Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: jpG47fYcvdMv1r3O4n2abW6XgVyfdhp1fbhkK+JsbPE=
Subject key identifier: 28:8E:36:62:2B:A0:E5:2A:86:D1:53:06:4B:56:79:71:6C:12:57:B8
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019F92483A35EDFE26BC0FF5C418CC44E438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:34 +0000
Manifest this update: Fri 24 Jul 2026 04:00:34 +0000
Manifest next update: Sat 25 Jul 2026 04:00:34 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: f1JCUGJzo3hecJuZjEgusvYK3Q27dkyZ8aGT+YazAXw=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:3a:35:ed:fe:26:bc:0f:f5:c4:18:cc:44:e4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jul 24 04:00:34 2026 GMT
Not After : Jul 25 04:00:34 2026 GMT
Subject: CN=288e36622ba0e52a86d153064b5679716c1257b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fe:46:25:40:e5:94:7d:47:02:78:19:16:20:
a6:a7:48:ea:2a:41:4d:7f:ce:35:32:36:91:d5:e4:
bc:93:85:5e:e7:22:e8:c3:da:93:5d:7d:53:c4:eb:
0b:fe:20:a2:88:a1:87:36:3b:36:24:94:cc:1e:03:
50:de:b8:ca:8b:82:ec:75:13:39:02:c9:a9:6d:ce:
36:64:22:a3:b5:fd:68:ec:1d:48:d5:98:c3:00:2e:
0e:bc:9d:aa:0b:06:ab:92:fc:0f:d7:43:90:52:5d:
03:56:a1:1b:ed:14:8f:fd:fc:e9:b3:e0:bc:25:c3:
a3:d5:c0:e7:ba:ec:59:2c:ee:54:d3:ad:a6:11:58:
6e:23:a8:ea:c8:bd:50:fc:4c:ae:f5:b8:c2:0a:38:
ed:3e:81:76:c4:a8:b6:d0:af:c9:8c:a2:50:6d:a7:
90:55:5b:04:ce:d0:ad:39:c4:d9:2f:4f:b1:b0:9e:
46:7e:b8:e7:da:2b:29:69:b0:06:74:b3:0e:4d:03:
9e:e7:7a:c0:72:98:8c:44:65:dc:4a:a6:73:f3:bd:
5a:c0:b2:c1:90:d3:59:a0:43:95:56:d9:26:a4:db:
86:63:eb:1c:f3:78:b1:16:ac:02:5c:ff:76:80:c2:
39:0c:ce:b4:59:b9:39:32:b7:a8:cd:a6:3b:eb:4a:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:36:62:2B:A0:E5:2A:86:D1:53:06:4B:56:79:71:6C:12:57:B8
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:00:a3:24:22:38:1a:b7:f3:71:b8:63:76:f3:58:b4:7d:
6f:be:7b:a0:00:a4:16:4a:c3:88:a8:c6:a7:3c:59:be:78:a3:
0b:25:e5:66:55:92:70:22:e1:72:6d:21:f3:a7:20:05:de:23:
76:b8:6c:6a:73:9a:9b:99:d2:92:b0:8a:59:30:73:93:af:21:
d6:2a:fb:3f:fc:40:ec:a5:0b:ec:bd:19:80:5f:7b:70:95:32:
04:68:e8:55:41:39:a2:44:30:07:1f:67:56:35:7e:11:5e:c0:
b1:9d:49:1d:2a:5d:bf:3b:af:4d:8d:50:12:94:9c:e4:70:4b:
39:9f:1e:1b:04:37:fb:9d:06:fc:05:71:fe:fe:a8:43:ee:c8:
d8:09:21:11:6a:cb:56:31:15:69:a3:76:c6:c3:a7:98:66:76:
7d:3b:8e:f5:ee:8f:18:da:69:0f:ee:a1:b2:f5:ab:39:c3:68:
64:7a:59:b0:96:56:01:85:6f:1e:d5:a1:ee:42:4b:cb:80:44:
2e:41:75:93:10:18:c9:cd:2d:22:9a:d3:74:e9:44:92:9b:e0:
93:20:7d:53:8c:72:04:ec:40:f0:43:85:36:1a:40:33:dc:16:
fe:84:8e:61:5c:79:2c:2f:9c:cd:6e:9a:36:1b:1b:b7:6e:f3:
01:57:80:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSDo17f4mvA/1xBjMROQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3
OTZjMzYwHhcNMjYwNzI0MDQwMDM0WhcNMjYwNzI1MDQwMDM0WjAzMTEwLwYDVQQD
EygyODhlMzY2MjJiYTBlNTJhODZkMTUzMDY0YjU2Nzk3MTZjMTI1N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9v5GJUDllH1HAngZFiCmp0jqKkFN
f841MjaR1eS8k4Ve5yLow9qTXX1TxOsL/iCiiKGHNjs2JJTMHgNQ3rjKi4LsdRM5
Asmpbc42ZCKjtf1o7B1I1ZjDAC4OvJ2qCwarkvwP10OQUl0DVqEb7RSP/fzps+C8
JcOj1cDnuuxZLO5U062mEVhuI6jqyL1Q/Eyu9bjCCjjtPoF2xKi20K/JjKJQbaeQ
VVsEztCtOcTZL0+xsJ5Gfrjn2ispabAGdLMOTQOe53rAcpiMRGXcSqZz871awLLB
kNNZoEOVVtkmpNuGY+sc83ixFqwCXP92gMI5DM60Wbk5MreozaY760r+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiONmIroOUqhtFTBktWeXFsEle4MB8GA1UdIwQY
MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt
NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm
LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB4AoyQi
OBq383G4Y3bzWLR9b757oACkFkrDiKjGpzxZvnijCyXlZlWScCLhcm0h86cgBd4j
drhsanOam5nSkrCKWTBzk68h1ir7P/xA7KUL7L0ZgF97cJUyBGjoVUE5okQwBx9n
VjV+EV7AsZ1JHSpdvzuvTY1QEpSc5HBLOZ8eGwQ3+50G/AVx/v6oQ+7I2AkhEWrL
VjEVaaN2xsOnmGZ2fTuO9e6PGNppD+6hsvWrOcNoZHpZsJZWAYVvHtWh7kJLy4BE
LkF1kxAYyc0tIprTdOlEkpvgkyB9U4xyBOxA8EOFNhpAM9wW/oSOYVx5LC+czW6a
Nhsbt27zAVeAPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:30 2026 by rpki-client