Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: gGHmaI0yIJL+GoRqs5Iz3xQjuc2NQtZxUpozWQfYwNg=
Subject key identifier: C1:4A:00:53:BE:DF:F4:96:F9:85:9C:8A:4C:6A:4B:89:3B:D4:19:7E
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 01A184BF1FF7F3E53D03B297E0B90340BF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 17B0
Signing time: Wed 28 Oct 2026 23:01:20 +0000
Manifest this update: Wed 28 Oct 2026 23:01:20 +0000
Manifest next update: Thu 29 Oct 2026 23:01:20 +0000
Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: P7c9eB5ff213oNq9omBPOFICFbD9673ZwNq02nPne/I=)
2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:bf:1f:f7:f3:e5:3d:03:b2:97:e0:b9:03:40:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Oct 28 23:01:20 2026 GMT
Not After : Oct 29 23:01:20 2026 GMT
Subject: CN=c14a0053bedff496f9859c8a4c6a4b893bd4197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:7c:0a:f6:ba:a1:53:14:82:4f:6a:88:a1:
01:b2:87:28:17:a5:d5:7f:4c:1b:c8:ea:df:83:43:
b6:4a:c9:68:91:77:db:d0:8a:6b:fc:da:67:ab:ee:
e8:46:2d:bb:0d:13:c3:e3:f1:d9:2c:dd:05:3a:6b:
05:9b:ea:18:43:45:6a:2b:43:34:b7:d7:f8:bc:b1:
9a:1a:fc:8e:b6:21:43:53:36:86:f0:77:f4:b5:52:
c1:9b:6d:a6:07:32:2e:e5:dc:ad:dc:0f:56:6d:22:
55:95:1a:2e:d8:e7:76:c0:45:6f:49:d8:e9:54:b3:
91:7f:86:ad:dd:d8:3d:6f:d8:dc:7d:20:f5:5a:f5:
34:e2:40:26:fc:cb:72:d8:90:00:9b:ef:8d:2f:db:
dc:a8:04:7e:9d:04:61:8e:77:6b:82:14:e6:3b:cf:
65:d8:17:18:39:ab:8c:c8:9c:b9:5a:da:85:b2:e6:
b7:eb:9c:9e:37:67:60:3f:f3:05:86:d0:63:e5:de:
ce:b2:5f:b8:9a:08:d2:06:6b:ac:d3:06:ce:1a:dd:
b0:74:0a:9c:a7:0f:b9:44:8c:d0:47:50:41:9f:6e:
e4:9a:0b:76:f1:7e:aa:80:59:f6:3d:c4:7e:47:42:
ad:a4:db:85:13:6c:a5:57:1a:da:b1:c5:39:be:74:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:00:53:BE:DF:F4:96:F9:85:9C:8A:4C:6A:4B:89:3B:D4:19:7E
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:10:37:da:1f:83:03:62:70:86:30:78:61:c6:2d:31:27:b5:
05:3f:c6:ac:b4:96:c8:cf:93:ad:90:18:d8:bc:af:85:87:50:
9f:21:68:c0:69:77:66:65:37:8e:0f:01:27:a8:9b:da:f1:5c:
25:cd:7c:f5:52:1d:17:b9:18:ac:12:4f:e2:24:a2:47:5c:f4:
96:42:90:f0:f0:57:45:f9:88:6c:5a:13:f2:a4:37:55:8a:92:
86:a2:c1:3e:80:2d:d7:82:49:13:53:ea:c8:65:f6:73:c8:c3:
05:7e:38:f6:cc:17:f0:c1:b2:8c:89:d3:6d:09:c6:ea:30:e6:
14:4c:d6:da:72:6d:c2:b3:f0:90:c1:93:aa:42:2e:b9:5e:27:
b0:e6:75:f1:ee:31:77:32:cb:fd:5a:d7:17:c3:b4:e3:d5:47:
48:03:d0:8f:71:5a:ba:f3:c3:21:3a:9f:be:1d:04:9c:97:a4:
00:83:7c:ef:70:3a:69:18:03:ea:5b:88:9f:71:2e:19:06:5c:
33:24:87:ae:d7:21:c5:4a:06:f8:d8:3d:98:25:71:71:b0:57:
e2:21:8e:9b:b3:db:3a:6c:e6:6f:49:a3:ca:ba:12:00:f0:aa:
b4:59:67:d5:19:c7:89:a4:1a:2c:40:fc:e5:ca:3d:a0:53:b9:
d1:26:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:04:57 2026 by rpki-client