Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: cuFBPD7YHb8FeG8xDLRIdte6IB+BLtfCfWJvD875lVg=
Subject key identifier: 68:BA:28:01:DA:30:E8:29:05:8D:04:53:32:8B:B7:3E:56:44:32:97
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019F91A44275BAE811DDF58222E0BC2A78FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 16D4
Signing time: Fri 24 Jul 2026 01:01:28 +0000
Manifest this update: Fri 24 Jul 2026 01:01:28 +0000
Manifest next update: Sat 25 Jul 2026 01:01:28 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: K98WnrKGoAmt5nGbEYlTwUsdATf+5MzugG3bKX0XZPo=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:42:75:ba:e8:11:dd:f5:82:22:e0:bc:2a:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Jul 24 01:01:28 2026 GMT
Not After : Jul 25 01:01:28 2026 GMT
Subject: CN=68ba2801da30e829058d0453328bb73e56443297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:f9:60:60:c9:56:e8:fe:6c:03:78:03:ae:
c8:74:2e:61:d2:07:5f:8e:d3:b9:25:e8:14:ca:d6:
18:de:c0:31:a4:91:58:b7:75:85:46:6a:ed:16:cf:
7b:a9:75:d9:9a:d3:2d:a9:fd:30:07:2c:7c:f4:2e:
3e:8b:50:2b:da:f0:58:21:b1:d6:64:42:84:e1:7f:
f1:cf:b9:8f:d1:57:31:27:d0:bf:55:3c:f8:b2:d2:
55:1b:47:6e:75:30:18:ff:ac:5e:cf:02:fa:50:e8:
b9:93:ac:de:2e:1c:46:6a:a2:73:f2:cc:f4:51:20:
4b:ce:0b:de:9e:34:7a:74:ac:0c:b3:8c:b0:c4:5d:
e5:c7:80:0c:0f:29:46:e5:46:1e:24:b9:51:6e:4b:
9b:f4:21:27:c1:28:ec:25:6b:d2:3b:0c:8a:20:4f:
53:19:c9:60:3a:44:ec:3c:7a:54:83:bd:cd:09:db:
d2:e4:f6:2c:f7:20:d9:ac:31:32:91:f1:f0:43:12:
d4:a4:29:3b:14:09:31:76:70:21:3e:63:c8:95:45:
f3:a6:1f:97:90:c0:8e:29:5d:c8:21:d4:6b:a9:2a:
37:a7:6f:65:0d:d2:98:46:b3:9e:4a:3c:b7:aa:0b:
9e:f9:00:cc:39:d4:3d:88:8a:a8:23:43:38:55:d6:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:28:01:DA:30:E8:29:05:8D:04:53:32:8B:B7:3E:56:44:32:97
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:11:b7:1e:e9:af:27:02:24:ac:78:25:f3:81:43:c9:3d:
91:31:d5:57:99:73:dc:b4:04:21:57:51:9a:49:82:3c:0c:33:
d9:30:33:f9:11:69:6c:89:70:d0:b2:20:4b:20:92:92:50:62:
5f:0e:a9:7c:9b:a8:7a:0d:30:90:26:a4:51:57:06:45:24:f8:
d1:37:b7:c1:51:8b:44:fe:e6:9a:9a:13:b4:ea:2b:d3:8c:ac:
8d:32:cb:61:54:73:8c:fa:14:a5:85:2b:29:ed:c5:fb:c1:dd:
57:63:dd:f8:e1:24:35:36:49:62:c7:b8:1e:d0:22:9a:ce:9a:
5c:8d:6d:0d:2e:cc:6d:5e:6e:a0:1e:b7:66:d8:23:c5:00:09:
a3:24:b2:9d:81:35:7d:07:fd:01:7e:bd:58:cb:23:fd:65:4d:
91:01:1e:c9:c8:6a:f2:e9:08:57:8b:86:f6:7b:9c:5e:36:cf:
5b:b7:5f:0c:2e:b1:e7:89:ad:1c:0f:65:37:87:5a:e5:b7:17:
b8:cc:14:fc:bf:52:c5:ba:4f:8c:cc:33:ac:f4:59:8d:2b:ab:
c9:a7:9b:ae:41:89:11:21:62:9e:da:59:2d:5a:b5:7d:82:68:
6a:06:71:84:94:a9:a4:64:a6:a9:dd:28:da:f4:56:71:db:91:
3a:f1:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:25 2026 by rpki-client