Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
File: IH_lA3M22POUAym_Ct23kzhO9SI.mft (raw, json)
Hash identifier: 45SOrC0aMfU3GCAH3z1RkJcHq5dwgkrDhnh+l2luvnU=
Subject key identifier: 88:0C:26:A5:BD:6B:D0:0A:E1:69:39:D4:E6:60:64:22:C7:27:F8:86
Authority key identifier: 20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
Certificate issuer: /CN=207fe5037336d8f3940329bf0addb793384ef522
Certificate serial: 01A17438E7803CA23463478E095ACD4B0F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:00:48 +0000
Manifest this update: Sun 25 Oct 2026 18:00:48 +0000
Manifest next update: Mon 26 Oct 2026 18:00:48 +0000
Files and hashes: 1: IH_lA3M22POUAym_Ct23kzhO9SI.crl (hash: ZgbEiUZ7wq8UCyKQGzDsPlYLEtA4k6rXj+vsUpkSldc=)
2: TsdPJx7OiywMM122PIYNYWmJFCc.roa (hash: x07yC7l/UbYraclqrFWdPKzw6DYUXEN90KFVFdpgkOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:e7:80:3c:a2:34:63:47:8e:09:5a:cd:4b:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207fe5037336d8f3940329bf0addb793384ef522
Validity
Not Before: Oct 25 18:00:48 2026 GMT
Not After : Oct 26 18:00:48 2026 GMT
Subject: CN=880c26a5bd6bd00ae16939d4e6606422c727f886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:da:90:cc:20:a5:93:ec:9b:76:75:ce:34:
b7:9a:ba:7a:0e:d2:ba:cf:cf:96:81:14:24:75:60:
27:a3:52:a2:34:1f:d1:1b:40:9d:70:9d:5b:6d:65:
8b:88:11:5d:1d:4a:99:96:2d:eb:97:b0:a0:44:ae:
da:f0:e4:11:a1:1d:ad:ed:b4:c9:8f:ab:ab:c8:f6:
e1:81:bf:b0:ea:e0:b6:10:07:75:81:d6:fd:3d:35:
da:5b:89:02:96:d3:49:d5:37:1d:0a:d4:25:88:cd:
3c:1d:fc:df:ca:a0:9d:eb:4b:6e:fc:3d:18:20:25:
85:87:e1:5e:d1:ef:fd:3e:23:0e:b4:8a:d2:72:5f:
94:ad:cb:cd:36:cd:55:75:18:67:41:41:a4:42:4a:
74:61:75:61:60:94:96:d5:35:1c:1f:f5:ca:ec:19:
fa:20:66:79:15:ae:cd:3f:33:bb:01:dc:fc:86:72:
c7:9d:1d:62:fb:c0:b1:ec:61:5c:27:b0:6e:2f:31:
03:df:cb:bf:8b:88:a2:be:ca:68:f7:71:d3:20:15:
17:4b:8c:e2:1a:13:d1:5a:8d:12:5b:20:58:eb:93:
0b:92:e1:a5:58:57:78:c1:9e:fd:ec:01:e0:b0:7c:
51:dc:d5:2a:93:09:fe:15:92:08:23:88:14:73:4c:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0C:26:A5:BD:6B:D0:0A:E1:69:39:D4:E6:60:64:22:C7:27:F8:86
X509v3 Authority Key Identifier:
keyid:20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:e8:2f:9e:4c:f4:3a:ad:9c:58:21:f3:f3:45:45:b7:2b:
fc:80:f3:f1:1e:96:48:be:34:64:f3:70:e1:28:d2:c2:c1:cd:
0e:06:22:32:23:6f:ae:c5:13:1f:9c:76:3d:44:2a:93:eb:9f:
8d:26:2c:b8:09:97:de:fb:97:b9:21:95:69:92:c8:f0:10:c7:
50:a9:e0:b8:f0:ab:f8:27:5d:ea:65:23:ce:1b:c0:cd:b4:25:
ba:24:70:70:b5:49:3b:19:f0:e2:59:d4:5f:42:50:97:9e:71:
a7:0b:17:c8:83:d8:19:99:ad:da:9c:3f:36:fa:3d:ac:a6:ea:
0d:64:10:67:d9:87:cd:da:b8:20:50:9a:6d:ca:b0:8d:10:28:
a9:d3:1d:57:c9:a0:33:28:3b:4b:44:de:82:a2:a2:6e:7b:cb:
bc:eb:60:52:d0:4b:96:d5:f7:1d:19:49:99:92:5a:91:43:38:
17:4a:d9:fd:23:d7:26:3e:94:c3:e3:a6:4a:df:37:31:88:ac:
cc:f2:25:05:e2:d5:79:af:18:3c:aa:b9:d9:85:a3:b8:db:c5:
e0:f5:85:31:68:24:07:01:a0:f1:13:78:02:24:3c:bf:1f:38:
dd:c1:f9:3c:3c:65:e5:25:d0:2f:43:0b:61:08:77:25:00:76:
c2:96:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:48:58 2026 by rpki-client