Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: O2GgPjE0wZzJ2WMwbBFXGlAU8Xw2XCQiVxWWpK1Ha00=
Subject key identifier: 8E:B2:FB:C8:1F:CB:6C:EC:3D:92:53:7B:3A:A0:C9:ED:3B:4C:0A:EB
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01A1562ED8B4BA68513D5A6179635D63F547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 22:01:13 +0000
Manifest this update: Mon 19 Oct 2026 22:01:13 +0000
Manifest next update: Tue 20 Oct 2026 22:01:13 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: 3WcDv+L6CDLy5D+GrahFjDTHZNDuJK5CUVsXLfKpGpg=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2e:d8:b4:ba:68:51:3d:5a:61:79:63:5d:63:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Oct 19 22:01:13 2026 GMT
Not After : Oct 20 22:01:13 2026 GMT
Subject: CN=8eb2fbc81fcb6cec3d92537b3aa0c9ed3b4c0aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:3e:70:4c:f3:4e:6b:11:9b:f2:7d:b8:5c:
9a:f1:9c:8b:d9:9f:ec:db:cc:81:fa:4c:4f:74:9b:
23:f5:93:41:e4:a4:44:03:40:0a:b6:05:85:37:24:
eb:e5:47:cc:31:2c:d3:8c:0b:e1:0e:26:61:54:75:
fe:5d:73:4b:d5:47:31:57:99:73:b2:ad:92:2f:39:
ee:2f:3e:1f:ef:91:44:81:cc:c6:48:2d:1c:70:d6:
6c:a3:3c:0f:dd:bc:da:b0:7c:81:85:10:19:15:a0:
07:b6:82:40:a3:63:62:90:ea:38:b6:a7:be:11:ab:
2d:d3:ad:ee:77:74:de:3f:f6:9d:4b:9a:e1:44:6a:
8f:09:4f:9a:ad:02:96:f7:51:1d:d3:11:c8:2d:45:
82:cb:7b:16:f0:64:6f:d6:c9:f5:ed:40:73:6e:27:
a5:3d:6d:47:c4:37:8d:99:4e:19:de:a7:2a:e0:cb:
1d:e6:f8:d8:4e:9f:82:73:f9:18:b8:ed:f3:d2:4a:
1e:cc:21:f0:b5:55:26:fd:ed:69:32:67:ab:30:e1:
e8:0f:e1:f0:1f:88:e6:f2:75:25:1f:d8:bc:c0:d7:
dc:68:2b:24:50:e7:3f:ab:24:17:b2:08:61:fe:4d:
67:53:73:10:20:ea:03:8d:c7:4b:f4:45:48:db:ef:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:FB:C8:1F:CB:6C:EC:3D:92:53:7B:3A:A0:C9:ED:3B:4C:0A:EB
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:12:be:60:e9:df:4c:f0:a3:d8:c5:b7:91:3f:19:3c:4a:d2:
df:23:b8:04:3f:16:cb:b4:0e:32:d9:d4:f1:62:fa:a9:15:fc:
91:fb:66:94:81:7a:e1:28:6b:20:e8:b4:41:37:d0:29:b0:af:
1c:fc:20:b2:6f:7b:e0:e4:17:c6:bb:7f:dd:2e:f0:14:ba:34:
d1:cd:89:37:8b:f9:32:1e:9a:5d:20:33:cc:a3:30:ca:2c:8f:
5f:a0:bf:ad:dd:24:87:95:00:5a:3f:b2:33:83:6f:f1:83:e1:
2f:26:63:5f:b5:83:e5:ee:06:b0:ab:18:24:b9:cd:34:ac:a6:
7c:49:0a:04:19:45:5a:4c:a8:af:0a:2b:37:8f:a4:0c:c4:41:
77:ca:92:f6:30:f4:93:98:c4:28:87:63:b8:c6:4c:52:c7:44:
a1:0e:94:8a:b1:66:cd:74:ea:13:ee:a5:48:73:cc:58:6c:3c:
bf:7f:92:b9:7b:fb:cc:b8:c8:2d:c2:21:66:a7:16:98:c8:86:
73:af:9b:e0:b1:88:27:64:8d:06:a6:1b:f5:87:05:20:74:2e:
48:07:3d:e9:dd:6a:98:2b:1a:70:97:72:cf:8c:2f:b9:01:d7:
a9:fd:47:49:2d:81:ee:61:24:85:87:fc:0e:62:6f:2b:f9:a9:
0a:c7:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:50:33 2026 by rpki-client