Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: JHG4716ozi6Ecz9zumA1GoHWcVU92vXA2HYajYuFCUE=
Subject key identifier: 17:DB:54:80:20:FA:40:62:EC:2E:B2:6A:BE:0F:99:7C:4B:0D:82:86
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019D26CD549BBBB5F0122DB560A9E1D4DB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 11B3
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: gc7rYWU46cXQR9StNdxtqQwY3zmZvSGNz50XGS4r4yA=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:54:9b:bb:b5:f0:12:2d:b5:60:a9:e1:d4:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=17db548020fa4062ec2eb26abe0f997c4b0d8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:2c:69:ea:dc:da:1f:b4:36:66:bf:b4:5a:
de:6f:0f:bb:88:06:6e:39:47:32:57:de:36:aa:27:
f2:34:ff:be:17:e5:9a:7b:ab:0f:57:0e:c4:52:56:
55:e4:b3:42:a2:63:fa:5e:76:7b:fa:77:6b:98:e3:
fd:e8:8c:0e:a9:fb:1f:c9:be:3f:9b:be:21:ea:04:
bf:b5:8a:f5:4d:cc:ac:c1:68:d2:44:58:56:90:b9:
66:9a:fa:64:c1:23:d4:fd:09:84:73:7f:31:5b:a0:
65:50:89:f2:2e:89:8d:39:5d:9e:e5:74:0b:ff:2b:
66:c9:1f:fa:0a:39:dd:3a:53:eb:97:7d:e0:f2:4f:
d7:4e:7f:f2:1c:47:65:dc:af:ee:aa:fc:4c:93:2d:
cf:c5:eb:68:ed:34:76:30:4a:32:6f:e6:a8:e7:b5:
27:98:f0:fa:8e:14:f8:bb:9c:2b:37:c1:92:14:36:
42:5b:ae:47:44:37:70:f0:ca:da:f8:96:6d:8e:00:
78:17:59:ae:54:67:0d:f6:51:19:05:91:91:e2:c3:
c8:b4:08:0e:e5:13:c5:ab:95:1a:03:74:ea:f9:d0:
9f:58:b0:7b:f6:80:bb:c6:b6:4d:64:97:04:00:8b:
45:a4:0a:b8:2b:84:29:e2:8b:3b:22:37:7e:de:c9:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:54:80:20:FA:40:62:EC:2E:B2:6A:BE:0F:99:7C:4B:0D:82:86
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:01:a2:70:55:f4:64:bb:b0:f8:c3:78:0f:40:a7:64:f7:
ee:f4:16:7a:be:77:31:5a:35:9e:32:4b:43:ec:e0:3b:b2:51:
e4:75:9d:9a:0f:05:f7:ab:e4:7c:d7:ab:bc:72:95:ca:4d:b4:
ad:14:84:e2:55:dc:4b:ff:f7:52:59:d7:d5:65:0b:45:a9:10:
fd:ce:5f:c3:39:62:1a:b0:04:57:22:af:09:52:e4:ab:ee:41:
0d:e9:e3:21:c4:dd:2b:9f:ec:ac:33:67:e3:56:c8:54:57:03:
98:c7:0f:89:fd:6d:3f:1f:3f:68:10:5a:63:64:13:97:89:7e:
99:f3:a5:b9:c5:d4:57:b7:7c:fe:29:c0:d0:a3:48:6b:ce:57:
d0:28:3a:f9:55:03:a1:f9:54:30:00:c1:37:7c:75:0d:57:16:
0c:0c:a8:f1:91:a0:a4:ff:d5:cf:9d:5d:d6:5b:4f:a2:4f:96:
86:b8:e6:f9:5b:03:8f:3d:c9:2f:21:f6:29:7e:97:fa:a7:ba:
b2:c3:ac:2d:b2:3b:10:71:a8:8b:62:39:2b:2a:da:5d:f5:f4:
0c:8f:40:fc:13:ba:7f:22:19:cf:75:4f:30:1b:6e:f2:63:f4:
0e:4c:e4:18:5f:d7:33:11:3e:54:9d:eb:8a:b4:91:0f:56:59:
b5:a7:8f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVSbu7XwEi21YKnh1NuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjYwMzI1MjEwMTIzWhcNMjYwMzI2MjEwMTIzWjAzMTEwLwYDVQQD
EygxN2RiNTQ4MDIwZmE0MDYyZWMyZWIyNmFiZTBmOTk3YzRiMGQ4Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMsaerc2h+0Nma/tFrebw+7iAZu
OUcyV942qifyNP++F+Wae6sPVw7EUlZV5LNComP6XnZ7+ndrmOP96IwOqfsfyb4/
m74h6gS/tYr1TcyswWjSRFhWkLlmmvpkwSPU/QmEc38xW6BlUInyLomNOV2e5XQL
/ytmyR/6CjndOlPrl33g8k/XTn/yHEdl3K/uqvxMky3Pxeto7TR2MEoyb+ao57Un
mPD6jhT4u5wrN8GSFDZCW65HRDdw8Mra+JZtjgB4F1muVGcN9lEZBZGR4sPItAgO
5RPFq5UaA3Tq+dCfWLB79oC7xrZNZJcEAItFpAq4K4Qp4os7Ijd+3slUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfbVIAg+kBi7C6yar4PmXxLDYKGMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp8BonBV
9GS7sPjDeA9Ap2T37vQWer53MVo1njJLQ+zgO7JR5HWdmg8F96vkfNervHKVyk20
rRSE4lXcS//3UlnX1WULRakQ/c5fwzliGrAEVyKvCVLkq+5BDenjIcTdK5/srDNn
41bIVFcDmMcPif1tPx8/aBBaY2QTl4l+mfOlucXUV7d8/inA0KNIa85X0Cg6+VUD
oflUMADBN3x1DVcWDAyo8ZGgpP/Vz51d1ltPok+Whrjm+VsDjz3JLyH2KX6X+qe6
ssOsLbI7EHGoi2I5KyraXfX0DI9A/BO6fyIZz3VPMBtu8mP0DkzkGF/XMxE+VJ3r
irSRD1ZZtaePUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:47 2026 by rpki-client