Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: 4xTgiWRTGuS8Py7pvBoawmFqquZu+Z5MFxXh7VXntNw=
Subject key identifier: 33:1A:F7:E4:CB:B1:E2:C9:2F:EB:6B:A1:56:6D:80:6E:AB:88:00:C4
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01A004393FC30B6D6C14B9AF20FD420B06A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 07:00:55 +0000
Manifest this update: Sat 15 Aug 2026 07:00:55 +0000
Manifest next update: Sun 16 Aug 2026 07:00:55 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: xySybJw7CxCwD31zCJrGkK/kYbZRFA2zV00Rj4a7Fuk=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:3f:c3:0b:6d:6c:14:b9:af:20:fd:42:0b:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Aug 15 07:00:55 2026 GMT
Not After : Aug 16 07:00:55 2026 GMT
Subject: CN=331af7e4cbb1e2c92feb6ba1566d806eab8800c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:0c:ee:c4:9f:ac:a2:20:e9:76:8d:4c:92:
95:88:9e:3c:f9:81:07:20:3e:e4:b0:30:1b:52:f3:
37:7e:01:00:9d:58:45:1e:d3:2a:86:da:46:c9:5a:
b9:3a:f6:4a:63:33:49:8e:3b:a4:ad:66:95:20:80:
43:34:76:c8:80:31:39:78:02:89:b2:29:55:66:4e:
ae:06:b9:c0:38:67:dd:05:3b:24:ab:fb:e2:3d:86:
33:84:d7:6e:d2:b6:ac:f7:e9:c2:ee:d6:2f:6d:45:
16:ec:11:87:ba:5b:b9:cc:78:69:ee:da:35:e2:5c:
a2:b2:e8:cf:66:c9:fa:38:26:5f:d7:3b:0e:92:c8:
6a:66:a4:72:3f:cb:32:d7:6a:81:a1:35:12:3a:b1:
ea:f0:5a:07:ae:3c:55:d6:61:71:72:45:d3:38:00:
45:b7:2d:da:bb:34:ed:bc:c5:9c:93:da:d5:ef:76:
e7:e2:cc:10:33:52:9f:7f:5c:31:ec:f2:9b:a1:ff:
6c:d1:ff:62:23:92:6c:ad:36:5e:ab:c7:4f:3c:42:
20:1b:14:5d:c7:bd:c3:fc:0f:cc:6e:ce:cc:c8:ef:
83:cd:c4:86:59:02:17:3d:a3:34:ca:f0:fa:43:76:
5d:dc:3f:20:f3:97:f3:75:fb:3e:4c:30:76:12:57:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:F7:E4:CB:B1:E2:C9:2F:EB:6B:A1:56:6D:80:6E:AB:88:00:C4
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0d:14:5c:f0:f5:96:5e:23:c2:cb:8b:7a:85:75:ca:38:73:
85:55:96:9e:37:cc:ad:18:43:7e:cc:2d:c1:09:f3:90:d4:69:
81:89:1a:cf:79:e0:61:82:3f:28:69:c4:da:13:d3:87:f8:26:
f0:65:a0:f1:74:ab:25:4e:7b:60:95:cf:32:41:0a:44:2a:ef:
2f:50:f0:29:3a:d9:8d:f6:1f:7f:b2:ee:ed:44:6e:fd:0c:51:
74:df:ce:5f:83:8f:1c:d6:2c:a4:05:65:66:00:f8:b3:42:4c:
63:09:1c:51:c1:8a:54:b7:35:33:41:a6:aa:44:e0:e6:03:c0:
4c:07:d7:c3:49:30:7f:1d:14:9a:27:69:13:e2:96:04:7c:92:
1a:6c:f5:8d:3b:7a:99:be:a6:d0:69:76:78:c0:1b:bb:81:1d:
db:b1:20:18:a0:70:ae:a5:cb:c2:18:63:33:ac:e0:47:58:b6:
5e:a0:1d:1a:43:5f:82:0a:28:6c:85:ee:80:fe:0d:69:79:a0:
f5:b4:70:6d:c3:05:8b:ec:00:dc:bb:3e:95:42:a8:fb:8e:11:
5c:e6:29:04:e7:1f:fa:b6:39:58:85:55:23:d8:0d:f7:37:73:
f3:96:e0:09:f4:9e:e9:20:86:3e:60:89:68:e0:cf:3f:8f:4f:
4d:4c:42:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEOT/DC21sFLmvIP1CCwalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3
OTZjMzYwHhcNMjYwODE1MDcwMDU1WhcNMjYwODE2MDcwMDU1WjAzMTEwLwYDVQQD
EygzMzFhZjdlNGNiYjFlMmM5MmZlYjZiYTE1NjZkODA2ZWFiODgwMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70M7sSfrKIg6XaNTJKViJ48+YEH
ID7ksDAbUvM3fgEAnVhFHtMqhtpGyVq5OvZKYzNJjjukrWaVIIBDNHbIgDE5eAKJ
silVZk6uBrnAOGfdBTskq/viPYYzhNdu0ras9+nC7tYvbUUW7BGHulu5zHhp7to1
4lyisujPZsn6OCZf1zsOkshqZqRyP8sy12qBoTUSOrHq8FoHrjxV1mFxckXTOABF
ty3auzTtvMWck9rV73bn4swQM1Kff1wx7PKbof9s0f9iI5JsrTZeq8dPPEIgGxRd
x73D/A/Mbs7MyO+DzcSGWQIXPaM0yvD6Q3Zd3D8g85fzdfs+TDB2ElffLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMa9+TLseLJL+troVZtgG6riADEMB8GA1UdIwQY
MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt
NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm
LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA0UXPD1
ll4jwsuLeoV1yjhzhVWWnjfMrRhDfswtwQnzkNRpgYkaz3ngYYI/KGnE2hPTh/gm
8GWg8XSrJU57YJXPMkEKRCrvL1DwKTrZjfYff7Lu7URu/QxRdN/OX4OPHNYspAVl
ZgD4s0JMYwkcUcGKVLc1M0GmqkTg5gPATAfXw0kwfx0UmidpE+KWBHySGmz1jTt6
mb6m0Gl2eMAbu4Ed27EgGKBwrqXLwhhjM6zgR1i2XqAdGkNfggoobIXugP4NaXmg
9bRwbcMFi+wA3Ls+lUKo+44RXOYpBOcf+rY5WIVVI9gN9zdz85bgCfSe6SCGPmCJ
aODPP49PTUxCgA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 13:45:57 2026 by rpki-client