Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: g2F77+pD1y0yuCytBpW3BaN5hrHTO5k4UXDk9mlZRSM=
Subject key identifier: 1D:00:D8:69:50:F4:98:9B:58:4A:7A:76:36:73:5E:9F:F1:D3:B1:B7
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019FAD51B240DA41C2EB426424B94EAF8CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 10:00:40 +0000
Manifest this update: Wed 29 Jul 2026 10:00:40 +0000
Manifest next update: Thu 30 Jul 2026 10:00:40 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: QIhDQ0qvFRqJhZlWFgtVte+G7l9/v43mZa2ymShzKBo=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:b2:40:da:41:c2:eb:42:64:24:b9:4e:af:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jul 29 10:00:40 2026 GMT
Not After : Jul 30 10:00:40 2026 GMT
Subject: CN=1d00d86950f4989b584a7a7636735e9ff1d3b1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:c6:22:5f:2f:e0:76:98:29:57:03:6f:f7:
ac:76:a2:e8:45:3d:8e:25:3d:c0:7f:fd:fa:16:66:
bf:34:40:b1:2f:16:9e:54:6b:8d:40:9a:bb:ea:e4:
5e:6c:3c:c6:79:f9:c4:70:77:cf:e1:a0:fd:78:5e:
f7:72:b1:fa:a1:e1:31:2d:a4:b4:f3:5e:14:13:5b:
6f:e0:fb:07:03:be:a1:a9:90:f8:48:1d:72:7b:eb:
34:a7:b7:bf:97:5c:4c:a0:59:38:a7:7c:05:25:c0:
ff:1e:8f:1b:33:c0:3d:af:ec:20:65:8e:80:d2:27:
42:c2:f1:0c:31:1a:b1:c3:81:1e:de:a3:79:96:d2:
f6:f6:f0:87:ee:bd:10:23:46:d5:b7:eb:4d:d3:b8:
51:d4:7c:dc:17:0e:6b:5c:86:c1:5b:3f:5b:1e:88:
70:20:8c:1b:3e:8c:3a:ee:1e:b8:da:b8:01:24:db:
e2:52:59:c2:82:59:b0:67:b0:eb:0f:ad:01:24:ec:
66:ed:50:02:0a:e2:5b:4f:ea:cb:70:00:87:55:10:
86:b7:15:fd:26:92:ad:16:0b:7f:73:e6:fb:9f:16:
f1:da:83:2e:cf:a9:9b:b7:30:fc:29:41:32:f9:e3:
fe:c3:e8:02:0d:c0:bb:c2:39:cc:53:0d:20:aa:90:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:00:D8:69:50:F4:98:9B:58:4A:7A:76:36:73:5E:9F:F1:D3:B1:B7
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:07:4c:91:d6:02:1d:f0:bf:05:1f:6e:c8:11:87:99:16:1c:
af:97:eb:70:6a:b9:dc:c9:05:85:fc:c1:13:07:bf:ee:04:48:
53:2f:23:48:58:8a:4b:04:a5:4d:10:de:59:f5:a2:17:1b:04:
0e:1e:d0:f2:a5:5c:52:74:f4:30:db:1c:94:23:51:55:c9:d8:
af:e8:20:7d:0d:64:cf:bf:ba:5c:85:2a:a6:07:76:36:b4:86:
1a:3a:48:61:74:ac:4e:26:41:3d:2a:bd:14:e9:30:d6:7a:61:
51:f8:e8:4c:a9:31:f7:45:00:5e:7c:70:5a:df:ce:ec:f0:80:
d4:8e:77:1d:5e:97:ec:46:1a:7e:34:30:1c:ed:55:41:32:69:
e7:81:84:3b:a4:5c:d9:a9:0e:dd:23:48:a8:2c:d7:b0:06:6e:
3d:c2:a9:bb:5e:07:c2:f7:04:6e:af:8c:a7:cb:0a:58:36:45:
d2:af:3d:fe:9c:57:8e:d1:b5:1d:a0:9a:3d:7f:6d:a6:2f:a9:
01:88:a2:8d:23:7e:00:65:a3:db:79:ac:c7:08:26:45:9c:85:
97:c2:81:ee:8c:14:e0:3b:e8:22:22:6b:07:05:9d:53:4d:0d:
d8:ca:03:43:4f:02:76:86:c1:7b:d9:bc:bb:a4:6f:ef:ea:d7:
b3:58:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:17 2026 by rpki-client