Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: gFOsUPc7v0w7rncQK1kBpouTz/+HS3F+s1Q5Q/LFf8U=
Subject key identifier: 51:36:7A:FA:EB:F4:1A:75:90:61:71:29:DA:B7:64:12:36:09:AD:12
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019D2A725BDB9445C9459861111D65873F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 156F
Signing time: Thu 26 Mar 2026 14:00:30 +0000
Manifest this update: Thu 26 Mar 2026 14:00:30 +0000
Manifest next update: Fri 27 Mar 2026 14:00:30 +0000
Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: 4GY8zEg4tvcON0Wuhz8lf2evyQDGKvw7JdNjcCyWf74=)
2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5b:db:94:45:c9:45:98:61:11:1d:65:87:3f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Mar 26 14:00:30 2026 GMT
Not After : Mar 27 14:00:30 2026 GMT
Subject: CN=51367afaebf41a7590617129dab764123609ad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:45:9e:1e:b0:8f:04:06:2e:2a:01:fc:1d:
92:41:4b:88:af:20:5b:d6:75:8b:87:93:78:8e:80:
cf:0c:51:ea:b7:85:d4:66:25:9b:73:61:f4:6c:72:
f2:3a:04:b6:38:db:13:ce:d1:68:8f:11:a6:7b:60:
bb:e4:ba:c8:8d:53:4d:e0:8b:cc:9c:ca:a2:1d:06:
f1:3c:ae:b4:25:b4:9e:6c:7a:77:c4:bc:8e:e2:91:
9a:72:e0:0e:2c:34:e3:ff:c1:4f:be:bd:7f:2d:05:
20:72:65:0e:41:43:e0:48:b2:f0:90:ef:09:29:17:
3d:cc:9d:6a:5c:67:3d:72:68:38:9c:dc:91:f2:fa:
d4:6b:3c:b1:14:0c:5e:a1:40:a6:7f:f0:d4:70:a5:
02:b7:f3:6b:39:f6:6b:7d:b7:dd:9f:6c:c7:e7:29:
5f:d6:c4:e3:77:6b:a8:a9:9c:f1:bf:ec:00:6f:a9:
57:b6:4f:de:66:ce:a5:0c:38:a9:15:0c:a2:da:0d:
44:ca:ca:52:fc:71:f7:0b:27:3b:f9:93:78:58:44:
19:6a:bb:0c:5e:2b:2d:ae:51:de:1c:8a:95:b9:57:
38:5f:76:77:0e:ae:3b:8f:bd:bf:07:1a:03:ce:f4:
23:e6:8d:0c:71:5a:db:78:82:f3:61:b0:59:be:d4:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:7A:FA:EB:F4:1A:75:90:61:71:29:DA:B7:64:12:36:09:AD:12
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ca:b8:32:11:fd:4d:b3:f7:5d:3a:42:9e:32:6c:4c:8b:fe:
19:a0:0d:5d:1a:ef:54:2d:df:64:e3:9c:80:76:aa:fb:98:8e:
04:e6:a1:10:ef:a4:29:b3:08:a2:bc:7b:20:a1:e7:33:1a:fa:
0a:b4:9f:24:f1:66:d9:34:cf:51:fb:46:ed:77:08:fd:d5:64:
e9:3a:cb:49:52:bc:23:69:89:16:b0:c2:f5:0d:3d:55:62:3e:
53:02:f6:39:63:f5:c2:69:ff:59:ee:b2:97:fc:b5:81:74:f0:
8c:41:1a:48:0a:01:cc:f8:9b:e4:47:02:b5:75:15:14:db:ac:
d9:db:ec:a1:6a:a4:e8:a9:48:28:17:7f:1c:7e:6a:18:ae:bb:
d7:4d:08:67:14:de:33:c1:c2:4f:9a:7f:21:94:81:36:b3:04:
d3:c8:07:15:eb:33:ce:cb:9f:5d:9d:aa:38:21:c4:ee:36:99:
b1:b0:d9:e9:54:39:93:9b:99:0f:43:d9:cc:8d:11:3b:8b:ee:
68:5c:50:73:0e:cb:d6:cd:a8:b6:75:f8:ec:9c:74:f6:46:65:
d2:1a:00:c1:72:34:0c:ae:6b:ee:60:f0:86:6a:aa:48:c9:ed:
c7:fd:c0:82:be:f6:49:21:4f:8d:69:b7:e0:7a:05:5c:34:9c:
b5:b5:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:52 2026 by rpki-client