
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: vgQXlIaT/QGYQ8hgT6NM9lxd2V8iS6bjS+2IhSD3VBM=
Subject key identifier: 27:7D:B9:50:4E:61:AD:8D:C5:D0:1F:BD:1C:81:0E:4C:C9:BD:CE:47
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019F92EDDAF2B9E1F4674E717B5E09D7C5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0CF2
Signing time: Fri 24 Jul 2026 07:01:29 +0000
Manifest this update: Fri 24 Jul 2026 07:01:29 +0000
Manifest next update: Sat 25 Jul 2026 07:01:29 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: w1NGLPdEscdqNd6VRm4N/FdSpXwsKK4HU+GyjvZ4UGo=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:da:f2:b9:e1:f4:67:4e:71:7b:5e:09:d7:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Jul 24 07:01:29 2026 GMT
Not After : Jul 25 07:01:29 2026 GMT
Subject: CN=277db9504e61ad8dc5d01fbd1c810e4cc9bdce47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:cf:83:fb:13:85:20:65:26:7e:ad:e5:bd:
f5:80:16:0e:3e:e7:f1:f0:97:6c:06:23:37:a0:f4:
b2:79:77:5e:62:bc:3e:10:cc:6f:23:67:c6:ed:ec:
f2:ee:82:24:a8:dd:c1:0e:12:58:1c:6b:06:f8:b8:
6a:f6:e6:6d:2a:d5:30:29:0e:b2:54:a5:20:31:6b:
cf:2d:66:af:0b:46:32:c6:13:e2:5c:33:c7:6e:ea:
f8:52:f3:ec:07:8a:c6:12:90:28:6d:39:c0:ff:47:
c3:9f:26:00:48:dd:f3:3e:b6:7c:39:ee:23:95:20:
d4:f6:db:17:c4:a1:d8:3f:46:b2:73:f3:e9:d9:4f:
54:2a:8a:9d:ff:2b:c6:50:b3:d3:bf:10:4d:c6:2b:
02:b5:d8:59:a5:32:79:fb:9d:fb:be:d6:9c:4a:18:
81:12:01:6b:2d:ae:7b:1a:14:31:68:fb:66:a7:0b:
e7:7d:f2:9a:aa:63:6f:a5:6f:8a:1a:34:09:90:a3:
f6:1c:fd:d4:3a:b9:25:0b:2c:40:1f:65:a9:5b:79:
47:41:83:d8:c9:92:d6:f3:16:8f:a3:b9:6d:35:17:
d4:21:f6:3a:6e:44:4f:c8:33:40:a7:ff:4f:69:1e:
10:32:bc:d6:5d:25:3a:78:90:bb:8c:5f:5e:9a:fa:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7D:B9:50:4E:61:AD:8D:C5:D0:1F:BD:1C:81:0E:4C:C9:BD:CE:47
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c9:64:ca:d7:95:0d:87:87:ae:67:35:90:cf:73:8b:31:8c:
af:d5:29:67:05:7a:65:65:39:19:2c:3b:47:59:2e:a2:f1:56:
28:1c:ed:5b:27:6e:59:9b:83:39:3d:c2:68:63:f7:f6:6a:10:
63:47:b8:35:1d:68:eb:60:7d:f6:05:6f:8e:fd:02:0a:5f:73:
2f:1e:c3:b8:2c:ee:11:65:86:e4:d3:ec:0d:34:0d:6e:b1:9f:
47:8c:a6:17:44:96:01:45:aa:fe:df:72:16:42:4d:1c:3f:61:
08:b0:1b:14:1b:7e:82:d8:7c:75:04:08:cd:ad:85:41:9b:33:
23:4b:f1:c1:6f:50:17:66:83:ae:b4:f3:99:9c:65:ce:56:f3:
09:73:39:03:b4:ab:f6:c2:90:e3:69:7c:bc:15:13:51:9d:f7:
92:22:e6:1e:63:77:63:4d:5f:de:e9:4b:ec:99:ea:35:00:b9:
c8:c5:76:76:21:27:f4:01:b9:33:28:f8:2c:09:f3:56:33:1c:
86:99:9b:55:48:b7:68:90:85:89:ef:13:d1:99:cc:d2:ed:5d:
33:7e:be:8c:70:e8:91:32:b7:40:8d:87:21:c0:80:e7:78:ef:
18:ef:ac:d0:36:7a:7f:11:7c:e5:aa:8c:c3:6c:e2:a0:d0:29:
1c:22:54:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7dryueH0Z05xe14J18XXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjYwNzI0MDcwMTI5WhcNMjYwNzI1MDcwMTI5WjAzMTEwLwYDVQQD
EygyNzdkYjk1MDRlNjFhZDhkYzVkMDFmYmQxYzgxMGU0Y2M5YmRjZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwarPg/sThSBlJn6t5b31gBYOPufx
8JdsBiM3oPSyeXdeYrw+EMxvI2fG7ezy7oIkqN3BDhJYHGsG+Lhq9uZtKtUwKQ6y
VKUgMWvPLWavC0YyxhPiXDPHbur4UvPsB4rGEpAobTnA/0fDnyYASN3zPrZ8Oe4j
lSDU9tsXxKHYP0ayc/Pp2U9UKoqd/yvGULPTvxBNxisCtdhZpTJ5+537vtacShiB
EgFrLa57GhQxaPtmpwvnffKaqmNvpW+KGjQJkKP2HP3UOrklCyxAH2WpW3lHQYPY
yZLW8xaPo7ltNRfUIfY6bkRPyDNAp/9PaR4QMrzWXSU6eJC7jF9emvr92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd9uVBOYa2NxdAfvRyBDkzJvc5HMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMlkyteV
DYeHrmc1kM9zizGMr9UpZwV6ZWU5GSw7R1kuovFWKBztWyduWZuDOT3CaGP39moQ
Y0e4NR1o62B99gVvjv0CCl9zLx7DuCzuEWWG5NPsDTQNbrGfR4ymF0SWAUWq/t9y
FkJNHD9hCLAbFBt+gth8dQQIza2FQZszI0vxwW9QF2aDrrTzmZxlzlbzCXM5A7Sr
9sKQ42l8vBUTUZ33kiLmHmN3Y01f3ulL7JnqNQC5yMV2diEn9AG5Myj4LAnzVjMc
hpmbVUi3aJCFie8T0ZnM0u1dM36+jHDokTK3QI2HIcCA53jvGO+s0DZ6fxF85aqM
w2zioNApHCJUNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:56 2026 by rpki-client