Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: GBrdwtZYc5QjyKnSUyPhn7ShXWQBteCIeQkXcker9JA=
Subject key identifier: 54:19:22:02:2F:A6:42:B3:95:0B:0D:3A:42:68:A5:6E:8A:61:C0:09
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019D27048DEBAE868EF5AEBC6E6DDECF9AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0BB1
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: S3/XJcRCyP1Y8xYPSnq5Cs20xp2XiRNLHMeDi5Uzg8M=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8d:eb:ae:86:8e:f5:ae:bc:6e:6d:de:cf:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=541922022fa642b3950b0d3a4268a56e8a61c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:46:63:39:e8:d9:e0:f1:bf:23:77:f5:15:
f4:6e:38:0e:2e:6c:ef:a6:0b:bf:a3:0c:9f:93:0c:
25:3f:c8:73:54:83:9f:1d:36:f2:01:59:9e:11:b0:
15:95:e2:45:99:c2:f6:8e:78:74:4b:31:7a:fc:04:
a6:49:49:41:4c:0b:b1:46:b2:c9:b2:d2:78:9e:5f:
6f:dd:9d:51:ff:6b:eb:e2:a7:31:00:6a:4a:9d:15:
12:18:d1:44:e4:a5:a9:09:b6:0b:5c:75:42:2a:2f:
92:5e:6e:ef:f6:70:ee:bf:d8:6a:72:ba:de:0a:0f:
8c:e6:87:8f:2f:dd:98:63:f4:81:17:1a:fc:16:cf:
a0:f5:0b:c0:07:ec:3f:94:88:ab:ce:15:0c:d5:d6:
30:d4:f1:a3:0c:0b:8c:fe:68:bd:d4:16:32:83:05:
d1:59:71:d9:6b:1b:21:85:8a:39:86:43:d8:14:d2:
86:80:bb:36:4f:0a:06:e7:bd:ab:aa:be:fb:7d:64:
82:1e:e2:d2:e5:65:39:21:56:77:aa:d3:fd:57:03:
fd:d6:3c:62:ac:d2:25:a6:da:17:bc:bb:a8:80:9e:
18:68:43:80:87:70:76:0c:1f:96:f3:24:14:d7:70:
8e:57:78:9f:b4:51:58:4a:f0:ea:d6:39:7d:14:54:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:22:02:2F:A6:42:B3:95:0B:0D:3A:42:68:A5:6E:8A:61:C0:09
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1a:ed:b5:0c:7b:16:c3:1e:c9:39:7d:ea:d9:39:a1:7d:5e:
40:db:26:0e:15:23:e2:1a:26:32:0b:4a:73:af:95:c3:71:1e:
5a:4c:3c:21:d9:59:23:d8:a3:d3:cb:1a:6f:b3:ce:90:93:b4:
f7:5b:59:38:48:d8:32:01:f6:64:82:a1:81:ce:df:5e:a7:97:
98:1b:61:e9:cc:b9:e8:ff:c9:5e:56:66:12:28:e4:a4:36:fd:
58:e8:0d:54:06:71:24:f4:4a:bc:88:0e:8d:8e:69:8c:62:d9:
b5:4a:5b:ae:05:3f:18:3a:07:82:f4:cd:f7:a9:98:49:b6:f3:
5d:dd:a5:f0:9f:34:54:2f:8f:43:80:42:12:d1:e1:bd:ef:a9:
aa:7a:a7:27:49:92:5b:05:f8:0a:87:e6:19:1e:0c:68:44:b8:
69:b5:57:74:6b:90:d6:56:bf:1e:a0:05:fb:01:42:13:f2:a6:
4f:10:9e:96:d2:cc:71:eb:b2:95:15:37:88:63:59:33:d7:20:
29:b3:19:74:f0:2c:64:25:9c:0a:d4:d5:91:94:92:cf:e7:89:
85:c7:59:bf:e5:6d:b9:dc:02:cd:de:4e:6d:53:13:80:e1:f5:
fd:fe:4f:b2:12:88:89:16:b7:6e:5e:12:02:71:72:15:71:77:
20:b6:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:01 2026 by rpki-client