Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: ZwmsAPvV+8crSlBHTXYDQ7DOaUPLQCH0rS6PCIjIxWY=
Subject key identifier: C1:88:A8:23:A3:7C:18:6F:78:8C:E7:D2:2D:B2:CE:AD:54:3A:A7:85
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019F190C572FF43B0BFC65FB5A14A60CCF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 12B5
Signing time: Tue 30 Jun 2026 15:01:06 +0000
Manifest this update: Tue 30 Jun 2026 15:01:06 +0000
Manifest next update: Wed 01 Jul 2026 15:01:06 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: XLywqvp5n1KaGXlRl5ImSjP9kpZ/ua8oKUBY9LlPEzg=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:57:2f:f4:3b:0b:fc:65:fb:5a:14:a6:0c:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jun 30 15:01:06 2026 GMT
Not After : Jul 1 15:01:06 2026 GMT
Subject: CN=c188a823a37c186f788ce7d22db2cead543aa785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:ad:f8:97:68:cd:76:0f:ee:34:75:2a:89:
63:06:6b:50:21:6d:4c:3f:d2:df:51:a4:92:e5:42:
b3:e0:1d:ee:c9:df:07:c8:28:4d:5c:36:5d:7a:8e:
51:da:59:69:24:55:2b:08:7b:46:c6:76:e5:97:d5:
6b:1d:35:71:e4:cd:83:1b:37:42:b1:00:d8:71:a3:
dd:d9:d2:40:46:c7:37:61:31:20:bc:0f:be:de:50:
b8:1c:2d:42:00:f7:e0:01:27:ca:88:95:0e:30:d6:
9f:23:f1:e6:f1:b2:a3:c3:11:e3:f0:51:d9:4f:92:
04:55:4d:46:68:50:66:10:46:ee:d4:2b:1b:e5:be:
a4:d4:a8:5e:36:82:27:66:a6:82:d4:27:3f:0b:a4:
41:be:c2:70:ca:f3:9c:4e:46:95:4b:69:3d:71:29:
fc:1d:14:9e:88:8f:c6:64:39:30:4c:fc:ca:a5:d1:
fb:68:37:cf:41:f9:85:31:4b:bc:dc:3b:02:50:fc:
b7:1d:4b:e9:d8:27:1c:ed:3c:f3:a6:9a:9e:43:81:
8a:ff:40:1e:01:30:6c:2b:19:32:07:8d:85:d4:71:
6e:56:c2:b9:ac:94:37:d9:16:0b:50:ef:c5:5e:2f:
0d:a7:99:7d:23:fd:d1:e1:68:3b:4d:b6:23:0d:9f:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:A8:23:A3:7C:18:6F:78:8C:E7:D2:2D:B2:CE:AD:54:3A:A7:85
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:04:e1:9b:d5:d8:17:97:fb:d9:31:d0:bf:d4:f4:10:4f:
37:6a:d3:31:f3:67:7f:6c:73:2c:ab:3b:75:5d:58:93:37:e7:
cf:ec:f1:67:27:29:d2:84:80:57:ed:92:3a:6a:6a:4c:4d:35:
4a:63:a2:44:d8:7e:a5:a3:c8:cc:35:a6:a3:da:c7:2b:a4:d0:
89:23:8b:4d:ac:91:cc:a1:57:a0:0d:2b:c5:ad:6d:6b:95:1b:
68:e0:d1:26:e8:38:2d:a7:70:21:03:20:b6:af:2e:42:6a:47:
b7:9d:3c:94:f9:7b:4e:57:3c:4c:0f:66:32:ee:ae:18:00:00:
97:eb:67:8b:53:aa:73:49:09:00:db:da:60:00:00:5c:d0:72:
04:02:a5:f3:ae:e7:be:d1:1c:d6:73:fb:44:5b:36:92:1a:69:
82:eb:75:c5:10:1f:11:45:da:b8:d9:fe:3a:fa:ec:3c:97:55:
e8:62:0a:f5:a8:39:5c:60:5f:b6:5d:9c:00:31:8e:6e:02:dc:
a6:22:a6:c8:13:ed:3a:d2:65:e0:9f:2e:e7:70:d2:64:2d:ea:
dc:b3:9b:ee:7d:48:64:57:7f:11:6c:68:fa:4f:98:2a:78:7c:
ea:0b:f6:b5:64:d8:75:03:00:7a:a7:35:7d:00:e8:0e:6e:bb:
11:03:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:25 2026 by rpki-client