Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: DwE0ld/0Zehy7z6RrWhKZWhZdXQE4pq1WIpzax3gf+o=
Subject key identifier: F6:38:1C:92:4F:5E:88:DD:B0:FB:25:5A:65:50:FA:B2:36:6A:64:04
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019F860D4BFDA8E2E661AC8F92249CC36413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 16CE
Signing time: Tue 21 Jul 2026 19:00:46 +0000
Manifest this update: Tue 21 Jul 2026 19:00:46 +0000
Manifest next update: Wed 22 Jul 2026 19:00:46 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 1tcJhtMbnmfhSGmOKfmIVDs0RODe3LNXV862BBYJaRs=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:4b:fd:a8:e2:e6:61:ac:8f:92:24:9c:c3:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Jul 21 19:00:46 2026 GMT
Not After : Jul 22 19:00:46 2026 GMT
Subject: CN=f6381c924f5e88ddb0fb255a6550fab2366a6404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:fd:2a:8b:f3:31:80:17:86:50:15:83:f5:
0c:c1:e5:96:54:b6:6d:b7:55:54:94:86:98:26:1b:
45:1f:5e:d2:e0:da:1f:fa:cd:f4:7c:c3:ab:74:df:
4f:a1:ab:01:ca:40:cf:93:eb:8b:0b:6e:31:3b:36:
fe:74:25:1a:c6:4b:f4:71:b4:c4:ce:4b:ed:3d:4f:
cd:1c:15:7f:09:41:a2:d9:80:bb:13:52:e4:2d:9d:
cb:70:ba:c8:c3:1f:28:df:e7:ad:7b:df:1f:c5:8e:
55:ed:25:2d:16:fd:2a:ca:41:f0:e2:30:91:6c:f9:
4c:4d:b0:86:14:db:c1:5c:0e:8f:2a:91:a4:9d:f6:
c8:eb:c9:d2:b7:c1:ec:7a:02:79:ce:b5:a2:83:2a:
c5:64:db:40:ff:fa:f3:9d:6c:bc:e7:f2:53:f2:8e:
29:b9:80:9e:e8:43:a5:4f:84:d2:b7:a7:90:60:60:
47:2e:8d:f5:cc:18:0d:ee:7d:be:04:a4:f7:0b:b3:
74:32:e9:d5:ea:79:cf:ac:11:84:a8:da:14:f3:79:
60:10:e4:a5:4d:3a:fc:87:ea:d2:6b:24:8c:87:e4:
4a:38:d7:92:8e:64:d5:be:e9:3c:34:c6:6c:33:22:
83:c9:b4:71:39:60:69:e5:e2:2d:d8:d8:ba:0f:2b:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:1C:92:4F:5E:88:DD:B0:FB:25:5A:65:50:FA:B2:36:6A:64:04
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:ba:de:48:f6:73:33:db:b5:99:a5:7d:c1:3b:e7:16:22:
32:1e:6f:43:b3:e6:c2:13:c5:10:d2:db:40:c1:6f:70:a9:98:
41:1e:16:f7:10:39:81:f4:4f:93:f8:9a:3c:09:7f:ce:04:8e:
2a:b6:cf:bb:9c:62:25:49:fd:96:bc:ea:a7:69:83:50:4b:ec:
12:33:59:8c:33:cd:42:82:d4:92:69:83:32:09:3a:9b:39:6a:
a3:74:70:95:3e:d8:a8:e9:53:da:85:a6:75:a9:6a:ef:7d:74:
03:ac:fa:e0:99:89:37:3a:84:12:ba:96:3e:58:78:e6:f5:64:
d8:0e:a6:7b:03:00:ff:dd:e8:53:63:64:14:7e:7a:fc:d2:6b:
52:36:8c:11:39:65:f0:84:2f:85:94:29:5d:54:97:e1:92:35:
e4:93:a1:72:4a:d7:55:97:ca:8d:fe:de:24:f7:7f:22:fc:21:
d1:3b:ee:4e:ac:03:d8:32:69:41:9c:3e:b0:2f:ff:a5:af:1a:
5a:9e:b9:e7:c6:b6:87:d4:08:6e:f9:4b:7a:a5:2c:85:5b:95:
2c:44:56:08:21:01:d2:6a:f9:5d:41:61:02:27:a4:eb:d0:b6:
ba:95:fc:a4:69:9c:7b:27:f4:db:ee:fe:61:0c:56:ac:9d:c7:
f9:37:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:01:44 2026 by rpki-client