Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: Bpa0GsnqlKwM6r1+C9nNW18m0NdvZRANvNs5mIRc7NQ=
Subject key identifier: CE:90:B2:A3:05:D1:82:13:9D:B3:92:E4:A8:A7:5F:B2:C8:55:C2:8F
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01A0DA969477CAD85AFD673779E5D8F481E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 22:01:36 +0000
Manifest this update: Fri 25 Sep 2026 22:01:36 +0000
Manifest next update: Sat 26 Sep 2026 22:01:36 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: r/Y21KGpief3X52Ig50FMm6DrxJKASVGyceZJif6QxQ=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:94:77:ca:d8:5a:fd:67:37:79:e5:d8:f4:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Sep 25 22:01:36 2026 GMT
Not After : Sep 26 22:01:36 2026 GMT
Subject: CN=ce90b2a305d182139db392e4a8a75fb2c855c28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:2f:e6:00:0a:cd:84:20:97:69:11:be:2e:
25:40:96:83:f7:e0:23:6e:a4:f3:ce:6f:ae:e2:80:
34:a1:d9:84:29:c7:77:54:16:c0:87:1a:f0:8a:65:
94:cf:5d:f9:f8:71:63:5d:70:c2:36:c5:62:f2:33:
c7:a6:a8:24:bd:8c:4c:c1:52:aa:cc:60:85:f2:95:
96:b6:a0:57:79:0f:b4:84:d4:02:df:6f:53:25:8c:
c7:5a:b4:14:74:10:d0:1f:15:9f:91:56:9c:de:20:
91:f4:c0:96:90:e1:64:0c:8e:98:17:86:ee:a6:32:
63:ba:e3:2d:93:8b:4e:5e:c9:b0:39:e9:44:af:8a:
d8:85:c0:f8:e5:41:e8:9e:58:c2:fe:d5:6e:62:74:
f8:f6:03:24:a4:fe:0d:24:ed:ea:7e:c2:3c:49:ea:
39:02:19:da:5f:54:43:f8:39:22:35:e4:96:34:ad:
2f:1b:e1:cb:28:ac:28:d6:3f:c5:39:f4:1a:d0:1b:
b3:88:c5:2f:e9:f6:6b:81:9f:22:1a:42:b6:a0:71:
75:30:8f:88:55:b4:b7:4e:83:f2:17:32:3e:74:5b:
76:40:cc:06:06:e8:d0:48:07:f8:59:6f:69:41:16:
ef:d8:af:99:3f:a2:77:df:ac:d5:1b:88:07:07:21:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:B2:A3:05:D1:82:13:9D:B3:92:E4:A8:A7:5F:B2:C8:55:C2:8F
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:ca:ad:dd:e5:14:33:8d:dc:81:71:f4:5e:f5:16:9f:02:
4e:d9:3c:4e:2c:e4:38:b4:90:c3:2c:48:5d:fc:3a:5b:91:d9:
81:17:3c:78:fe:a6:b3:51:9c:18:ae:32:61:3c:0b:6e:7a:0f:
2f:0b:88:3b:42:9e:5d:1d:57:d1:7b:99:2e:13:d1:6e:51:5b:
34:d7:a9:8e:7b:a3:9a:09:2f:0e:24:ea:40:02:04:07:d3:3c:
44:0a:11:04:c4:62:7d:43:8a:1d:9c:9b:79:64:54:d7:a9:2c:
2c:55:bb:4e:7f:2c:29:56:3f:e7:ec:5d:51:c5:c4:f5:31:70:
a1:14:b6:4f:15:9a:aa:34:ef:b5:a4:61:f7:3f:f5:dc:43:31:
bc:aa:cc:3c:f5:d6:ca:e6:ce:2a:92:d0:75:11:f8:20:f5:e0:
11:f4:78:1d:d3:ad:59:98:df:b1:e1:01:01:01:48:e3:d2:54:
92:81:c1:f1:b0:77:8b:9c:f6:11:11:47:93:5d:0c:ec:3b:a7:
4a:7f:00:81:8f:4a:b5:5a:cc:19:fa:31:ac:2e:6b:5d:25:b7:
78:81:b9:cc:ea:f5:49:29:33:b0:d7:fa:09:dc:5f:10:c8:d9:
60:09:9f:c9:d1:3f:0c:34:96:09:98:87:90:df:0d:48:99:b0:
10:67:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:10:45 2026 by rpki-client