Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: 8kD5RqEOfmQmuZXvVlyfMDYguNi4tImbCTp6AWZAM1s=
Subject key identifier: A8:4C:8B:47:EA:36:66:59:49:4E:07:BD:1F:4A:AF:72:A8:B7:61:EB
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019F1A8CF4F4D710437BD5676C15F1750B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 22:01:13 +0000
Manifest this update: Tue 30 Jun 2026 22:01:13 +0000
Manifest next update: Wed 01 Jul 2026 22:01:13 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: G8ntg0vkNApO12YWOOMKGdF0EPiZyHglnc4ybJz67e8=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8c:f4:f4:d7:10:43:7b:d5:67:6c:15:f1:75:0b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jun 30 22:01:13 2026 GMT
Not After : Jul 1 22:01:13 2026 GMT
Subject: CN=a84c8b47ea366659494e07bd1f4aaf72a8b761eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:9e:53:bb:1c:77:52:4e:3a:ce:d9:55:72:
7a:2c:bf:1e:51:0a:b4:83:5b:b6:96:15:20:01:54:
4b:b1:6e:26:ac:bf:50:63:2d:3e:72:33:02:b6:f7:
db:c5:37:04:09:3b:1b:58:5e:56:32:c9:97:90:6f:
73:8d:70:2a:0b:5f:16:81:73:c9:5a:1f:74:5e:ea:
b0:14:4c:73:0d:2e:87:f0:a2:c4:c6:ef:dd:ae:72:
36:75:65:44:d7:ac:10:f9:4a:d3:73:7d:dd:d2:85:
6b:87:bd:0c:d8:bd:5f:87:cf:00:e0:fe:06:02:7f:
9c:9c:e2:ed:18:42:ad:d6:5c:8c:3d:b8:c1:51:9f:
6f:12:6d:8d:ed:0a:83:8c:80:5e:f0:4a:c9:55:ed:
88:7e:da:37:2a:95:ca:59:3e:ca:06:5b:3b:a7:91:
ea:5f:74:bb:b6:40:95:91:e2:31:89:70:76:6f:36:
22:ae:f7:da:b1:72:c7:36:04:51:92:0e:3b:66:5e:
cb:0c:14:80:2c:6c:48:60:a0:61:c1:f8:b0:c2:f0:
97:d3:16:05:fb:4e:c1:d5:25:fe:f7:83:61:44:f6:
3b:3f:37:1d:df:78:68:38:ff:6e:f9:69:e4:03:55:
bc:5e:4e:02:fc:22:2e:35:dd:1c:07:af:a1:3c:e5:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:8B:47:EA:36:66:59:49:4E:07:BD:1F:4A:AF:72:A8:B7:61:EB
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3d:b1:22:a4:1a:ab:44:89:f8:52:3e:b1:96:dd:dc:79:56:
81:65:26:3b:61:8c:0a:ed:77:db:a0:bc:a0:27:30:a5:74:e2:
c9:f3:14:58:7c:97:bd:e6:73:99:f4:ab:d1:11:9c:89:67:d5:
1e:2c:4c:45:93:ef:5e:b9:ff:c8:17:68:b9:7c:84:0c:17:30:
eb:83:44:50:3b:3e:db:8c:ef:6e:76:82:e1:b1:e0:89:4c:ef:
9c:00:32:b1:b3:b2:50:cd:eb:f4:3c:8c:3d:ab:b9:86:12:12:
30:5e:6d:38:b1:03:88:0e:ae:d5:2a:54:e9:37:8c:19:65:40:
a7:c8:db:10:8c:af:2c:57:98:3d:e6:b4:8b:9f:d7:fb:fc:43:
ed:66:cf:b7:08:16:2f:5c:21:91:85:1d:90:06:19:96:94:26:
b0:77:08:7e:d7:0e:68:b9:57:da:de:45:1d:fe:95:2c:dd:44:
cd:fe:75:06:84:21:40:cf:7b:06:b5:25:19:b0:27:83:76:e5:
75:0a:69:c7:51:de:af:8c:66:21:fb:7a:68:a5:79:c9:1f:80:
19:c5:7c:67:0d:b1:d0:b3:86:11:68:cd:81:a4:74:44:cf:c3:
6a:11:b6:80:05:c6:02:3c:e3:24:47:1f:df:da:83:41:e7:7c:
05:45:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:33:20 2026 by rpki-client