Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: fEcNQ1QvC9wqyDC6wrMQtKPKwi5YDvduXXN7dUZm4OA=
Subject key identifier: CF:0D:45:72:74:46:A1:72:39:4B:56:BB:32:92:F5:F8:DE:BB:34:1C
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019D27A93DE014B7537B9855EC108051AC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1594
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: Agox9lxOJ8zCDzaT3/NFNU6z/K2OgCpcmR2Gp8EzI6A=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3d:e0:14:b7:53:7b:98:55:ec:10:80:51:ac:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=cf0d45727446a172394b56bb3292f5f8debb341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:33:e7:75:66:14:87:47:8e:2a:d0:bf:c8:
e3:1d:05:51:e2:db:55:40:fa:30:18:5c:e6:2c:e4:
84:68:a6:7d:c1:73:62:0d:22:c0:1f:84:b8:72:39:
98:c0:34:b5:17:29:96:4b:2c:ff:1e:8e:86:a6:ba:
de:2d:ba:6a:2f:79:80:eb:3d:13:81:9d:52:e2:ab:
f6:28:78:11:04:6a:8e:a4:29:99:f9:e2:a8:06:d6:
d2:5d:2e:10:48:6e:35:3c:e0:4a:a5:7d:e3:ba:c4:
b1:7f:ea:a0:af:9f:44:88:2e:54:0c:34:80:bf:2d:
33:ec:9f:04:b3:64:00:45:04:a0:31:c8:62:7e:56:
9c:9b:6c:6c:e0:43:31:f1:b4:1a:92:3e:15:e9:bc:
b6:a4:38:13:99:6b:05:c8:2f:63:05:b2:20:ac:a4:
45:a1:ca:2e:5a:45:9f:a3:06:62:2a:48:d7:8e:71:
6c:52:cb:d9:6c:5a:b3:5d:02:19:48:87:35:e1:ba:
ff:9f:bf:8f:0e:52:c3:d7:50:e0:11:9e:86:04:3b:
6c:c5:4c:59:a2:e0:ee:d8:08:71:2a:a2:b4:fc:82:
16:a0:36:f1:66:97:a4:ea:20:71:1c:26:8d:5f:f4:
21:aa:de:3b:d6:2e:e7:0d:5c:30:7c:47:63:31:38:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:45:72:74:46:A1:72:39:4B:56:BB:32:92:F5:F8:DE:BB:34:1C
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:fa:cc:80:d1:bf:1b:57:2d:a8:ce:ff:75:24:f7:29:02:
4f:c5:6a:6d:fb:4a:b8:9d:e7:a3:fc:90:d5:3f:ba:3b:fe:27:
a4:dc:b4:2f:1a:4d:74:2d:bd:77:0e:7f:fc:12:32:8a:8e:5a:
3e:91:8d:f2:d5:1d:cd:b6:b5:90:5a:1b:49:72:8c:4c:e4:c0:
33:1b:22:23:84:89:fd:b0:b1:26:73:de:ba:53:b7:bb:ad:81:
dd:2e:69:ab:2a:05:b5:03:0b:76:4d:76:b7:86:11:58:75:49:
12:08:19:b6:ba:15:af:ab:60:b0:d4:64:7f:4f:e1:c1:8b:5b:
a4:48:9b:4f:16:cd:54:09:5d:f8:89:4e:a0:ad:68:b7:15:d9:
3c:ae:78:f1:e8:48:ed:a7:fd:c2:09:5b:72:7a:f3:af:98:ff:
98:be:fa:00:ad:5a:04:92:a0:4a:32:77:ab:68:fd:b5:ba:fc:
22:38:07:12:5a:b5:a8:4c:26:4b:dd:4e:7a:c6:36:54:9a:c1:
ef:21:1d:98:7d:1e:4c:d8:70:7c:f8:ab:8c:49:74:bc:dd:97:
4c:0c:c4:f9:dd:64:c6:a7:37:4f:10:41:b9:44:48:d1:01:f8:
ec:8d:5c:e1:ae:46:ef:8e:d0:46:a0:2e:1e:7c:a3:c5:0f:c0:
60:89:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:48 2026 by rpki-client