Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: TSoMSZ3UNgmo8b5eyZoSGPyTffJ+MA0a6+rAdIgOgmI=
Subject key identifier: 64:FA:78:15:B2:93:3A:BD:39:ED:4B:5E:4E:FB:BD:26:AE:F2:82:B9
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01A0D4268066EA754B112BB17AB70BD5379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 177B
Signing time: Thu 24 Sep 2026 16:01:28 +0000
Manifest this update: Thu 24 Sep 2026 16:01:28 +0000
Manifest next update: Fri 25 Sep 2026 16:01:28 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: W6F/zRxk2XeHT9FPrNhP218rzeBcqQVAdhntER9u1Ls=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:80:66:ea:75:4b:11:2b:b1:7a:b7:0b:d5:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Sep 24 16:01:28 2026 GMT
Not After : Sep 25 16:01:28 2026 GMT
Subject: CN=64fa7815b2933abd39ed4b5e4efbbd26aef282b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:59:a4:5f:bd:34:63:93:5b:a6:87:9b:e7:
b8:ed:bf:94:d0:70:01:8f:ee:c8:9b:59:8f:cf:d1:
a4:a6:c8:04:a8:cc:a6:bf:53:3f:c8:fa:0d:44:65:
4a:86:df:7f:c8:98:8e:c7:e4:ff:88:26:d0:59:f0:
71:43:73:f6:4c:f9:d6:47:e1:3d:75:a5:0c:a2:01:
63:66:07:66:8a:39:5b:17:4b:ce:5e:60:da:c9:aa:
c0:3e:d0:e5:95:cb:25:cb:c6:4d:c7:68:6f:bc:9a:
6a:6c:af:30:c6:4f:a8:92:8d:b7:7f:ff:89:87:db:
fb:f5:ce:d4:c7:13:ae:98:24:da:dc:f5:9e:89:be:
50:53:55:04:73:ce:67:e5:06:7c:e3:6b:4f:e2:30:
c1:98:3d:ed:d2:07:4c:55:c0:d8:74:30:2f:78:5d:
ce:36:5a:b1:91:43:18:fd:02:03:a0:66:a6:ea:5f:
bd:63:7a:6a:fb:e5:90:2a:57:fc:d4:ef:bc:90:fa:
d1:94:4a:90:cf:b7:60:55:34:49:3a:66:0d:19:ea:
46:c3:ba:ca:fb:b9:a4:ff:6a:15:93:c7:86:c4:73:
b3:a9:61:2f:a7:7c:2e:7d:29:5c:d1:fb:bc:f4:aa:
39:d3:70:7d:d2:f0:0a:e0:08:e5:72:23:26:e9:04:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:78:15:B2:93:3A:BD:39:ED:4B:5E:4E:FB:BD:26:AE:F2:82:B9
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:82:fd:20:77:b3:3f:dd:23:8d:54:89:4e:2e:a5:69:32:
d7:94:52:8d:78:71:f7:f7:f0:10:26:af:64:a8:7e:af:51:59:
bf:20:cf:40:e3:91:33:7f:72:b3:3d:42:13:fa:f0:02:d9:22:
99:8d:a7:39:91:56:dc:95:9a:3f:35:c5:4c:5a:63:98:ff:00:
25:b0:75:1a:d4:db:a2:69:3b:43:7d:96:d7:dc:a9:e3:a7:33:
8a:b2:b0:c9:37:b0:80:b2:41:7f:60:67:c1:b3:46:71:2a:16:
60:23:f3:e4:95:41:d7:f8:d4:05:1a:b3:79:38:41:4a:11:77:
51:e5:34:e0:ce:3e:54:dc:d0:fe:f1:1b:f1:72:5c:3e:2c:98:
29:77:03:b9:1c:c8:73:fb:53:76:39:55:50:19:54:59:4e:bb:
53:20:8b:4c:8a:d9:19:ef:79:94:75:4f:86:dc:39:a3:71:37:
41:6f:18:38:ca:cf:28:68:5b:31:a4:46:aa:1a:99:a4:5b:61:
78:2c:80:91:f4:6b:cc:ef:00:4f:c4:4f:6d:f3:d9:94:54:c2:
3a:6c:cd:6c:af:f2:7c:89:2f:c2:bf:ae:20:82:20:87:c8:5d:
dc:54:b6:42:47:94:11:a0:99:9f:22:80:50:ad:17:0a:7f:10:
81:c1:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:49:49 2026 by rpki-client