Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: a3sX1nWQJGw5WXDbL2RphCY8iTasUCOYl5JRDzkWABA=
Subject key identifier: 72:BB:6F:88:0C:9D:E1:74:0A:04:EE:CD:B7:AF:AE:95:18:F1:89:9E
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019D284DF0FEEB03BF1D0498757F676EB054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: wGuUOAaTxLgbfri7AmNWYi1ZP0r62hYVthU22yuvfuY=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f0:fe:eb:03:bf:1d:04:98:75:7f:67:6e:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=72bb6f880c9de1740a04eecdb7afae9518f1899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:d2:4c:61:89:0a:00:e2:15:14:f1:1e:fd:
ea:7b:ef:43:8c:11:14:db:f3:7a:fa:10:ec:33:b9:
86:56:70:03:60:e6:56:e4:5a:cc:56:3f:ae:58:4e:
9f:c0:26:ac:28:90:15:02:9f:54:96:ae:86:b7:12:
8a:1b:80:17:c8:cc:b6:6d:95:24:e4:81:21:e2:87:
61:75:e7:d4:10:0d:a6:10:58:25:85:f8:22:aa:8e:
13:d3:8d:ef:29:09:16:e9:b4:6c:8d:b8:f6:59:23:
cd:bf:a4:0d:24:05:bd:0d:73:26:72:b3:fc:0c:4c:
c1:e0:b8:10:2f:59:0d:61:b1:61:53:c8:50:66:c2:
24:b9:d9:fa:eb:73:44:ca:d3:f7:ee:42:b6:3e:86:
49:a3:63:51:30:24:a9:3b:c2:7c:5e:e4:82:08:5e:
b5:12:34:66:74:c2:5f:b9:46:3d:ae:f7:72:1f:4a:
bd:26:f7:4e:95:28:22:d5:f1:da:9f:75:2e:07:52:
27:47:c7:4c:d7:24:57:2d:13:29:5e:0a:e7:dc:0f:
1d:d0:68:c9:e4:99:d5:49:3b:12:0c:94:db:c7:b2:
3e:aa:d1:34:50:28:04:c1:9d:4f:3a:e5:6f:41:e2:
8e:e2:80:37:2f:fb:23:25:65:99:ef:59:ff:80:5d:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:6F:88:0C:9D:E1:74:0A:04:EE:CD:B7:AF:AE:95:18:F1:89:9E
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:01:78:03:75:6f:6d:ad:f3:30:3f:19:42:18:9e:e7:7e:
4e:79:27:ce:bb:2b:e7:bb:59:88:9b:cb:6f:ac:f4:33:b0:95:
a5:55:d9:39:e3:68:45:0f:bf:0e:fb:e9:6e:14:98:52:9f:dd:
b3:3b:b2:6a:68:65:5d:79:36:b8:6a:4e:d6:34:89:37:2b:45:
be:0d:3c:50:de:87:a9:87:b2:be:89:60:2f:ee:98:cf:f9:00:
8b:62:35:61:da:20:49:5e:21:b9:6c:e7:e5:d2:48:7e:df:60:
75:0d:40:41:9d:0e:ca:a9:d8:cb:be:c1:be:72:06:2f:36:5e:
bf:f6:6e:25:b0:9f:f6:7c:b6:14:d8:fa:4f:1e:34:88:44:b3:
bd:10:91:31:0c:02:9c:c8:f2:76:df:da:bf:51:51:a4:04:05:
0d:22:b2:ef:03:d0:05:61:dc:ee:fb:fd:fd:9a:fa:58:81:3b:
9f:12:4f:5b:8b:75:bc:78:7c:ac:05:bc:0c:f9:bb:c1:8a:a2:
cf:10:ef:52:83:00:55:65:8e:d6:22:7d:20:cd:89:0e:30:7d:
4e:5d:47:08:df:4c:8f:f9:fa:4f:d9:cc:01:ce:d4:fd:d0:3c:
d8:e8:d8:e9:29:e4:ee:f7:39:05:d7:82:64:1a:97:43:51:53:
c7:01:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:25 2026 by rpki-client