Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: 5yCBkpqJ4hkMDJLlhzxO05qGo9CZtdZXE9SnhDCefOM=
Subject key identifier: 1D:D7:86:EE:40:95:69:92:A9:20:74:2B:16:DB:3B:0A:FD:07:E8:79
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019FA9AC76BADAB5BB6340EE9DC4BACBC5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 18CC
Signing time: Tue 28 Jul 2026 17:01:19 +0000
Manifest this update: Tue 28 Jul 2026 17:01:19 +0000
Manifest next update: Wed 29 Jul 2026 17:01:19 +0000
Files and hashes: 1: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: o/JYQ2NDdeIyWJmL08rXYcn4+q+meMaKxD2hiSZgY3w=)
2: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
3: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
4: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
5: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (hash: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:76:ba:da:b5:bb:63:40:ee:9d:c4:ba:cb:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jul 28 17:01:19 2026 GMT
Not After : Jul 29 17:01:19 2026 GMT
Subject: CN=1dd786ee40956992a920742b16db3b0afd07e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:d3:28:f5:9d:69:06:f0:bd:49:9a:1c:c0:
4e:33:6e:63:c7:aa:7a:63:88:db:06:ea:3a:47:25:
fb:63:0a:9e:74:99:80:84:bc:3b:be:4f:02:af:67:
61:3a:be:5f:01:b9:47:9a:64:30:e9:21:0c:47:32:
11:1e:0e:ba:16:99:84:c7:3e:e4:29:24:98:66:8a:
2d:9b:6a:9b:61:3c:60:55:8b:c6:bf:0e:24:27:27:
55:90:df:9f:7a:93:fd:36:2d:05:c5:7a:2f:fc:be:
ac:bf:30:43:7a:c5:88:a2:5d:dc:f0:d5:2e:c4:d3:
d0:0f:ec:8a:31:a2:81:33:d1:1c:c0:4a:4f:f9:9b:
9a:8c:02:a6:f8:3a:81:2c:a6:79:87:b0:73:7b:e8:
91:ea:7c:84:77:f9:97:66:1d:d7:1e:0b:e4:49:23:
e7:4c:a7:f5:72:b3:c5:4e:a6:4d:81:a8:b6:af:54:
fe:2d:e8:0a:e5:91:46:fd:84:c7:f3:77:aa:10:14:
46:ce:d9:2c:47:28:6c:ea:b9:d7:7f:37:13:09:18:
d1:3f:d8:88:10:2f:99:dc:ea:65:53:81:3d:90:57:
ed:d0:8a:e7:31:08:6a:e5:96:a5:40:c7:83:71:67:
e8:df:83:82:61:eb:0a:bc:0a:5b:55:1b:3b:0a:23:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:86:EE:40:95:69:92:A9:20:74:2B:16:DB:3B:0A:FD:07:E8:79
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:00:16:e4:b2:3f:ab:84:36:37:60:d2:c8:42:ea:94:39:9d:
e9:e2:6c:76:4c:93:0f:18:ce:0b:4c:26:53:92:03:a9:21:f9:
94:62:d5:0f:ac:2f:a9:bc:f5:ff:a3:2f:86:2c:25:f3:77:05:
ea:41:c2:e7:6c:b1:4b:2c:9a:55:d3:ac:6c:f8:4d:e0:c7:ee:
16:70:bf:23:53:21:75:78:b7:a8:ce:c3:6b:da:44:d2:f9:02:
a3:28:02:87:a0:b4:6b:76:19:64:b7:98:5f:4e:f5:f6:2f:15:
0a:b2:34:b1:0d:48:24:5b:e3:fe:bc:67:da:07:f4:61:4e:bc:
1c:90:97:ea:62:45:4d:bf:61:38:d0:b1:67:47:0a:c7:d2:52:
6e:a3:5b:b7:64:a6:fb:4e:9d:eb:06:41:9b:ac:c5:87:ff:fb:
88:14:5a:80:4a:52:55:23:66:d1:e6:79:02:a3:1b:a7:89:9e:
ff:c1:65:43:26:f9:05:44:8c:4f:d1:88:c6:b4:4c:f6:15:1c:
33:83:c7:14:28:e8:77:92:8a:38:d6:ca:53:28:57:44:2f:e6:
31:7c:26:b1:88:6e:9a:d6:9d:55:a6:92:7e:32:e8:d5:e2:4d:
be:ae:d2:5b:54:5d:b9:0d:ca:fe:c3:c6:8f:f3:b1:4a:43:81:
00:f6:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:45 2026 by rpki-client