Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: bNwAwjbx8bqDMsyQrixAarA+BKrcbYRnqC8U+pfn448=
Subject key identifier: 82:A8:8F:96:29:C0:AD:31:AF:D7:C4:23:E6:49:D6:22:33:DF:A8:DD
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019D390A32188DEF8CAB6868500E019CFEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 159D
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 9YtLnj7YazxHRfmD1uv/Yz1SZBNJAYTsKBI9tITLfxU=)
2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:32:18:8d:ef:8c:ab:68:68:50:0e:01:9c:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=82a88f9629c0ad31afd7c423e649d62233dfa8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:a5:45:4d:4d:ef:e0:8e:dc:b0:19:8d:73:
b5:ff:f0:e1:e4:d7:00:7b:92:d7:a7:98:15:78:2f:
f8:43:b1:46:d9:9a:81:b1:fe:f8:bc:ef:30:39:20:
22:0b:e0:d9:cf:42:e1:56:f7:20:00:87:2f:3b:84:
1c:a1:e3:4c:1c:f1:02:7a:49:3b:a5:a4:15:b6:70:
11:44:c5:07:e0:98:10:c3:a6:0a:85:d8:e6:c2:02:
ee:d1:40:97:5a:6a:7e:37:b7:5a:a6:22:c4:fb:d1:
32:30:c2:01:17:31:91:c2:99:9e:1f:66:31:a6:aa:
e3:ec:b9:49:12:20:f1:ee:cc:b6:9f:c2:ed:8f:e8:
a0:e7:f0:7b:46:c3:15:58:ff:9d:bd:8d:28:56:8b:
fe:62:84:f9:81:88:45:a5:ad:cb:18:bb:50:e4:bd:
30:2a:76:ee:06:41:59:18:39:ca:71:70:67:20:e3:
e6:50:bd:75:e0:ad:36:77:69:68:06:d3:f6:79:55:
f4:49:dd:d3:cd:ff:b3:d9:64:d0:e9:c9:9f:80:d5:
d9:8c:bd:de:ba:3b:89:58:5f:7b:2e:a8:e7:54:65:
b0:11:4c:36:b7:37:6b:c1:6b:37:c8:82:c1:23:72:
84:af:7b:fb:75:a9:f7:ad:8c:66:b3:10:b0:f2:26:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:8F:96:29:C0:AD:31:AF:D7:C4:23:E6:49:D6:22:33:DF:A8:DD
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:14:7a:91:05:8e:9f:63:b1:06:40:34:eb:6d:10:78:5a:57:
4c:5a:5a:0e:00:16:2a:62:6b:31:92:51:51:85:3f:09:f8:e7:
4a:43:e7:bb:ca:ad:f4:fb:17:e2:d0:a5:42:5b:fc:69:23:ea:
11:68:52:e2:ad:70:35:5c:6b:4f:ae:2d:4f:a4:02:20:88:38:
30:b3:30:1b:b2:f7:2b:69:1c:11:b0:50:d8:8e:1c:7f:db:77:
5c:27:da:46:92:72:89:d8:10:74:b4:4b:1c:ba:9e:ec:a3:7a:
6a:86:b1:a1:4a:df:bd:1b:2f:c7:d7:41:ec:bc:fd:22:10:be:
7f:56:b3:37:46:7f:d4:19:96:7d:3b:01:52:6b:06:87:ca:73:
2a:a5:70:36:f8:78:09:74:44:1b:ea:f6:cd:fd:99:24:81:f4:
7c:66:bc:d1:fc:84:80:85:aa:11:51:0d:8e:15:11:47:f8:37:
53:a0:8d:96:a9:db:59:62:c5:56:e2:5d:44:be:e7:1a:25:d3:
24:08:d7:aa:8c:24:f2:71:93:2b:24:94:82:72:88:dc:1c:ff:
58:5a:01:92:d4:c4:1f:6d:87:0d:17:aa:8b:8e:21:22:03:0b:
da:31:8a:45:c9:3c:68:67:b3:aa:5d:1e:57:dc:f3:c8:f1:20:
f7:29:97:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CjIYje+Mq2hoUA4BnP70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx
MzExYzUwHhcNMjYwMzI5MTAwMTAyWhcNMjYwMzMwMTAwMTAyWjAzMTEwLwYDVQQD
Eyg4MmE4OGY5NjI5YzBhZDMxYWZkN2M0MjNlNjQ5ZDYyMjMzZGZhOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iGlRU1N7+CO3LAZjXO1//Dh5NcA
e5LXp5gVeC/4Q7FG2ZqBsf74vO8wOSAiC+DZz0LhVvcgAIcvO4QcoeNMHPECekk7
paQVtnARRMUH4JgQw6YKhdjmwgLu0UCXWmp+N7dapiLE+9EyMMIBFzGRwpmeH2Yx
pqrj7LlJEiDx7sy2n8Ltj+ig5/B7RsMVWP+dvY0oVov+YoT5gYhFpa3LGLtQ5L0w
KnbuBkFZGDnKcXBnIOPmUL114K02d2loBtP2eVX0Sd3Tzf+z2WTQ6cmfgNXZjL3e
ujuJWF97LqjnVGWwEUw2tzdrwWs3yILBI3KEr3v7dan3rYxmsxCw8iZ4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKoj5YpwK0xr9fEI+ZJ1iIz36jdMB8GA1UdIwQY
MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt
NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3
LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBR6kQWO
n2OxBkA0620QeFpXTFpaDgAWKmJrMZJRUYU/CfjnSkPnu8qt9PsX4tClQlv8aSPq
EWhS4q1wNVxrT64tT6QCIIg4MLMwG7L3K2kcEbBQ2I4cf9t3XCfaRpJyidgQdLRL
HLqe7KN6aoaxoUrfvRsvx9dB7Lz9IhC+f1azN0Z/1BmWfTsBUmsGh8pzKqVwNvh4
CXREG+r2zf2ZJIH0fGa80fyEgIWqEVENjhURR/g3U6CNlqnbWWLFVuJdRL7nGiXT
JAjXqowk8nGTKySUgnKI3Bz/WFoBktTEH22HDReqi44hIgML2jGKRck8aGezql0e
V9zzyPEg9ymXNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:44 2026 by rpki-client