Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: SYqkiVi9p2k68sdHQArmiK0tlf8c40C1pg8y+WwTU3A=
Subject key identifier: 56:EC:00:3B:52:8F:42:0F:3C:59:EB:D9:37:60:4D:22:D9:20:0C:38
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 01A0D8DEBF0BA634CF0220C39A32960F7E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 1969
Signing time: Fri 25 Sep 2026 14:01:11 +0000
Manifest this update: Fri 25 Sep 2026 14:01:11 +0000
Manifest next update: Sat 26 Sep 2026 14:01:11 +0000
Files and hashes: 1: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: HJ+HMpVKs9NSxhw9EYqhGCfPAqBdU44Tlt9LPdvvf9w=)
2: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
3: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
4: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
5: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (hash: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:bf:0b:a6:34:cf:02:20:c3:9a:32:96:0f:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Sep 25 14:01:11 2026 GMT
Not After : Sep 26 14:01:11 2026 GMT
Subject: CN=56ec003b528f420f3c59ebd937604d22d9200c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:f7:c4:0b:e3:3b:fa:8f:4d:28:95:91:2a:
31:c5:6d:e6:98:53:0b:ae:d5:f8:99:6b:9b:92:f4:
24:ef:30:44:59:17:38:d1:6e:4d:fd:4e:a8:b2:7b:
c1:b4:bf:24:1f:c0:50:84:66:a5:cf:12:f2:5e:64:
7b:ec:3f:e4:b1:d0:cf:cc:e1:16:25:9d:77:a7:8c:
e0:85:f2:16:7a:96:37:36:5a:ca:3e:66:62:a4:15:
ea:45:5c:0e:aa:df:6e:92:ee:30:f7:0f:54:da:f2:
26:9b:f2:85:da:a8:04:95:8f:3c:1a:fc:58:80:0b:
11:4b:75:bc:d0:06:46:6b:64:ad:a8:5e:d3:da:68:
4c:fe:ed:61:c9:7c:a3:e4:39:60:6f:24:c2:2e:ec:
9f:63:99:4b:d4:28:17:61:33:c1:09:1e:b4:62:fb:
f4:75:58:f2:f3:57:9d:cf:50:6c:65:8e:b1:8f:71:
54:ed:3f:8f:0a:13:b5:0b:f6:04:26:ff:aa:87:de:
3c:e4:44:6a:aa:98:48:64:47:a9:57:0b:f3:d7:8b:
b4:02:8c:67:05:b9:b4:e1:4e:9e:3e:89:92:2b:c8:
cb:a7:9b:8a:1f:d7:62:5d:5c:15:a2:5d:ad:7b:08:
d1:5a:42:76:1b:7b:00:6b:6a:b1:c5:d6:b8:f1:ba:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:00:3B:52:8F:42:0F:3C:59:EB:D9:37:60:4D:22:D9:20:0C:38
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:28:9d:ad:24:fa:7c:26:ae:41:d3:0f:ef:b7:6a:94:8a:65:
72:fc:67:07:bb:1c:4d:46:9e:11:8d:89:d6:c8:32:db:6c:2e:
06:19:1b:4a:29:05:21:89:03:9d:d3:e3:cd:70:53:ea:26:a3:
82:db:4f:f7:44:fa:58:19:38:be:d0:c9:7f:93:92:1d:f8:f1:
05:c3:fc:b1:56:74:71:c6:79:85:11:7f:87:25:c1:b0:de:e5:
70:8c:7b:2b:39:14:71:08:6a:ee:10:10:a9:1f:69:f9:64:b1:
c1:e8:ad:ef:bf:1f:eb:57:81:a2:76:43:8d:b0:ea:0c:03:30:
72:74:f4:03:fb:28:f9:88:78:43:7e:18:54:a4:e3:3d:a6:5e:
61:a3:ad:75:22:7c:1a:b4:cd:45:f6:ae:c6:ed:2d:9a:77:29:
b9:33:ec:4f:c5:54:ad:11:4b:8f:2c:9c:e4:0e:a5:01:29:37:
dd:fe:64:dc:53:52:79:e1:ce:b4:3d:75:79:49:8e:38:8b:85:
fd:70:cf:c3:89:2b:2e:c2:72:28:f6:38:c6:80:d7:f4:19:f7:
76:4e:bc:06:49:23:f3:34:b3:01:32:2d:63:a0:1d:82:31:71:
97:0f:9a:f4:c7:ed:66:46:e2:37:43:97:a7:06:0f:0e:75:e8:
a4:aa:b8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3r8LpjTPAiDDmjKWD348MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw
M2RjNzUwHhcNMjYwOTI1MTQwMTExWhcNMjYwOTI2MTQwMTExWjAzMTEwLwYDVQQD
Eyg1NmVjMDAzYjUyOGY0MjBmM2M1OWViZDkzNzYwNGQyMmQ5MjAwYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjj3xAvjO/qPTSiVkSoxxW3mmFML
rtX4mWubkvQk7zBEWRc40W5N/U6osnvBtL8kH8BQhGalzxLyXmR77D/ksdDPzOEW
JZ13p4zghfIWepY3NlrKPmZipBXqRVwOqt9uku4w9w9U2vImm/KF2qgElY88GvxY
gAsRS3W80AZGa2StqF7T2mhM/u1hyXyj5DlgbyTCLuyfY5lL1CgXYTPBCR60Yvv0
dVjy81edz1BsZY6xj3FU7T+PChO1C/YEJv+qh9485ERqqphIZEepVwvz14u0Aoxn
Bbm04U6ePomSK8jLp5uKH9diXVwVol2tewjRWkJ2G3sAa2qxxda48bqZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbsADtSj0IPPFnr2TdgTSLZIAw4MB8GA1UdIwQY
MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt
ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez
LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCidrST6
fCauQdMP77dqlIplcvxnB7scTUaeEY2J1sgy22wuBhkbSikFIYkDndPjzXBT6iaj
gttP90T6WBk4vtDJf5OSHfjxBcP8sVZ0ccZ5hRF/hyXBsN7lcIx7KzkUcQhq7hAQ
qR9p+WSxweit778f61eBonZDjbDqDAMwcnT0A/so+Yh4Q34YVKTjPaZeYaOtdSJ8
GrTNRfauxu0tmncpuTPsT8VUrRFLjyyc5A6lASk33f5k3FNSeeHOtD11eUmOOIuF
/XDPw4krLsJyKPY4xoDX9Bn3dk68Bkkj8zSzATItY6AdgjFxlw+a9MftZkbiN0OX
pwYPDnXopKq4rA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:05:41 2026 by rpki-client