Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: MuxuYps8C8V3qHBJy3eW44NvbiQXxAS12iSOANIQzZI=
Subject key identifier: 43:2E:0E:95:25:1F:57:C3:F9:C5:4B:7D:7F:F8:5C:FC:1F:E5:1F:BD
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019CAA219EC26ACCE3620A486644CFA43E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1553
Signing time: Sun 01 Mar 2026 16:00:55 +0000
Manifest this update: Sun 01 Mar 2026 16:00:55 +0000
Manifest next update: Mon 02 Mar 2026 16:00:55 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: xGSjGX6kAzCyebJmvueR2E6uc8uSqC39T+oHJRf6iGM=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9e:c2:6a:cc:e3:62:0a:48:66:44:cf:a4:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Mar 1 16:00:55 2026 GMT
Not After : Mar 2 16:00:55 2026 GMT
Subject: CN=432e0e95251f57c3f9c54b7d7ff85cfc1fe51fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:f0:25:1d:75:a9:92:3a:0b:1e:77:fa:9f:
6d:f3:ce:cd:31:43:49:ae:da:51:45:d2:b7:ea:2c:
f6:c3:48:be:06:64:59:3c:5e:f9:08:3e:09:f0:b1:
7f:c7:b9:df:91:81:29:5e:10:94:82:dc:16:6c:c9:
7b:9c:cd:3d:04:6f:0e:50:d0:52:96:42:88:31:ec:
f7:55:ff:46:9f:fa:7f:cc:60:08:8c:3e:91:45:fc:
04:48:06:46:7c:a5:e4:45:f2:6a:cc:11:9d:cc:f1:
fc:44:53:81:5e:04:d0:75:96:f0:95:37:69:b7:5a:
06:83:0d:2d:16:57:e4:f6:09:a3:ca:37:39:0b:40:
c4:9b:51:25:09:57:ef:aa:2a:13:5f:75:82:44:ad:
a7:23:35:e8:c0:0b:f9:c2:a8:65:3e:05:76:0e:77:
d7:6e:cf:53:e2:0e:08:8b:eb:7f:9e:91:52:fd:50:
0e:dc:ac:0e:91:96:0e:81:ff:85:11:54:25:63:13:
8a:4f:46:e0:b7:56:15:d2:f7:0e:93:04:61:ca:5a:
12:96:36:8e:83:b5:76:0a:71:4f:27:6d:20:d6:41:
5b:45:1a:69:4d:4e:96:a6:7f:39:dd:7b:2e:be:b1:
8a:79:a2:6b:c5:ec:fb:32:df:e9:b5:48:26:9c:fb:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:0E:95:25:1F:57:C3:F9:C5:4B:7D:7F:F8:5C:FC:1F:E5:1F:BD
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:04:59:df:f8:a5:c1:77:b9:bd:c7:bd:fa:36:37:eb:7c:be:
41:ed:67:6d:77:fd:9f:11:af:6c:ba:d3:3c:4e:32:1d:5e:82:
e0:68:16:b2:64:85:c7:67:f0:22:c9:24:09:bc:7a:02:d4:9e:
13:5f:a0:23:db:48:9c:e3:0b:38:b9:de:db:b2:8e:4d:88:09:
1c:7e:1f:47:2f:af:2f:78:a3:8c:b9:2a:4c:47:86:7b:9e:6b:
1a:6f:41:19:d2:b6:3a:11:c0:6f:b5:2a:45:36:0a:3b:17:b6:
5b:51:e5:cc:4b:40:5b:f4:a1:2e:84:1d:34:d3:cf:a2:f7:67:
40:2e:7a:e3:50:c2:29:4d:d6:b0:e8:91:76:d6:61:cd:a7:7e:
db:c3:6a:0d:fa:bd:37:f1:f2:9d:90:fb:fc:ca:ba:4d:71:ad:
94:dd:d5:ed:fd:5a:08:32:a7:e0:91:0b:63:b3:0b:24:55:1d:
81:2b:9e:33:71:8e:d4:37:34:fe:b2:eb:3e:52:dd:bb:94:07:
3a:f6:38:d5:ce:e1:cc:c5:62:c7:90:99:af:09:f3:44:71:db:
c3:2d:a6:37:bc:7f:0a:39:75:b8:1d:ab:fb:e7:b3:db:37:a3:
19:a7:9b:12:fe:24:ff:ed:4a:90:2e:57:29:a4:e7:52:a1:34:
56:03:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:48 2026 by rpki-client