Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: gPguFgLUTxI4ruIjPVlDOIDU1YM4wCmfgCRIDr9NPkw=
Subject key identifier: AE:C3:41:29:6A:30:A4:6B:6E:40:47:9E:3D:4F:24:6A:88:B8:B7:A9
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019D39AF75A82288ADEDC0D2CD8F1AB6D711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: 7zfsg2iHJYM7P9ZkKdIqx8aE+JPiDnbJkNWJfINHEGw=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:75:a8:22:88:ad:ed:c0:d2:cd:8f:1a:b6:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=aec341296a30a46b6e40479e3d4f246a88b8b7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:0f:31:c1:aa:7f:4b:79:6b:27:4f:2e:a6:
d2:50:ea:5b:57:a8:7b:09:d6:f9:3a:8d:e5:f3:7d:
d8:30:e4:51:06:7d:c9:04:cc:a6:42:c3:9c:fd:ab:
1f:56:19:f1:75:36:48:f6:75:40:6d:fd:47:a1:1a:
48:93:ed:1c:a0:44:4a:48:f7:7b:f9:00:b2:27:42:
2b:37:e6:30:42:f7:5d:8b:81:4b:9d:3a:2b:52:27:
27:0e:96:44:dd:a1:bf:71:89:7e:f9:03:93:00:dc:
42:64:dc:50:ab:4d:04:c8:64:d4:13:9d:56:4b:09:
c9:66:b2:4e:7f:fa:b7:8e:40:32:2a:22:3d:4d:8e:
d6:a4:b2:66:87:75:ba:14:35:6a:0a:94:26:f3:74:
51:70:3a:a9:0b:ba:5e:bd:c6:89:d8:66:84:c2:d5:
af:de:03:d2:25:3d:47:59:a2:6a:01:54:97:f5:7a:
9b:7a:57:d1:1c:a2:ec:cc:63:fe:8c:26:27:25:03:
0c:39:53:54:22:5e:b4:08:b4:29:5a:1b:cf:53:99:
48:13:6a:52:13:ca:0c:a2:c8:ab:0f:70:6f:49:91:
5e:8e:78:c6:a3:aa:76:27:11:61:fd:7a:86:5a:af:
cb:bf:cc:b4:59:af:36:c1:b8:da:23:02:f4:54:11:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:41:29:6A:30:A4:6B:6E:40:47:9E:3D:4F:24:6A:88:B8:B7:A9
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:0e:65:25:45:c2:c7:77:ad:74:6d:44:6c:7c:de:76:46:
b1:2e:a3:78:ff:ba:2d:9c:ac:81:da:f3:8b:9c:a3:07:1e:de:
7c:fc:a9:a6:7f:52:38:ae:a0:11:da:c8:bd:c0:ad:8b:a5:bc:
e1:9a:8f:55:c1:d8:77:74:10:de:5e:de:12:87:a2:8e:5f:d1:
5f:2d:94:0b:ae:e5:00:75:77:53:03:56:b0:b5:b7:7a:15:5a:
6a:cd:77:26:b4:38:ad:93:d9:19:1d:ac:3d:43:e1:dc:4d:6e:
33:7a:04:01:5b:65:27:fa:40:81:bf:dc:ab:09:b1:11:7e:28:
3c:9a:c0:09:03:9d:b4:46:ae:ff:02:16:d1:30:cb:df:1a:29:
6c:fb:83:2f:11:54:4d:0a:8e:6c:c7:e8:01:c9:18:7c:d0:95:
3a:25:a0:b6:67:d2:53:f0:89:d6:bd:e2:de:2d:0d:1c:67:92:
ad:67:b8:ae:6f:af:70:83:4c:97:fb:81:ae:02:f5:59:7b:f3:
d3:ff:80:1b:34:68:e8:99:60:d6:83:57:24:0f:98:29:12:cd:
57:39:07:f2:29:69:c9:ec:cd:92:85:76:55:7d:0c:06:d1:b5:
9e:62:85:02:ea:94:f7:79:05:99:7c:35:c5:4d:57:84:c8:c7:
b0:03:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:23 2026 by rpki-client