Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: sFEWx9OhB4cUXCbAbT09WU5udI69UJ+WqeWh50C8GUg=
Subject key identifier: 9A:44:C3:F3:2B:8A:96:C4:A5:84:9E:98:67:23:B0:30:DB:FD:AE:FA
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019E30E10AD2BBFC6DA62FD0AA118C94737A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 13:01:55 +0000
Manifest this update: Sat 16 May 2026 13:01:55 +0000
Manifest next update: Sun 17 May 2026 13:01:55 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: 0cLs1ypCQBB7zBRZtl2GoLFMKFIStAdZvU90pmv2hts=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e1:0a:d2:bb:fc:6d:a6:2f:d0:aa:11:8c:94:73:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: May 16 13:01:55 2026 GMT
Not After : May 17 13:01:55 2026 GMT
Subject: CN=9a44c3f32b8a96c4a5849e986723b030dbfdaefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:b3:fa:6c:77:d7:44:24:7a:2f:0a:29:69:
0f:07:b5:3e:af:98:0c:f6:ed:b6:33:e6:ad:ab:f5:
9f:a9:29:ef:25:a9:8c:32:6d:9c:61:c1:fd:f7:39:
7c:d8:fc:d0:bd:2b:20:68:48:0f:5d:cb:e5:df:28:
bb:20:52:93:a1:64:47:e2:20:80:a6:3b:32:5d:56:
ba:09:d0:ed:be:f6:f1:a1:e6:6a:69:86:2a:b4:69:
bf:a7:c7:db:ae:10:33:8a:d5:b7:a1:ca:2f:96:af:
eb:e7:08:4b:2c:ab:56:05:5f:cb:12:05:04:d9:01:
22:11:b2:36:0b:f9:e0:ef:d0:62:13:d7:35:44:05:
1c:51:b1:25:13:fe:36:53:3a:16:80:7a:a3:a2:c2:
fb:4e:4a:32:1b:cc:ff:0c:a4:46:40:13:43:ee:68:
4c:c7:38:71:a1:da:80:b4:aa:df:7a:97:09:f3:b4:
9b:13:e0:c3:70:0b:32:cd:f3:e0:da:fe:a8:87:e6:
76:31:13:d3:cb:c7:78:d8:8e:b7:18:ea:48:3e:d5:
cb:6f:4d:87:f8:66:10:25:63:bb:bc:9e:ea:7e:0d:
3e:70:ce:1d:1e:7a:cd:3e:04:60:29:7b:d8:9e:20:
e7:64:cd:15:3e:87:20:ef:85:71:a7:fa:6d:41:11:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:C3:F3:2B:8A:96:C4:A5:84:9E:98:67:23:B0:30:DB:FD:AE:FA
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:4e:5f:cb:19:01:26:2c:24:e2:f6:be:b9:8c:69:6e:cc:
d9:9a:0f:bb:2e:2b:99:10:0d:64:4f:ba:38:c0:15:a0:b5:9a:
c0:1c:0e:b3:0f:b5:cb:e4:cd:1c:98:9f:b2:c3:70:d0:0a:4d:
e9:97:62:dd:c1:66:dd:b4:e6:fa:c5:80:be:75:d5:27:83:c4:
28:eb:72:74:36:b4:cd:ac:6c:be:f1:ef:d9:a3:11:cf:03:27:
ae:03:06:39:d2:64:71:98:f1:6c:18:20:b4:a9:c8:01:23:6a:
5f:62:c7:1d:41:e6:d5:05:a4:0f:ee:06:10:58:f4:07:1f:7e:
04:7d:9a:dd:85:18:47:70:d6:a8:f8:4e:05:a7:d4:b6:86:f0:
1c:c7:40:3e:86:b8:26:39:5f:63:88:ba:c3:a2:6d:32:9c:33:
5e:02:e2:2b:8c:75:e6:1f:96:49:25:da:72:d9:83:07:f3:cd:
28:e1:b2:5d:ed:ea:e8:96:4e:4d:ac:1c:e9:2e:60:ae:93:49:
16:dc:79:41:5e:d4:a9:a7:9c:01:01:6c:a1:11:74:c0:c7:49:
d2:9a:c1:60:a3:65:7b:2d:28:f2:6d:9b:1c:fb:cf:06:36:f7:
20:db:08:b4:00:57:0b:9f:fa:f6:f5:cb:9a:9b:c9:1d:ea:b8:
34:bc:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:08 2026 by rpki-client