Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: yLzAzfLJDilGOKSIgTVd0I0UXFMVVCKo5q7vdwfEI7A=
Subject key identifier: D0:C0:79:5B:EF:78:FA:A3:91:C2:F6:09:25:D1:6C:C7:C8:E2:29:C8
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01A0E2BD81E37C979072BE4D1338AB2111CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 13A2
Signing time: Sun 27 Sep 2026 12:01:05 +0000
Manifest this update: Sun 27 Sep 2026 12:01:05 +0000
Manifest next update: Mon 28 Sep 2026 12:01:05 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: WI563h6E+Z780N98jxJftKld/jTyOYWd1/KFGZl8pPI=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:81:e3:7c:97:90:72:be:4d:13:38:ab:21:11:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Sep 27 12:01:05 2026 GMT
Not After : Sep 28 12:01:05 2026 GMT
Subject: CN=d0c0795bef78faa391c2f60925d16cc7c8e229c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:36:5f:91:41:64:c2:22:99:71:ff:37:2f:
15:91:5d:73:b1:b2:c3:3f:de:39:de:0f:6e:33:b7:
9a:1f:48:be:4f:93:c0:8d:8d:f3:65:a5:9d:5b:69:
d9:1d:60:5b:28:ff:ad:9e:c2:c6:9a:65:bb:92:a1:
9b:37:df:93:63:00:78:69:f0:7f:d6:d0:96:c4:dd:
93:ec:40:71:6b:cb:82:42:64:ec:19:28:f9:c2:bc:
c8:88:97:a1:07:7b:97:90:83:39:ed:e1:71:df:d2:
96:78:2d:d5:13:81:a0:d7:f8:55:26:f6:85:89:96:
8d:0b:69:e5:69:02:e9:b9:02:68:69:9a:3b:8b:ca:
c9:73:0b:8d:4d:02:09:52:0f:18:1a:45:c4:67:d3:
4b:fa:a5:f6:80:6d:37:46:20:a2:2e:91:86:5b:77:
ed:a9:b7:4c:84:46:1f:42:f7:a1:b7:c6:d1:b9:2b:
d0:59:4b:25:8b:35:a3:e9:48:df:b7:59:f7:2c:dd:
f9:12:64:82:3d:b9:41:9b:e4:d6:29:e1:a5:f6:00:
43:91:85:b4:d9:90:60:63:e6:57:85:98:67:ac:ea:
cb:14:e2:66:46:b5:b6:68:6a:35:75:ad:70:0d:7f:
4b:5a:98:1a:40:10:bc:95:67:f6:ef:82:4a:49:8d:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:79:5B:EF:78:FA:A3:91:C2:F6:09:25:D1:6C:C7:C8:E2:29:C8
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:db:12:4f:f7:d1:24:de:54:d6:50:43:de:7f:6b:86:f6:25:
bb:4a:32:84:c3:27:ec:08:eb:76:37:eb:f7:54:92:c8:a2:2d:
b8:01:68:1f:07:ba:1a:a1:9f:f5:e6:b9:c5:50:72:19:7a:b3:
c2:71:44:93:42:db:67:90:59:87:be:17:a7:40:c7:79:99:3c:
78:cc:ae:24:97:0d:77:d1:f6:73:f7:2e:cf:f7:32:08:37:e0:
8d:21:54:64:af:20:68:e0:cb:f6:ed:44:c5:99:af:9a:c4:5c:
42:39:22:0d:1a:56:c4:7a:59:0f:0d:b9:d6:ab:fb:92:a8:12:
bb:d7:62:6d:41:f3:6c:b4:22:4a:f6:87:17:b8:91:eb:dc:e5:
e4:98:62:a5:a2:4c:e5:13:02:eb:10:fd:3b:3a:b1:3f:2c:33:
c5:6b:98:66:3f:5d:ae:03:d2:9b:f1:f0:2c:18:63:89:b6:15:
ab:bc:59:97:af:3d:e4:bc:ed:1a:8d:ae:b9:e6:17:d2:e3:4e:
c0:7b:9b:9e:80:9d:2c:ca:21:a5:1c:8d:34:4c:da:99:29:5d:
23:c4:fb:ba:2a:24:f0:62:37:00:b2:e9:51:e9:24:66:a2:2d:
5a:40:e8:92:f1:ea:9c:88:77:43:1c:c4:01:c5:ba:70:ed:07:
e5:bf:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:16:47 2026 by rpki-client