
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: TyDq3sKXAo7SJlpRzDROLRL2HVRIk7iHJ2V7xvWZwKM=
Subject key identifier: 08:A5:81:E9:D4:9F:52:2A:5E:FE:25:54:30:9E:42:9C:4A:89:6D:85
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019F9E159A2E49F4136D1B88FEAA2AD6C086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 16B4
Signing time: Sun 26 Jul 2026 11:00:43 +0000
Manifest this update: Sun 26 Jul 2026 11:00:43 +0000
Manifest next update: Mon 27 Jul 2026 11:00:43 +0000
Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: SLmlZObP21nsCvHRO0tQjNyVOajHzUNMdFFkdbLNjpc=)
2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:9a:2e:49:f4:13:6d:1b:88:fe:aa:2a:d6:c0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jul 26 11:00:43 2026 GMT
Not After : Jul 27 11:00:43 2026 GMT
Subject: CN=08a581e9d49f522a5efe2554309e429c4a896d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:e7:02:88:c5:28:00:c0:cd:d9:49:0f:cd:
ab:91:e0:f9:1b:44:7b:7e:a2:5b:98:0c:a9:7f:8a:
9b:f0:ab:15:c3:4c:97:0b:c6:64:aa:b8:c7:a7:0d:
1a:12:56:9e:b2:8a:a8:95:2d:95:11:66:6b:bd:45:
c7:06:d5:08:8c:cb:15:2f:dc:04:5a:5c:b8:a4:88:
2e:39:8e:c6:22:99:d1:70:80:e1:ec:13:73:1f:7a:
f3:31:be:ef:24:5d:64:39:34:29:a3:3a:89:4d:c4:
e7:0c:57:ae:25:89:5f:96:78:13:ef:3f:f3:ab:5b:
71:72:f9:b1:8e:a9:70:c5:d0:5e:4f:4f:09:e8:64:
ed:ce:d8:fb:40:ae:e1:0c:c6:46:31:88:4a:e0:0f:
44:9c:10:8f:40:df:96:49:c2:af:17:84:d6:53:e5:
e0:46:ab:2a:08:77:70:c2:08:3a:1c:6b:90:9a:13:
77:e4:54:aa:f1:ff:8a:66:06:a9:78:02:a7:dc:20:
2a:6a:cf:c0:7b:c1:b0:c4:f0:00:21:5b:bf:0c:ac:
2d:a0:f1:b5:f6:22:90:7d:b9:82:f9:33:bc:5a:d2:
91:56:51:b1:43:1f:10:9b:df:f7:e7:97:df:9a:fe:
83:d2:ed:05:9c:6e:22:b0:7d:a7:b6:a4:ad:b8:85:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:81:E9:D4:9F:52:2A:5E:FE:25:54:30:9E:42:9C:4A:89:6D:85
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:58:b9:55:4a:0d:1a:11:ef:dc:a8:0b:77:d1:27:da:95:
b3:ab:e8:96:58:f8:0a:9e:64:25:42:fd:94:80:fa:e2:ed:6e:
09:57:89:9a:ac:df:80:8a:27:c7:90:48:cd:49:ec:1f:e8:6c:
59:bd:da:ce:13:b5:4b:ee:6d:a7:16:3f:1c:ab:16:80:a1:06:
a4:4b:d9:55:e8:96:65:32:08:87:93:30:74:8b:25:38:78:2e:
23:f3:80:a7:1e:79:92:c9:61:32:46:ea:00:c9:fa:b1:41:f5:
ec:a0:f6:b8:cf:cf:f6:67:45:d7:f3:2d:30:64:ae:04:cc:49:
9c:27:2a:ea:85:b9:1d:4d:d8:8a:c1:ef:1b:fc:c0:6e:46:4b:
c7:f8:2c:cb:d1:78:42:2e:4a:33:ba:e5:78:fa:9d:5c:9b:0f:
c9:c7:25:13:93:ae:89:5f:b5:17:2d:7b:36:21:3f:ac:eb:a4:
07:35:27:ef:e9:49:40:58:3a:41:5a:4f:20:96:f0:d1:da:f8:
e4:ad:7b:b3:eb:e6:61:0f:3a:91:88:af:e9:90:f1:5e:04:c0:
8c:f6:01:1c:b8:a9:34:f8:2c:52:73:9c:9d:a0:43:59:42:b7:
6d:98:0e:1a:7a:02:f0:0d:c0:7e:33:77:34:c4:c8:c4:b5:8c:
cd:b7:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:54:46 2026 by rpki-client