Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
File: ihz-evMMHHJdI25KL8Kv1wn65kQ.mft (raw, json)
Hash identifier: o+gmsI6fxgT0w1sFXqFSK2Ra2OlwYBtSnaUNoZEVaII=
Subject key identifier: BF:8B:E2:28:B0:8E:6A:65:EB:3E:F9:B7:9A:39:97:4A:40:A9:CF:68
Authority key identifier: 8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
Certificate issuer: /CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Certificate serial: 01A08C0DCC2F8EAC585152D209DAD90FB5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
Manifest number: 0E06
Signing time: Thu 10 Sep 2026 16:01:49 +0000
Manifest this update: Thu 10 Sep 2026 16:01:49 +0000
Manifest next update: Fri 11 Sep 2026 16:01:49 +0000
Files and hashes: 1: ihz-evMMHHJdI25KL8Kv1wn65kQ.crl (hash: wxls/Teyy2o8pm4zbE0/fkfyRci869QtIg7MjlSGmhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:cc:2f:8e:ac:58:51:52:d2:09:da:d9:0f:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Validity
Not Before: Sep 10 16:01:49 2026 GMT
Not After : Sep 11 16:01:49 2026 GMT
Subject: CN=bf8be228b08e6a65eb3ef9b79a39974a40a9cf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:17:e3:72:1a:c3:4d:17:5c:70:8d:da:8e:
e6:22:fc:ab:08:d1:0a:9e:eb:20:58:19:11:15:c6:
c6:84:33:23:1e:d7:e2:8f:ef:ce:7b:ca:11:2c:a3:
88:13:20:af:52:b6:00:09:51:96:71:c6:f7:0e:47:
c7:33:b0:9e:48:09:37:12:b7:41:74:d6:8c:83:c4:
e7:dc:26:8d:a0:8e:d0:8f:3f:27:d0:d9:c4:58:27:
98:40:cb:22:52:3b:cd:cc:9a:40:fc:b2:ff:6d:93:
e4:d6:88:ce:24:c1:c0:ef:53:3b:e0:77:07:b3:ba:
99:84:ef:bb:2b:99:2c:6a:41:ba:51:95:04:f0:1e:
5c:bc:36:dd:c2:70:5b:5d:34:39:30:1f:85:3c:d3:
96:7b:6a:46:93:6a:8a:2f:ef:d5:28:ec:b6:7d:60:
d9:00:3f:50:48:1c:ff:3f:ff:4c:23:03:9c:9f:15:
19:ce:03:59:b9:65:90:b7:3e:1c:1e:fa:ad:89:f6:
a1:ee:fe:f2:dc:9b:31:30:07:ef:33:2e:ad:b6:93:
d1:9f:8f:00:32:d2:b0:83:59:be:64:13:95:27:43:
c1:16:6c:a4:dd:8e:fa:78:9d:e4:a1:90:5f:3f:5e:
33:2c:84:b7:3b:6d:7c:13:75:ef:d2:10:dc:f4:58:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:E2:28:B0:8E:6A:65:EB:3E:F9:B7:9A:39:97:4A:40:A9:CF:68
X509v3 Authority Key Identifier:
keyid:8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:f5:44:1a:8d:7e:4a:9a:f9:be:17:14:73:7f:db:3e:61:
bb:d1:0b:a6:de:d0:90:bb:b4:16:3c:94:42:d3:56:3c:52:59:
89:8d:d4:5c:b2:40:70:65:2d:18:69:31:3a:45:c7:7b:b7:65:
d6:c6:fc:dd:1d:de:5e:cd:ee:3d:e3:79:73:47:b8:27:91:45:
f9:d2:9b:ea:84:ba:6c:de:17:c1:82:31:18:e0:c3:fc:ae:69:
d9:91:92:03:cc:fe:f8:3f:78:e5:c3:a6:63:8e:cd:83:97:32:
f7:29:f9:a5:ab:03:bb:c3:c8:78:08:de:98:a5:b5:44:1b:36:
8c:dd:36:aa:6e:e5:ee:1c:7e:71:bd:f8:25:82:1a:95:07:e2:
b5:2f:1e:32:d7:f7:09:af:96:09:9f:37:02:18:f4:b2:81:3d:
f2:d7:4f:75:c7:0e:61:ac:72:1d:47:81:ed:58:bd:ad:a5:b1:
eb:35:9c:4d:be:5c:d6:29:56:a7:00:44:b6:4a:4b:48:a7:79:
ee:9d:23:19:1a:17:e1:cc:ba:3e:73:9a:c3:6e:e4:ac:fa:f8:
61:ce:47:c6:a1:fc:3a:22:12:90:88:a5:45:06:0d:08:08:ed:
e1:12:3d:6d:41:da:2e:5b:2a:e5:93:94:a0:d8:46:95:b2:b5:
be:ad:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:03 2026 by rpki-client