Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: JbGzkxjJQOmQ4rCgAvNKU4L204Zs87AbWhAtaSC6nRg=
Subject key identifier: D1:36:10:E0:03:D4:3F:BF:2D:66:5A:B0:C4:EA:7D:06:5A:DF:7A:67
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01A15F3168184229C47A4A39E021247EFE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 17C3
Signing time: Wed 21 Oct 2026 16:00:35 +0000
Manifest this update: Wed 21 Oct 2026 16:00:35 +0000
Manifest next update: Thu 22 Oct 2026 16:00:35 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 9ICoqXN+akzvmR3I/NtohK6ZgCPFPWQI5gsnHYF39Lc=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:68:18:42:29:c4:7a:4a:39:e0:21:24:7e:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Oct 21 16:00:35 2026 GMT
Not After : Oct 22 16:00:35 2026 GMT
Subject: CN=d13610e003d43fbf2d665ab0c4ea7d065adf7a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:86:1f:a7:b5:fb:8a:d5:fc:6f:29:ce:6e:
d8:d0:27:66:28:e4:fa:ba:7d:03:73:48:7a:c1:6d:
0e:94:19:80:01:2a:dc:a0:9d:a6:2f:6b:2d:eb:09:
2a:0d:26:b0:7d:6a:ed:f6:3d:26:f0:6a:a3:47:74:
c5:72:51:32:60:9c:55:60:7b:85:9b:39:c6:b4:b9:
d1:0d:30:ec:10:38:d5:46:47:46:75:24:39:ce:d9:
63:b1:8d:f1:02:18:6c:e0:39:bd:c9:46:05:82:d5:
d0:d4:19:6f:08:57:b4:d4:50:8f:ac:fb:34:34:52:
6b:e6:60:f0:78:db:97:b0:4c:2e:e0:85:4c:eb:fb:
e6:75:ee:55:64:28:e5:34:d8:0a:0b:fe:64:fa:9f:
64:4a:e3:18:1b:e5:64:27:ce:15:2e:6d:15:35:35:
49:00:24:0d:97:2b:5e:b3:32:ec:64:a9:79:a6:d9:
dd:0c:0f:a4:b1:d7:fc:6e:34:a5:9d:2b:d7:cd:53:
e8:95:bc:ee:fb:81:44:35:05:97:4d:4d:66:1e:cf:
0a:0b:1f:b4:f1:b5:8f:de:e5:05:8a:06:3b:cd:33:
32:84:9d:40:72:8a:37:61:a6:af:68:db:dc:1e:5c:
ce:91:87:32:95:f6:8a:7a:59:a2:9c:e4:04:8c:e1:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:10:E0:03:D4:3F:BF:2D:66:5A:B0:C4:EA:7D:06:5A:DF:7A:67
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6a:a3:3d:f7:12:9b:6c:57:5e:ad:a8:43:49:f7:0e:f4:de:
10:c9:27:c1:e4:a9:d2:21:16:30:7c:ca:15:ee:b2:fe:17:16:
59:4d:ef:43:1c:af:1d:5b:cd:e3:16:17:be:91:46:5c:de:89:
ff:c9:c4:23:84:5f:f7:65:a4:6c:b5:c4:08:7b:d7:9f:d7:9a:
a1:00:76:c0:dc:0c:0b:56:b6:68:e9:a9:ef:b9:28:c5:06:80:
a4:75:51:f0:bb:1c:3a:92:37:10:23:ab:b5:c0:60:fe:4e:12:
d9:af:62:b0:19:21:4f:8b:e1:6e:40:99:b2:61:a5:52:c0:35:
98:bc:bb:98:63:c1:08:d3:24:41:0a:0c:8e:af:a9:da:37:02:
9f:c8:d7:f2:29:65:50:0a:85:ef:58:ff:57:37:08:e4:17:d4:
9e:1d:ba:7d:ed:a9:15:ce:41:21:3a:ca:1d:3f:46:45:f7:06:
8a:ae:b9:6e:be:d4:e6:63:6a:9b:66:06:9d:20:05:07:b4:63:
c5:32:9a:ad:19:f0:a9:b7:2d:54:a7:62:91:24:e3:05:83:af:
44:fa:94:ae:e2:31:d5:91:31:64:16:eb:22:e9:e3:63:1e:a4:
cf:ea:22:9a:36:cc:2d:72:83:37:03:a7:1d:51:a9:a8:90:15:
0e:30:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:00:46 2026 by rpki-client