Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: uMHv2WVND7hB0K8XHgWZBrlvlBHSYleDdT5rrWAMOCg=
Subject key identifier: 95:C6:21:71:CC:F6:36:75:05:29:8F:E2:42:F1:5E:20:E6:09:24:28
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01A12C205389D594CACEBAE49D7D5AE1C192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 13C8
Signing time: Sun 11 Oct 2026 18:01:18 +0000
Manifest this update: Sun 11 Oct 2026 18:01:18 +0000
Manifest next update: Mon 12 Oct 2026 18:01:18 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: SHlbHko59zgwdqu23gabdDvh0/dJNf9r5QPCi5Th3ZE=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:53:89:d5:94:ca:ce:ba:e4:9d:7d:5a:e1:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Oct 11 18:01:18 2026 GMT
Not After : Oct 12 18:01:18 2026 GMT
Subject: CN=95c62171ccf6367505298fe242f15e20e6092428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:ca:ef:12:83:7a:6c:46:88:56:d9:7f:45:
35:98:db:42:6a:38:e4:db:74:63:e7:b2:57:47:1b:
3c:e3:ec:56:43:f4:15:6c:3d:d9:c2:5b:fd:ad:6c:
f8:28:e0:4b:08:93:19:57:af:3e:8b:07:78:b1:5d:
c7:8f:a3:90:32:5e:e5:13:a9:8d:d1:ba:0f:32:39:
2d:e6:1d:75:18:15:53:c5:96:26:26:d3:44:9f:4f:
42:c0:73:10:be:85:50:1c:65:6d:44:4c:ca:f0:30:
4c:64:cd:29:4c:f0:68:67:ca:8a:1b:04:69:3c:06:
05:92:54:fc:bf:6d:dc:50:ca:c7:40:0b:7f:ab:6f:
88:90:45:f8:aa:57:32:8e:84:9e:3f:57:7f:9f:df:
d5:2e:d8:77:15:7c:74:7e:e3:34:2f:c3:d8:49:d7:
83:f5:4a:59:a0:f6:a0:00:71:41:1d:2d:92:44:73:
dc:cb:67:5c:5c:da:94:4d:95:d0:07:8c:db:8a:c1:
3b:78:91:44:f7:aa:94:ca:ae:20:a1:15:cc:02:38:
2c:8c:21:ed:c4:53:de:6d:0e:ea:24:bd:dc:f1:41:
0f:c3:ea:d3:a8:3a:2a:2f:7e:4b:2e:18:99:ac:f0:
74:a7:35:b4:cc:34:18:79:db:ab:f6:87:51:19:72:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:21:71:CC:F6:36:75:05:29:8F:E2:42:F1:5E:20:E6:09:24:28
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:d2:3d:d7:c8:1c:2a:44:22:84:c1:2c:ee:dc:41:97:1f:
12:83:b5:46:1f:af:2b:fd:26:a6:71:23:f5:ad:1c:bc:b7:01:
33:f9:46:07:ca:75:26:58:11:c9:99:22:a1:11:be:b1:ea:fd:
3e:56:21:bb:87:29:80:65:33:3f:20:c3:7d:c1:3e:ef:8d:e8:
a3:ee:a0:e6:5e:46:d7:f6:50:9b:e6:5b:a8:f8:cb:a3:61:b7:
91:c5:0e:bc:ac:dd:9c:e6:5a:4a:2d:f4:06:00:42:f4:ad:64:
ea:f0:2c:63:ba:51:87:b4:f2:92:cd:82:61:0e:a6:a1:44:c2:
83:c5:60:ad:1f:04:0e:51:bd:03:0e:9c:27:f5:e5:98:a9:e8:
66:b8:fe:3a:bb:77:29:6c:9b:08:75:cd:d1:d6:be:2d:df:1f:
9a:5e:88:fb:70:9f:0a:1f:d4:10:97:fc:19:bf:2d:e5:33:90:
d1:77:7b:27:f9:25:44:5d:c2:44:56:b4:25:3e:35:7a:9d:ec:
8c:bc:d8:82:26:aa:d8:2e:0c:a1:4a:d0:b5:84:ab:79:13:36:
0b:28:8e:9c:7d:57:1e:d7:18:f4:39:71:6c:7c:68:88:0a:cd:
7e:f4:d6:ee:9f:85:9f:82:0d:3a:0a:3f:d0:0b:58:08:35:c4:
06:e3:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:25 2026 by rpki-client