:1b:8b:29:25:94:e3:46:
5e:54:10:d2:37:95:6a:d6:57:57:a0:fb:39:91:ff:bd:b0:34:
dd:b9:96:a5:34:f4:e1:1e:9e:d6:12:4d:7e:aa:70:0e:90:b4:
7f:6f:1b:53:3b:52:81:04:49:a8:22:01:6f:e1:64:bc:e6:c6:
3d:bc:09:b8:da:3d:49:07:42:f4:15:cd:23:89:78:e3:84:7b:
01:4a:79:cb:ee:30:72:56:3a:27:3e:f5:b4:ae:ca:e1:73:d4:
19:76:bf:f2:16:a1:b8:e6:ed:86:a8:46:bd:8c:94:5e:e9:2a:
58:4d:79:df:85:39:83:ee:0b:4f:49:fd:3f:89:ed:b2:4f:40:
be:05:f8:48:da:f0:ac:37:60:05:dc:c4:5a:13:48:66:61:3b:
e0:7e:8f:5d:a2:ba:57:63:bd:d7:d6:ee:50:e8:0b:85:b0:d9:
51:2d:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:58 2026 by rpki-client