Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: Kx0s9CP+36iiJCjikB7Jbj/5rujtfRKmEUbOO+kOFw0=
Subject key identifier: A1:01:1E:8A:CE:B0:B7:74:A9:B8:1C:5C:D3:EB:56:25:E7:03:11:98
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 01A08B9F0F14F882E5C87D7594DA6DBD0E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 1941
Signing time: Thu 10 Sep 2026 14:00:51 +0000
Manifest this update: Thu 10 Sep 2026 14:00:51 +0000
Manifest next update: Fri 11 Sep 2026 14:00:51 +0000
Files and hashes: 1: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: 4IL0m1d6B0wY2mQBgX+8TMRriadHwqcMp1WdEWEm56M=)
2: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
3: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
4: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
5: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (hash: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:0f:14:f8:82:e5:c8:7d:75:94:da:6d:bd:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Sep 10 14:00:51 2026 GMT
Not After : Sep 11 14:00:51 2026 GMT
Subject: CN=a1011e8aceb0b774a9b81c5cd3eb5625e7031198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:3f:df:2d:9b:ab:93:f1:c9:c8:cc:68:77:
34:78:9b:cb:8f:77:37:55:ab:f7:33:7c:c4:5d:bc:
05:39:40:94:fc:5c:49:30:b2:12:97:d7:2d:90:58:
25:f4:f8:db:5f:39:7b:6f:8c:c1:f1:61:30:03:cd:
6b:1d:69:1d:c7:b4:25:fd:5e:d0:0e:03:ac:34:b7:
b8:d8:12:2b:71:8d:2e:b6:c3:c9:48:57:31:8d:83:
16:45:fe:3a:08:a1:e5:8f:03:a0:e3:63:4b:94:d6:
92:41:0e:52:cd:82:4e:cb:80:ba:b1:b1:3f:12:af:
be:d5:26:24:5c:d1:96:93:18:a1:41:b7:f3:e3:3e:
2e:31:1d:12:c8:51:bc:67:91:f4:3d:10:86:63:47:
49:88:a7:5d:1a:98:56:49:58:20:f7:4c:77:e7:7a:
b3:32:dd:c0:0d:23:fa:45:47:f1:97:7e:cc:88:aa:
0f:4f:99:67:00:ac:0c:ed:08:98:9b:3a:59:8b:90:
6e:8d:00:32:a0:49:86:69:ad:47:fe:0d:7f:f0:a9:
57:ea:3a:3f:ed:e6:2d:51:a4:4a:5c:9c:71:f2:a2:
91:d3:a1:a3:fd:92:4f:2a:dd:87:ee:3c:13:2a:7c:
9f:39:79:a6:f0:b9:d1:cb:aa:57:42:6f:6b:eb:c5:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:1E:8A:CE:B0:B7:74:A9:B8:1C:5C:D3:EB:56:25:E7:03:11:98
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c4:ac:41:78:a1:93:ac:89:6c:5a:b1:85:80:b4:43:a6:5f:
1d:9c:63:23:c6:38:11:55:af:0a:30:b4:05:cc:3c:52:d6:69:
c4:9a:db:05:66:c5:7a:b5:1c:93:8e:5f:d8:62:83:75:27:b5:
13:58:8c:29:29:90:22:f5:9f:60:47:34:44:a0:3b:ac:24:61:
0e:e4:69:13:6c:7a:56:a1:db:19:51:cb:52:9e:1e:92:48:4f:
2e:fe:ff:35:8b:87:72:0c:2f:08:88:1a:59:f5:61:9c:6a:36:
96:cb:f6:ef:2e:98:94:e5:18:94:5a:57:bf:c4:8a:31:d4:39:
9c:b1:6f:12:cd:3a:61:32:e6:c4:ba:83:cb:e6:bc:2b:5e:12:
47:ff:f7:dd:1c:cd:d9:6f:d3:b7:c0:15:54:4e:17:98:e8:e2:
e4:df:01:78:ba:19:55:7a:fc:29:8b:23:39:0f:85:98:a9:91:
4b:fa:7f:bf:39:d5:95:47:a0:ae:8a:54:c6:fc:cf:c5:0b:c1:
37:a9:66:3a:8f:3f:7d:5f:7c:24:a9:e2:4a:5b:d4:bd:11:12:
37:20:59:9c:3a:e6:98:b0:54:03:02:03:84:4b:67:b9:9a:c6:
f9:37:d7:57:b8:f0:45:18:b4:d9:79:c8:39:71:bb:05:d3:26:
3a:f6:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:36 2026 by rpki-client