Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: PaNoQGIlCGfz1goRrJWlm4IzvEW2h7T+LvvMVUPlmr0=
Subject key identifier: 60:C4:38:3E:ED:38:18:D2:95:4E:80:49:57:D4:E6:F1:91:04:0F:22
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019F94A46225B13D3D468ECF97F561A5E15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 12F5
Signing time: Fri 24 Jul 2026 15:00:28 +0000
Manifest this update: Fri 24 Jul 2026 15:00:28 +0000
Manifest next update: Sat 25 Jul 2026 15:00:28 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: i1dWdzEhUfNcLYA3ipqKnLIoTkFRrakmMAurGCA7FRg=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:62:25:b1:3d:3d:46:8e:cf:97:f5:61:a5:e1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jul 24 15:00:28 2026 GMT
Not After : Jul 25 15:00:28 2026 GMT
Subject: CN=60c4383eed3818d2954e804957d4e6f191040f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:fd:9f:64:5e:23:30:c2:e0:ed:f6:7b:4a:
2b:ba:f0:9b:44:03:56:a0:21:0c:81:e6:7d:52:24:
2e:0e:76:1f:57:2c:eb:67:c3:70:f0:20:23:0d:57:
db:8a:84:f0:eb:00:32:f6:c3:73:cf:ea:f6:df:9d:
e4:94:ea:d5:3d:65:a0:7e:59:ca:5a:34:f3:0e:81:
af:f6:bd:f7:fb:d9:c8:9a:70:d2:29:b4:fc:a9:5c:
2a:1a:11:d3:02:75:b2:ad:b3:59:b8:f6:e5:db:38:
4f:f3:17:35:6c:9b:3d:83:05:ea:a5:79:a6:a7:16:
fe:52:f6:e2:7f:d0:77:eb:c8:fd:52:65:5e:39:08:
8a:e5:cb:bb:c6:2c:a5:23:43:e9:ca:b9:37:e6:f2:
11:30:e7:41:ec:f2:4f:88:df:7d:58:d9:88:0d:6e:
91:85:5c:b9:06:41:0d:69:b5:14:15:be:c3:b0:36:
74:b2:7b:23:50:70:3c:d0:3b:e3:3e:e7:81:88:6c:
a5:08:a8:53:06:ef:9b:47:bd:65:4b:d2:f9:99:9c:
50:24:8f:09:0a:9c:94:a7:f7:c6:47:5f:a1:a2:12:
11:0d:c7:6b:49:ad:e3:85:16:86:70:82:58:13:55:
18:a7:8e:64:68:09:fa:e1:38:5b:66:00:b2:2d:63:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:38:3E:ED:38:18:D2:95:4E:80:49:57:D4:E6:F1:91:04:0F:22
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:a3:1d:69:9b:09:38:df:8c:eb:10:70:e1:c1:1a:77:11:
47:91:6c:3b:fa:b8:ff:a1:11:47:20:57:5b:f0:dc:57:bb:1d:
c8:95:40:a4:7a:24:42:66:74:1a:ab:7a:11:78:92:0e:a3:2e:
e5:ac:2d:36:44:75:ad:fe:b1:84:1e:ea:ce:6b:93:88:1a:e7:
e1:e3:d6:e0:44:4f:fc:03:5b:60:f5:12:c9:09:17:6a:d7:81:
61:85:3c:74:e8:3d:eb:03:db:dc:28:bb:2e:56:ec:7d:1c:b7:
de:8d:3c:c6:30:90:29:8e:e3:61:8c:f0:bc:c1:f5:79:2f:e3:
66:9e:73:cd:07:20:a7:5e:67:af:fd:66:89:68:75:14:e3:9d:
72:97:c4:62:f9:5e:13:fb:c1:e0:99:72:f4:8f:5f:c0:10:07:
e2:10:e3:25:78:97:f8:16:dd:e9:46:46:da:62:d8:bc:0d:3c:
05:72:26:04:cf:79:65:80:4d:2d:53:60:88:eb:7b:31:46:b7:
45:47:00:61:1c:93:18:1f:f5:c1:a1:29:46:ae:64:c8:91:0c:
27:c1:b1:62:29:02:f3:64:d9:46:2d:1c:9f:36:97:25:7d:49:
6b:02:3f:53:82:6f:10:de:e3:35:6f:51:56:a6:4b:cf:fa:af:
07:c2:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:25:05 2026 by rpki-client