Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: MB+DoQMtgGIPSSjC6/i30xOakh+/mo2x94RoQ4e7edU=
Subject key identifier: A2:7E:E7:1F:A3:94:80:4A:49:45:19:69:12:B2:A9:8C:2E:EA:88:6B
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01A0E061BC288FE7B270256487A755C04B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 01:01:36 +0000
Manifest this update: Sun 27 Sep 2026 01:01:36 +0000
Manifest next update: Mon 28 Sep 2026 01:01:36 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: U5BHC+8+1lEFN6JHPbaV1nZSZIG+Z6/O9jueIZzzAFA=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:bc:28:8f:e7:b2:70:25:64:87:a7:55:c0:4b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Sep 27 01:01:36 2026 GMT
Not After : Sep 28 01:01:36 2026 GMT
Subject: CN=a27ee71fa394804a4945196912b2a98c2eea886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:a7:7d:99:b1:4b:fd:09:17:60:3a:09:0f:
b4:0d:c8:72:b4:6c:9b:f5:6d:eb:3a:ad:8d:0c:15:
cd:a6:c5:07:ca:85:85:c8:bc:3b:af:ff:71:ce:3b:
99:a1:4d:4c:86:d1:5a:f8:fe:c1:4d:a4:e4:01:8c:
09:7d:a7:a0:eb:ac:d0:8a:02:3b:32:64:b0:18:2d:
02:05:39:84:68:45:fe:a1:61:8e:0a:76:18:47:f0:
ba:42:e0:47:49:1a:1d:2e:52:51:9e:d6:cb:de:b8:
75:72:7c:72:cc:73:a8:b7:1b:41:92:cc:fb:86:6e:
34:4c:cc:6a:8b:bb:31:e6:c1:30:f9:ee:19:74:4f:
d6:13:dd:45:83:91:dc:07:e5:bf:25:ee:62:d4:24:
e5:d9:f7:c8:cd:cf:c8:1b:db:d4:a3:cb:1e:b8:fe:
68:0b:fc:df:8f:5f:07:b5:c7:24:54:09:4d:26:de:
e1:01:f7:94:90:57:85:65:bb:5f:41:0e:8d:76:43:
73:9b:30:29:07:f1:1d:73:b3:13:6b:5f:3f:26:fe:
78:9c:32:5b:7f:1c:e1:d5:41:54:85:31:22:f8:21:
0f:8e:7c:67:b2:f6:7d:dd:4d:da:67:78:ea:be:de:
6c:e0:43:85:d5:f3:09:c9:36:77:97:f7:fa:85:d3:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:E7:1F:A3:94:80:4A:49:45:19:69:12:B2:A9:8C:2E:EA:88:6B
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:63:08:ec:5d:d9:31:d7:59:26:54:62:9b:b2:00:12:cf:
b1:bc:8e:32:f9:e0:dd:40:cc:d8:40:8f:f9:7e:9a:2f:f0:2c:
dd:cb:a4:54:4e:93:1c:c4:c3:2b:4d:7b:e9:be:89:48:4e:72:
ed:a5:a2:28:d9:0d:69:a9:bf:c7:5d:72:e4:cc:d8:bf:68:e6:
84:9c:dc:05:73:2e:73:5f:a2:92:23:a0:6e:f9:17:35:7f:b7:
0d:e9:b7:6d:bc:3e:cc:d5:f2:90:9a:6d:31:31:59:15:4f:9f:
96:a7:95:eb:b9:47:30:cd:44:c2:c2:94:31:83:46:5a:74:1a:
16:e8:14:ba:ba:19:10:d9:77:a4:8f:f6:a6:44:8f:36:31:b2:
eb:09:9d:94:c1:0b:e3:25:78:36:af:47:05:03:56:5b:d8:55:
67:89:61:4a:4d:d1:b6:14:d2:3b:5f:ec:64:49:f2:ff:09:2f:
f2:86:4d:7e:a0:69:fe:93:31:f0:52:77:29:3d:01:ad:09:77:
a5:bf:fa:b4:e4:53:5d:bd:52:b4:cd:ed:22:60:33:4c:d9:bd:
6e:7d:89:c3:b2:6d:13:99:0d:56:84:a8:98:f9:0f:f0:f5:6a:
72:0e:a0:75:2b:d6:bb:a3:2a:ed:72:5b:98:a9:a6:58:3d:b8:
5c:7c:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:55 2026 by rpki-client