Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: +AmdolXKMyCQvKioAqJvx7ejHnQSs7aa1Rf9yqSWuRI=
Subject key identifier: 53:3E:B4:C0:B7:47:FB:83:93:A2:C1:BC:EB:0C:31:79:14:02:16:7F
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019CA9459E37BBC4AE3DCEC82A5A18157166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 1172
Signing time: Sun 01 Mar 2026 12:00:37 +0000
Manifest this update: Sun 01 Mar 2026 12:00:37 +0000
Manifest next update: Mon 02 Mar 2026 12:00:37 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: IcdYY+FFcd4I2gxMa1i8P413a+T5NKI7u5igqt2z6DY=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:9e:37:bb:c4:ae:3d:ce:c8:2a:5a:18:15:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Mar 1 12:00:37 2026 GMT
Not After : Mar 2 12:00:37 2026 GMT
Subject: CN=533eb4c0b747fb8393a2c1bceb0c31791402167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:2d:e3:5f:9b:ac:02:df:5d:d1:2b:5f:c9:
7d:45:56:03:e2:92:e3:83:98:f3:08:12:9c:7a:2f:
d2:c4:5e:88:82:01:7a:53:48:59:a9:0a:bc:9d:80:
f0:16:64:15:96:8e:18:c2:14:fa:cd:6b:97:6d:c9:
22:4c:55:f9:03:d8:6f:9e:b8:09:5b:be:02:7a:ee:
be:aa:a4:9d:6e:45:29:74:75:49:56:c7:96:10:b5:
6c:12:bf:02:5e:cb:d1:d8:9b:f8:ee:97:63:fb:5f:
de:6b:18:2a:44:5f:78:34:db:ac:4b:c0:26:d1:37:
4e:8f:07:66:8a:06:80:1f:fb:76:7c:6f:57:29:2d:
41:0d:f2:da:4a:b1:ad:34:b1:e6:10:fc:23:08:88:
c7:37:64:fe:63:f4:e1:1b:4b:a9:be:20:b5:76:99:
22:6c:2e:15:79:9f:bb:9c:7b:49:63:83:5c:11:75:
6b:54:13:18:be:e5:05:5b:5f:98:c1:26:34:8d:d3:
85:39:04:40:07:40:dc:42:19:cf:f2:65:27:39:e6:
74:f8:ce:aa:bf:72:fb:9a:7d:25:74:00:a6:25:e1:
43:ed:80:13:9c:6a:c8:3b:a8:b9:b5:9b:cf:1c:16:
40:23:d9:6e:e5:6c:b5:56:af:44:ee:3a:20:72:e1:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:B4:C0:B7:47:FB:83:93:A2:C1:BC:EB:0C:31:79:14:02:16:7F
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:c2:e7:ea:47:2f:a7:61:16:33:71:bb:36:94:f7:db:53:
fc:11:7c:28:8d:e4:b7:e3:9a:d2:3a:80:83:ee:3e:a4:dc:46:
b7:ee:90:59:cd:ed:e6:8f:4f:be:65:8c:91:f6:a2:83:79:94:
99:40:45:00:a7:03:f3:f3:21:e0:23:35:0e:59:62:86:b0:11:
17:02:6b:1d:23:29:60:1a:39:aa:7c:b2:9c:8d:9f:f1:b1:ce:
3d:d5:b8:8c:49:85:83:13:b0:db:5b:ce:6a:41:90:e4:7b:2f:
bd:6f:b4:fa:9d:c9:67:ed:50:14:1a:83:c5:a3:3b:d2:9b:fb:
e6:81:2a:d8:1c:ba:6f:77:7b:28:1a:12:5b:f2:ea:4e:b2:93:
01:73:d3:bc:98:b6:bc:61:39:bb:af:6f:2a:aa:fb:05:14:18:
fd:2d:f9:a8:e7:2c:11:62:b0:e1:f5:88:ac:b2:02:1f:a1:3c:
90:7f:9d:f1:2c:88:b2:f9:36:07:93:d0:86:0a:04:04:24:f0:
6e:fd:f2:3f:ae:e5:dc:b3:c4:54:1e:5e:10:66:91:e5:aa:79:
12:f1:4e:1d:57:be:39:3d:24:50:db:d7:43:12:80:f5:00:6c:
bd:ca:9d:fb:ee:80:10:38:0d:09:28:9a:34:9b:9b:8c:9d:9e:
c1:c3:cd:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRZ43u8SuPc7IKloYFXFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjYwMzAxMTIwMDM3WhcNMjYwMzAyMTIwMDM3WjAzMTEwLwYDVQQD
Eyg1MzNlYjRjMGI3NDdmYjgzOTNhMmMxYmNlYjBjMzE3OTE0MDIxNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W8t41+brALfXdErX8l9RVYD4pLj
g5jzCBKcei/SxF6IggF6U0hZqQq8nYDwFmQVlo4YwhT6zWuXbckiTFX5A9hvnrgJ
W74Ceu6+qqSdbkUpdHVJVseWELVsEr8CXsvR2Jv47pdj+1/eaxgqRF94NNusS8Am
0TdOjwdmigaAH/t2fG9XKS1BDfLaSrGtNLHmEPwjCIjHN2T+Y/ThG0upviC1dpki
bC4VeZ+7nHtJY4NcEXVrVBMYvuUFW1+YwSY0jdOFOQRAB0DcQhnP8mUnOeZ0+M6q
v3L7mn0ldACmJeFD7YATnGrIO6i5tZvPHBZAI9lu5Wy1Vq9E7jogcuEO5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM+tMC3R/uDk6LBvOsMMXkUAhZ/MB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpPC5+pH
L6dhFjNxuzaU99tT/BF8KI3kt+Oa0jqAg+4+pNxGt+6QWc3t5o9PvmWMkfaig3mU
mUBFAKcD8/Mh4CM1DllihrARFwJrHSMpYBo5qnyynI2f8bHOPdW4jEmFgxOw21vO
akGQ5HsvvW+0+p3JZ+1QFBqDxaM70pv75oEq2By6b3d7KBoSW/LqTrKTAXPTvJi2
vGE5u69vKqr7BRQY/S35qOcsEWKw4fWIrLICH6E8kH+d8SyIsvk2B5PQhgoEBCTw
bv3yP67l3LPEVB5eEGaR5ap5EvFOHVe+OT0kUNvXQxKA9QBsvcqd++6AEDgNCSia
NJubjJ2ewcPN9A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:40 2026 by rpki-client