Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: kMSgJTAAg0yNi6B806/JWFJmPavSeOztnzjTxxiAMSg=
Subject key identifier: A4:0C:7D:E7:50:65:49:A6:20:21:D3:C7:C4:93:A0:FE:5C:A1:EB:4C
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019D9A3E3267B42B20630CDEB82BDF3A87ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:00 +0000
Manifest this update: Fri 17 Apr 2026 07:01:00 +0000
Manifest next update: Sat 18 Apr 2026 07:01:00 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: 7mfSNRDp0hiC0wEx+P22c+BnL6/6w81jhy3nsssH6ds=)
2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:32:67:b4:2b:20:63:0c:de:b8:2b:df:3a:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Apr 17 07:01:00 2026 GMT
Not After : Apr 18 07:01:00 2026 GMT
Subject: CN=a40c7de7506549a62021d3c7c493a0fe5ca1eb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:b8:c3:ca:80:cb:2d:f3:9e:6a:d3:58:43:
59:2b:28:d7:80:87:ff:01:4d:63:ca:14:9a:43:bc:
1f:ab:b9:d1:35:d6:3d:6c:24:f2:66:07:e0:8c:d6:
32:ff:0b:8e:6d:9f:ba:be:77:62:99:d7:d6:29:38:
07:77:92:7e:c3:02:78:a8:56:cc:b1:bb:ad:80:73:
07:f3:83:f7:64:cf:fc:2f:24:c6:ee:e6:a7:43:a6:
96:99:99:bf:6e:e1:06:8b:35:77:69:4f:0b:8e:f1:
f6:38:ad:97:37:62:e7:ed:95:c1:9b:b1:49:18:85:
e5:ff:4d:5f:78:47:09:11:74:99:96:7a:d3:3d:42:
29:ca:72:4a:a3:30:01:8e:3a:f0:a0:83:73:60:d3:
7e:ca:c7:66:a7:54:ff:f6:9c:0c:fa:28:e1:da:5d:
cc:87:5d:c9:af:37:81:fb:06:c1:c5:f9:0b:18:5d:
a4:e5:3a:2a:f1:4d:76:3e:48:c1:8c:eb:6d:6a:6d:
5d:89:99:53:82:87:f5:67:39:42:c6:ed:d4:30:e7:
68:c3:77:67:b6:07:2e:32:49:25:89:2f:c0:d3:11:
93:67:81:f0:d5:71:ac:72:92:43:d9:e4:2d:02:b4:
dd:4c:7a:17:37:b9:b5:4f:12:e1:14:b1:03:b5:f8:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:7D:E7:50:65:49:A6:20:21:D3:C7:C4:93:A0:FE:5C:A1:EB:4C
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:89:35:76:18:52:68:10:19:7b:7c:4d:49:70:57:05:d0:54:
c8:95:df:46:a8:30:67:29:81:49:98:fa:47:a2:d6:ca:bf:b0:
c2:95:7e:95:93:0f:94:c2:6b:c6:b6:f0:3b:7e:f2:55:b8:3d:
b0:75:6d:18:61:c2:45:3a:a5:b2:9b:ae:7b:e5:0a:6e:92:b5:
fa:76:45:b4:12:f8:d7:80:81:f9:ca:bc:b5:c1:fe:f7:75:3b:
53:32:76:dc:7e:39:fc:a3:36:ea:62:ce:9d:d3:18:be:a5:f8:
c1:b5:86:38:d4:a3:57:72:c2:63:f0:96:10:24:ae:70:c0:10:
d2:35:92:0c:32:81:f0:69:c7:74:4d:31:dd:db:57:b2:8f:d1:
8a:bf:2f:f8:3e:9d:2c:9a:28:41:f1:25:b3:9e:1a:d6:d6:96:
88:6a:7e:9e:5e:9c:79:ea:f0:4c:34:b6:5a:a6:9f:55:c8:27:
b7:1c:96:d9:c1:5a:32:34:49:ae:f9:50:13:64:00:ba:33:90:
04:e6:b7:68:2e:fd:68:07:53:a6:e7:5a:84:cb:bb:c4:45:7a:
a7:e3:88:84:44:10:9b:03:b4:02:72:bb:37:8f:6b:b8:59:72:
b3:3e:27:76:f2:32:a0:02:00:21:5e:3a:43:e5:02:3f:9a:31:
06:02:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:26 2026 by rpki-client