Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: fUW69tcnCQIFIY1WjdWCwwjl9LdO0EyH5LoAtnVecsw=
Subject key identifier: FF:44:D8:52:63:AF:2E:D9:A5:9F:04:A0:35:27:6F:9C:3E:38:63:A9
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019CACB584112F124FA94B136D6B27C934CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:42 +0000
Manifest this update: Mon 02 Mar 2026 04:01:42 +0000
Manifest next update: Tue 03 Mar 2026 04:01:42 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: zguuIFmIHA66n2vIzX2lRDdj/LoF8j6FkJW27pg+DZI=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:84:11:2f:12:4f:a9:4b:13:6d:6b:27:c9:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Mar 2 04:01:42 2026 GMT
Not After : Mar 3 04:01:42 2026 GMT
Subject: CN=ff44d85263af2ed9a59f04a035276f9c3e3863a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:1f:81:c5:e2:fa:a8:37:8f:b1:5b:6b:37:
9f:a6:48:c8:e4:91:db:26:37:c7:5c:99:84:31:e7:
cc:6b:ce:4e:05:cf:20:08:65:43:77:01:8d:c8:e7:
91:e7:42:97:26:1a:61:f1:60:d7:e4:d7:36:8c:04:
8d:6c:11:0a:1a:42:73:96:51:b8:75:8b:a0:90:96:
88:02:62:9b:a7:89:8e:2e:e2:58:e3:19:33:c9:d0:
48:04:bb:37:4f:e8:b4:da:b8:43:31:43:6f:f4:1f:
00:f7:88:22:65:56:72:e4:1b:b0:f0:e1:d7:89:0a:
bf:8b:e4:4d:8a:da:c7:67:cb:3a:f6:19:a9:7b:5e:
3a:0e:fa:62:78:16:b0:2c:41:2f:ae:9f:0b:9c:34:
b5:c3:7e:c1:bc:3d:72:9d:cf:18:62:90:25:0e:90:
ec:e4:bb:d3:0a:58:a8:65:f1:be:da:af:17:12:31:
b9:50:e8:b2:19:83:50:8e:80:6b:c6:7f:71:d4:eb:
50:d6:71:e4:04:94:87:29:2e:c6:df:86:c3:3d:27:
4d:3b:2a:26:e0:7d:5a:e8:cb:3e:b8:90:a2:5b:53:
d8:a3:61:f2:92:6f:5d:4a:ee:de:93:e1:e2:ae:26:
2f:91:a0:e4:8d:d2:4b:2f:df:eb:85:6e:77:70:8b:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:D8:52:63:AF:2E:D9:A5:9F:04:A0:35:27:6F:9C:3E:38:63:A9
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d2:c1:8e:02:90:a7:70:bd:3c:d0:e8:71:91:f6:01:64:22:
3f:fc:c1:11:e0:0d:65:8b:05:c4:81:6a:b6:ae:89:ea:32:f3:
7c:7a:a6:14:72:b4:e1:66:ad:b1:28:5f:55:ec:c0:f7:a0:bb:
c9:6d:03:80:77:70:a4:35:91:02:6a:83:d2:e4:31:d1:b8:8d:
00:2f:d3:50:7d:15:4c:88:33:f4:fe:34:21:c6:1f:6a:1c:8b:
14:09:f6:e1:97:5b:bf:9f:e2:ee:62:59:08:59:40:a6:ed:21:
60:71:2b:8f:da:be:68:ce:77:37:4c:4d:d8:b0:7d:ec:63:e8:
3c:96:56:4b:32:46:de:dc:d3:ae:95:ee:15:2a:ec:a1:1b:12:
ee:b2:a6:64:82:ef:d2:1f:9c:aa:dc:07:66:c7:74:78:a3:d3:
0e:a9:63:4e:60:49:3b:e0:51:1e:cf:18:ad:0f:1b:85:53:7c:
b2:be:1b:d8:9c:3e:34:d6:4e:46:2a:92:d9:30:40:18:dc:a1:
72:59:77:bb:8b:85:a3:88:7d:2e:74:de:0b:3b:8c:99:db:42:
83:fe:b7:69:1e:90:bf:49:69:8b:ed:bc:88:c5:a4:6c:4a:a9:
ad:b8:11:74:d6:d3:77:49:db:e7:73:5e:59:b4:f8:dd:8d:72:
11:63:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:50 2026 by rpki-client