Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: Yr3HSwo2k0hdm7gCx7iGIbP1QudthCAA7cKLNFAQ7as=
Subject key identifier: 7B:FA:51:1B:ED:B5:6D:3C:23:93:00:E8:6D:CB:40:79:D3:36:A1:26
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01A1DCB8C507DFC266A5DF947E7E59B421D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1804
Signing time: Sun 15 Nov 2026 01:00:58 +0000
Manifest this update: Sun 15 Nov 2026 01:00:58 +0000
Manifest next update: Mon 16 Nov 2026 01:00:58 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: X1RVmyZ+eLzk8vAhE8KhF4ZcVMooYri/Wehjs+Q5G/o=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:c5:07:df:c2:66:a5:df:94:7e:7e:59:b4:21:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Nov 15 01:00:58 2026 GMT
Not After : Nov 16 01:00:58 2026 GMT
Subject: CN=7bfa511bedb56d3c239300e86dcb4079d336a126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:d9:fe:9b:19:5e:7a:b8:bf:f3:2d:c2:44:
27:9c:78:90:98:e9:6c:07:ec:83:8b:12:fe:be:4e:
51:b5:d9:9e:a8:fa:6a:38:0a:d0:1d:90:39:bd:ff:
1b:d5:2b:bd:54:01:49:51:81:b4:68:d2:c4:51:f1:
02:2b:05:2d:db:46:31:7d:2c:12:2b:c3:44:a4:db:
4c:3c:b1:70:b2:75:40:6e:72:04:2d:ea:b1:35:46:
34:11:89:20:c2:71:37:8b:0a:8d:50:8f:e8:e4:8e:
23:6f:0a:fe:3f:68:94:98:f3:84:4b:3e:17:78:b8:
a5:9f:07:a5:0d:a1:a7:70:74:df:49:6b:06:b7:f1:
2a:f2:d5:7e:7c:75:a6:e0:f7:c2:a4:20:e5:7b:db:
d6:ab:70:e4:09:df:e3:f6:d4:86:36:79:63:a0:fb:
2e:5e:b1:a1:d3:f7:05:ab:03:c1:a5:89:3e:c2:4d:
97:fe:25:6a:3e:b8:ce:3d:47:a6:0e:05:18:a3:89:
04:d9:24:df:aa:5c:7d:1d:d6:3c:78:d5:e4:c2:0e:
f6:c6:2b:21:4b:25:05:32:85:c7:c1:d3:cf:6e:20:
5e:ce:57:9a:b0:ac:51:9e:b7:72:e3:c5:b7:25:f8:
24:aa:88:48:68:51:56:0c:8e:10:d9:6d:af:d0:bc:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:51:1B:ED:B5:6D:3C:23:93:00:E8:6D:CB:40:79:D3:36:A1:26
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:e8:93:ce:02:84:4a:7b:56:bd:6c:fd:d0:a7:d4:b1:78:
67:7a:25:9e:cb:52:e8:0e:4e:70:2c:23:cb:49:34:a5:5e:5f:
28:db:96:28:03:ee:c9:4c:40:3a:e3:30:ac:aa:54:cd:27:e7:
45:df:fe:49:83:89:ed:bf:22:27:d6:bf:c3:6e:dd:9f:64:5b:
91:c6:bf:c8:da:36:c2:a9:1f:df:cf:4b:d9:da:18:62:e9:f1:
29:71:c3:02:e5:4a:df:64:4a:32:85:b0:fb:45:c0:16:ea:3b:
12:c9:1a:e0:b1:72:3e:65:58:d9:55:75:da:3f:9e:5b:77:46:
31:08:09:40:42:0b:42:08:d4:9a:31:e0:0f:3a:44:39:a6:b2:
c2:15:78:36:1e:58:1d:20:5c:b1:e8:d2:63:63:fa:d0:33:05:
4c:02:a2:3c:a3:43:f7:be:2e:86:86:14:4f:6d:a5:4e:88:eb:
72:71:27:d5:17:8d:f5:d5:30:19:39:17:5e:17:19:c5:d4:43:
f9:0c:db:1c:21:e3:a5:50:62:74:a0:d4:27:d3:c9:48:33:03:
ea:f8:70:f8:4a:7a:54:f5:4a:af:71:40:7c:da:08:33:78:51:
5f:6c:f2:cf:3d:ec:10:aa:81:ff:5d:42:b0:84:2c:50:6b:27:
d0:c3:82:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuMUH38Jmpd+Ufn5ZtCHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx
MzExYzUwHhcNMjYxMTE1MDEwMDU4WhcNMjYxMTE2MDEwMDU4WjAzMTEwLwYDVQQD
Eyg3YmZhNTExYmVkYjU2ZDNjMjM5MzAwZTg2ZGNiNDA3OWQzMzZhMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5HZ/psZXnq4v/MtwkQnnHiQmOls
B+yDixL+vk5RtdmeqPpqOArQHZA5vf8b1Su9VAFJUYG0aNLEUfECKwUt20YxfSwS
K8NEpNtMPLFwsnVAbnIELeqxNUY0EYkgwnE3iwqNUI/o5I4jbwr+P2iUmPOESz4X
eLilnwelDaGncHTfSWsGt/Eq8tV+fHWm4PfCpCDle9vWq3DkCd/j9tSGNnljoPsu
XrGh0/cFqwPBpYk+wk2X/iVqPrjOPUemDgUYo4kE2STfqlx9HdY8eNXkwg72xish
SyUFMoXHwdPPbiBezleasKxRnrdy48W3JfgkqohIaFFWDI4Q2W2v0LypkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv6URvttW08I5MA6G3LQHnTNqEmMB8GA1UdIwQY
MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt
NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3
LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCjok84C
hEp7Vr1s/dCn1LF4Z3olnstS6A5OcCwjy0k0pV5fKNuWKAPuyUxAOuMwrKpUzSfn
Rd/+SYOJ7b8iJ9a/w27dn2Rbkca/yNo2wqkf389L2doYYunxKXHDAuVK32RKMoWw
+0XAFuo7Eska4LFyPmVY2VV12j+eW3dGMQgJQEILQgjUmjHgDzpEOaaywhV4Nh5Y
HSBcsejSY2P60DMFTAKiPKND974uhoYUT22lTojrcnEn1ReN9dUwGTkXXhcZxdRD
+QzbHCHjpVBidKDUJ9PJSDMD6vhw+Ep6VPVKr3FAfNoIM3hRX2zyzz3sEKqB/11C
sIQsUGsn0MOCww==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:36 2026 by rpki-client