Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: w/1j6vE2LzWJeKzbbBBAmKpJj/9Inc2QA7iyijINy7o=
Subject key identifier: D3:5E:8F:43:74:76:69:63:43:78:26:8F:CA:54:1C:7D:CF:8D:0D:22
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 01A179CC9D11D2E1D759906DEEBEAA08D477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0B40
Signing time: Mon 26 Oct 2026 20:00:15 +0000
Manifest this update: Mon 26 Oct 2026 20:00:15 +0000
Manifest next update: Tue 27 Oct 2026 20:00:15 +0000
Files and hashes: 1: 1JpN7FHKM4FO6E7uv4B84-IqbP0.roa (hash: LFF4bpL91df6PUePqFkpslW9FOtrELZ1z7Xtg08v9IQ=)
2: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: xGO09Vw5ow4ZLsi6tdc6hlIQjt3gTf1Oqbbfzv0hRcQ=)
3: wn1x2aB-Lfn86N9jiXh1kOUvXSM.roa (hash: dbPaBWuw+L0WIHkFjnCnHn6/cjAEfFC+oBh1Ybn4004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:9d:11:d2:e1:d7:59:90:6d:ee:be:aa:08:d4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Oct 26 20:00:15 2026 GMT
Not After : Oct 27 20:00:15 2026 GMT
Subject: CN=d35e8f43747669634378268fca541c7dcf8d0d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:d5:73:60:85:5d:a9:32:a4:7c:4c:ff:09:
f2:4f:85:8f:a3:83:56:6f:53:e2:04:cf:7e:34:14:
ea:88:86:f8:1f:d1:f4:ec:6e:f2:61:e9:a5:08:f1:
fe:44:f2:e4:59:af:44:68:8d:66:a0:aa:0d:43:c7:
35:06:ba:09:d4:41:b9:ce:59:9d:c8:ff:a5:93:b1:
86:86:4d:68:82:e8:6c:63:16:eb:bc:45:33:7c:83:
5d:87:a4:bd:17:61:fe:60:32:fe:e7:34:6a:6f:d4:
39:5e:64:52:b8:06:3d:53:c1:d4:fb:8f:35:1c:51:
82:5d:33:b2:52:24:b8:30:3c:96:36:3a:c7:12:0b:
65:9e:e2:58:31:13:3f:17:69:f6:92:9e:1d:d8:95:
ee:82:da:4c:92:b5:4c:30:11:ca:65:4e:dd:3f:70:
da:ff:cf:f1:3a:04:3e:a6:f8:8b:bc:4b:fb:c8:c4:
1b:2d:8a:52:b7:eb:8f:b9:11:2e:ed:98:2a:b6:96:
98:0c:34:a4:11:90:16:ce:ac:ca:52:a5:52:0c:39:
28:88:12:b2:ec:b5:d1:5b:a4:4d:0b:cf:a0:ce:47:
2a:14:87:20:8f:f2:21:01:e5:46:1f:f8:fc:d1:bd:
db:5d:e3:cd:7e:fb:72:5f:25:66:f5:9f:ed:44:bc:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:8F:43:74:76:69:63:43:78:26:8F:CA:54:1C:7D:CF:8D:0D:22
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:81:5c:57:eb:5f:f4:38:0c:63:ce:25:6b:0f:f5:4f:b0:d4:
ce:1b:c3:c1:31:60:52:3f:09:8b:9e:b6:5f:21:2f:bd:97:09:
91:14:39:77:88:47:80:12:f1:d6:60:82:28:6c:a9:4f:33:ba:
51:33:39:83:47:46:df:42:01:00:d9:18:5a:d7:d6:dd:29:e0:
09:54:da:06:a8:12:b2:12:29:3b:be:68:3b:af:c5:d6:84:2a:
27:94:ad:14:d8:ee:5f:4b:c9:d3:25:08:ea:41:08:5a:ff:19:
d1:52:2a:c6:fa:72:69:5f:33:a3:ba:01:0a:3e:9a:8a:69:57:
36:95:50:12:3d:26:f4:d3:e6:59:a9:07:8c:f8:ad:f2:b9:6a:
6e:3b:21:fa:a9:69:69:c1:22:d9:54:f8:c0:95:8c:20:b4:6c:
cc:8a:b8:ec:98:17:a5:ce:92:2c:a7:cb:49:8b:fc:97:4c:44:
0b:04:b5:67:ec:f8:dc:90:2b:75:9c:2c:4d:8a:73:de:86:f1:
15:a9:5e:8a:98:16:2c:c1:6d:c7:2c:a1:14:ee:93:c3:b9:47:
62:bf:c3:21:45:7c:a1:89:b1:0a:0e:9c:66:c0:ef:9a:e1:69:
b3:2f:5d:9d:b6:c2:d9:94:c2:a2:93:d6:6a:6d:1c:34:e8:69:
d9:60:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:38 2026 by rpki-client