Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: /uE+VYn2UHJbn+fp5wDEvn9bSKhyCiVFhLUaqO/R6wk=
Subject key identifier: BB:28:21:33:5D:8E:B4:16:A6:49:7B:77:2B:F1:06:FB:55:BB:08:87
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019D382E42B20C7316D6D7C0583488F19748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 11BC
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: SZom58pWQiCLqRQjajiGayAZ9MTIFGwafZ28OwBGr4Y=)
2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:b2:0c:73:16:d6:d7:c0:58:34:88:f1:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=bb2821335d8eb416a6497b772bf106fb55bb0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:4a:8c:1e:10:75:9c:a3:e9:a1:b1:4e:59:
17:02:12:20:bf:3c:5f:11:41:ac:b9:c7:44:78:77:
52:21:5f:fb:4f:77:44:6f:ec:bb:eb:e2:0b:35:09:
93:22:6e:da:bb:18:9c:4f:32:63:7c:3f:43:02:f9:
e8:00:5d:cd:8b:11:ca:8b:21:02:38:19:68:c7:1d:
e3:37:36:dc:9b:41:a9:38:ad:47:6e:c4:e3:e8:e4:
98:b2:ad:dd:20:9c:1a:a1:fc:4c:64:8c:40:ba:69:
1b:eb:0b:87:e8:e6:17:e9:6e:de:5f:15:f2:33:30:
3e:7e:8a:cd:f1:54:f5:af:92:42:0c:d3:9b:18:a8:
02:35:a1:d8:aa:0e:ee:cb:0a:58:a0:ff:88:0c:1e:
41:f8:e5:a2:b9:7e:d8:f5:ec:c3:6a:c6:6a:39:ca:
d0:e4:df:ce:76:66:ed:db:fe:d5:a8:08:5c:2e:08:
e8:f6:32:56:98:7a:fd:30:30:29:34:c5:07:e9:8e:
20:58:c0:29:1b:b6:04:4d:e8:dc:4e:c4:a4:34:92:
f7:ee:b7:50:a4:31:57:3f:6e:83:fb:c4:0a:14:e8:
91:c3:6b:30:5f:11:44:2d:48:58:75:f0:33:65:e9:
0f:d9:d7:96:1e:9b:1c:7d:00:fd:30:4f:11:7d:31:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:21:33:5D:8E:B4:16:A6:49:7B:77:2B:F1:06:FB:55:BB:08:87
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:96:e2:b5:ac:8e:71:5e:47:b1:39:47:ff:e6:a6:e1:1d:
b8:22:57:63:99:48:89:18:15:22:c2:04:6e:2c:98:aa:e3:55:
73:2d:87:46:e0:af:bc:63:2c:95:93:5d:44:b1:1c:b6:70:76:
d0:8b:51:17:74:eb:8b:c9:ca:a4:a5:10:45:3c:4e:66:26:1d:
ce:74:46:3e:94:65:15:f2:6c:d4:d4:b5:9c:23:0a:30:0d:f9:
ee:2c:1b:d7:28:3e:47:11:61:fc:34:21:e4:61:b8:f6:b2:78:
e9:22:4e:5f:ac:cb:c1:95:a4:b2:08:f2:1a:c5:f7:42:02:52:
ba:ea:20:1d:30:48:cb:04:cb:bb:80:8f:0a:79:86:93:2e:5b:
fd:27:62:f4:c9:f4:de:88:d4:3b:3d:82:ce:d2:41:31:c6:04:
05:9b:2a:22:a9:f7:dc:01:9e:83:a1:42:72:2b:bf:3f:aa:40:
fd:1e:0b:f1:69:c8:2b:9d:90:b3:14:76:d1:8c:2d:37:1d:08:
5d:47:6a:c1:f4:2b:97:16:72:2f:59:8f:52:e2:6b:5f:24:6a:
0c:ed:37:47:6d:2c:ca:90:47:ea:8e:ed:65:0c:05:d8:8b:89:
ac:5b:71:b4:4f:e4:99:a0:b7:95:bf:65:ed:9e:77:d1:70:e0:
50:1a:9a:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkKyDHMW1tfAWDSI8ZdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
EyhiYjI4MjEzMzVkOGViNDE2YTY0OTdiNzcyYmYxMDZmYjU1YmIwODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfBKjB4QdZyj6aGxTlkXAhIgvzxf
EUGsucdEeHdSIV/7T3dEb+y76+ILNQmTIm7auxicTzJjfD9DAvnoAF3NixHKiyEC
OBloxx3jNzbcm0GpOK1HbsTj6OSYsq3dIJwaofxMZIxAumkb6wuH6OYX6W7eXxXy
MzA+forN8VT1r5JCDNObGKgCNaHYqg7uywpYoP+IDB5B+OWiuX7Y9ezDasZqOcrQ
5N/Odmbt2/7VqAhcLgjo9jJWmHr9MDApNMUH6Y4gWMApG7YETejcTsSkNJL37rdQ
pDFXP26D+8QKFOiRw2swXxFELUhYdfAzZekP2deWHpscfQD9ME8RfTEeGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsoITNdjrQWpkl7dyvxBvtVuwiHMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRaW4rWs
jnFeR7E5R//mpuEduCJXY5lIiRgVIsIEbiyYquNVcy2HRuCvvGMslZNdRLEctnB2
0ItRF3Tri8nKpKUQRTxOZiYdznRGPpRlFfJs1NS1nCMKMA357iwb1yg+RxFh/DQh
5GG49rJ46SJOX6zLwZWksgjyGsX3QgJSuuogHTBIywTLu4CPCnmGky5b/Sdi9Mn0
3ojUOz2CztJBMcYEBZsqIqn33AGeg6FCciu/P6pA/R4L8WnIK52QsxR20YwtNx0I
XUdqwfQrlxZyL1mPUuJrXyRqDO03R20sypBH6o7tZQwF2IuJrFtxtE/kmaC3lb9l
7Z530XDgUBqakg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:29 2026 by rpki-client