Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: EdHMwxCIkvEKXsiYjJBlZHHnp589UhomF0Nd20Qj/4I=
Subject key identifier: 8A:77:1F:19:46:1F:BB:32:FD:B2:1D:0F:0D:1D:A6:1E:0F:88:10:95
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019F8EA22380C92BCED3E26290DFBB515CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 18BE
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: tnNtHQmbH8fKECQ+D237uqqwmUmPLmQnlBSoK2tnon0=)
2: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
3: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
4: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
5: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (hash: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:23:80:c9:2b:ce:d3:e2:62:90:df:bb:51:5c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=8a771f19461fbb32fdb21d0f0d1da61e0f881095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:19:b0:d0:a7:4a:bb:7e:a5:dd:25:81:d8:
de:59:97:0b:3a:1d:3e:58:31:eb:1c:e1:ac:bf:fa:
aa:8c:2f:c0:e0:50:2d:95:17:98:4b:f5:dc:bf:18:
68:73:7d:4d:85:12:f6:30:1a:fa:3b:b7:52:32:be:
fc:5e:5a:ae:be:b0:a1:42:23:f4:a4:6c:76:c4:21:
d2:99:02:f5:d9:95:be:74:00:46:2d:73:97:5a:0c:
10:7e:61:e1:70:8f:27:d9:d3:e8:18:55:ab:09:b4:
80:4f:73:38:3c:d3:33:42:9c:ef:1a:42:c2:a2:e1:
49:a0:e8:12:9b:d2:b0:ca:1e:78:f6:a0:9f:ba:c5:
22:22:ff:3c:be:02:63:7a:4a:59:a6:22:3a:f4:52:
60:02:31:96:d1:53:c2:db:0b:d0:ff:c1:e3:90:cb:
13:10:f4:77:57:62:2d:75:d8:87:c7:1a:c4:9a:a6:
50:85:9c:b8:ef:d1:7f:e2:14:61:01:38:93:b2:31:
e8:c6:0f:aa:93:5c:65:fe:02:5e:56:8f:1e:a6:0b:
3f:72:87:52:d7:f3:a7:b7:43:4f:48:57:ff:3e:71:
37:e8:ab:0b:31:61:cb:53:9d:8f:34:bf:3e:be:bb:
ff:4e:a5:44:54:f8:7b:e4:61:56:e0:d6:94:1d:ef:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:1F:19:46:1F:BB:32:FD:B2:1D:0F:0D:1D:A6:1E:0F:88:10:95
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:d2:b1:be:25:ae:68:dc:c1:dc:39:2e:7f:4e:2b:a9:3e:
6e:ca:71:31:30:8f:6d:0e:55:06:95:be:5a:2b:8d:46:db:b5:
b1:d9:62:66:04:d3:d0:25:62:81:95:b6:c5:19:49:aa:de:af:
4a:24:98:2f:45:7e:5a:fa:0f:c4:3d:1a:4e:ef:6d:db:58:03:
3c:f3:23:12:c5:c1:1d:95:e0:2d:ac:26:96:ff:54:a2:29:7c:
9a:75:5c:e2:3b:e5:19:26:5b:3c:fc:10:7e:36:a9:bd:fd:72:
2e:d6:59:06:1d:3b:35:00:33:d4:3f:8a:d5:03:03:58:9d:68:
cb:c8:4b:cf:18:db:28:d1:b0:88:c4:60:9b:0c:4c:31:72:3c:
4a:50:26:8b:73:b2:fa:5d:c3:03:07:5d:e2:8b:13:b5:e6:45:
be:c3:bc:90:85:94:2e:da:c4:72:f5:a4:e9:ee:d5:16:da:e1:
85:f1:1f:1e:9f:b6:db:88:59:49:28:97:7a:e2:2f:77:c8:54:
61:43:ed:f6:7f:75:27:bf:bd:4f:df:2a:cc:09:08:7e:33:db:
42:fb:e4:ec:1b:09:1a:17:1b:2f:58:a3:08:87:de:9b:8c:51:
6e:a0:32:71:de:fe:47:86:c1:1b:cd:8f:b9:30:3b:03:75:ea:
a3:63:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:16 2026 by rpki-client