Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: IR+hIwucdNOJIyjVLRuqvyARVeOwXfleTYFTaWz5wws=
Subject key identifier: 8E:A7:F9:E0:89:18:55:B5:16:54:05:ED:AD:11:3E:67:73:12:C6:89
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01A0EDE68758E30E4552501227037DBD14D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 16:01:43 +0000
Manifest this update: Tue 29 Sep 2026 16:01:43 +0000
Manifest next update: Wed 30 Sep 2026 16:01:43 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: FoDz0pgtmVbsO3gRgt1wSJSwd7dpwlH196gO3DjV1LY=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:87:58:e3:0e:45:52:50:12:27:03:7d:bd:14:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Sep 29 16:01:43 2026 GMT
Not After : Sep 30 16:01:43 2026 GMT
Subject: CN=8ea7f9e0891855b5165405edad113e677312c689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:b9:c5:8e:df:a4:b5:6b:53:1e:29:b7:f1:
30:00:48:9b:cf:12:d4:74:43:b6:b2:b2:7d:4d:b7:
32:1c:a9:36:51:06:08:fc:b7:59:71:43:ca:63:9d:
23:5e:7c:b3:b3:b5:76:0f:4f:90:58:3c:d7:4f:ae:
a8:05:6f:b3:97:2f:e7:9b:a6:61:aa:59:98:6e:63:
21:7d:11:aa:3a:01:9b:96:1b:d0:89:0b:64:e6:03:
1d:87:47:9f:c5:a5:f0:30:a3:e2:eb:6b:aa:b3:74:
bd:3f:b4:73:4e:d9:9e:f9:98:06:21:70:40:a6:b8:
f7:c0:c3:dd:a6:17:e2:77:12:1c:51:41:8c:82:e0:
07:2a:68:60:de:6a:85:73:a1:6f:dc:a2:71:6e:9e:
d9:83:6a:0e:68:3b:d0:a7:54:bb:8b:4c:56:95:97:
05:6d:54:60:59:8d:0b:ad:14:d0:31:29:fb:78:8c:
ec:fa:3a:8a:f0:18:65:1c:7b:c5:4b:47:e2:e3:a2:
38:3c:49:e7:43:9b:87:4b:ab:f8:da:73:a6:a4:80:
0a:03:f7:c5:15:55:c3:ad:13:03:cc:42:b4:32:29:
e8:ec:0f:eb:b3:b2:2b:52:ac:17:5b:ba:3a:9d:1a:
9a:ba:7a:7e:82:ad:6e:c1:31:47:cc:26:84:07:d0:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:F9:E0:89:18:55:B5:16:54:05:ED:AD:11:3E:67:73:12:C6:89
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:a1:9f:c0:aa:61:ff:88:17:b3:2c:a6:21:82:95:56:35:
2f:af:a7:16:4a:d7:d8:22:98:a2:9f:71:ed:33:fb:1d:85:de:
b2:ab:7b:b9:9a:c8:fe:83:49:b0:17:37:74:dd:39:3a:a5:55:
20:64:cf:ff:a4:c6:6a:8d:9b:a6:c8:ac:96:a2:dd:b7:b7:3f:
21:85:b8:39:a5:2b:7e:77:e2:43:2c:79:32:01:a1:32:e6:91:
33:60:de:99:af:72:17:69:aa:7b:40:b1:ac:4e:f6:47:17:00:
cc:19:b8:70:08:55:f2:2b:27:6a:bd:45:73:17:36:d9:f4:4a:
b7:98:d0:5e:dc:50:09:ab:1a:51:f0:d3:83:20:25:1e:66:7f:
90:76:9e:f9:bd:e0:a4:2e:36:6b:40:1f:12:b0:63:df:96:90:
62:4c:bd:fb:9a:a0:ea:5a:ec:da:d1:64:ac:61:fa:a7:8b:2a:
90:9b:07:89:7e:62:e7:74:c2:77:28:36:a9:2e:0d:b5:4b:e1:
12:85:fc:b3:00:e3:24:13:5b:8d:1f:0a:ac:28:bb:4f:39:7d:
64:46:30:7f:98:a6:77:2e:e6:48:c1:a4:b6:b5:2b:06:f4:9d:
0b:a7:09:4c:40:9f:c2:18:15:c4:e2:7d:85:8a:b2:39:8b:41:
8c:c3:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:06:42 2026 by rpki-client