Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: kACXlb+PTRlhUbE2yLtfT9QxVqdD/ac+cQcxhnl/OzY=
Subject key identifier: 3D:81:58:8B:23:01:C3:38:7C:4B:FD:D8:D6:37:D2:5C:0D:8E:C9:0B
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019DCCAAC08408E2D6BBAFE65CECAD621490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 15C3
Signing time: Mon 27 Apr 2026 02:00:35 +0000
Manifest this update: Mon 27 Apr 2026 02:00:35 +0000
Manifest next update: Tue 28 Apr 2026 02:00:35 +0000
Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: bMNgCa7OgyTLHk6DU0y79eYaQXvgY0q3wgrIu8eDicQ=)
2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:c0:84:08:e2:d6:bb:af:e6:5c:ec:ad:62:14:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Apr 27 02:00:35 2026 GMT
Not After : Apr 28 02:00:35 2026 GMT
Subject: CN=3d81588b2301c3387c4bfdd8d637d25c0d8ec90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:ce:29:d6:b5:1f:49:cd:c3:0f:11:7e:70:
25:58:32:89:b7:0c:19:c9:13:eb:5a:4d:55:38:71:
71:e6:88:96:e9:26:13:56:e9:bd:0e:3d:cf:97:e4:
7e:8c:77:1a:b8:cb:0c:8c:f0:4e:bd:01:59:76:90:
c2:d1:8b:e8:b4:7c:2b:51:9c:a3:70:b1:10:b5:e8:
bb:53:fe:43:b1:8d:70:b8:5f:aa:45:1e:97:a0:a5:
3c:3b:f2:1c:c9:9d:5c:8f:f1:51:1e:5b:bf:59:f5:
12:ce:a3:d4:03:e3:88:34:d9:25:23:66:1c:46:02:
73:3a:1e:c5:bb:d8:ff:ec:cf:ad:a2:f2:77:40:97:
94:4c:2e:1b:06:6b:35:99:55:69:cd:1d:8e:0a:1a:
4e:9f:4d:0e:6a:e1:34:c5:15:c5:ad:f6:3b:b1:12:
d5:c4:81:b3:2c:27:dd:02:1e:9a:ac:56:d5:f2:88:
a8:0d:73:c7:ad:7c:df:40:d7:f3:2f:7a:22:1a:c7:
4d:db:95:e9:e7:59:71:65:99:b0:a8:99:ba:5c:74:
63:6f:13:a0:f0:db:07:1d:ec:8a:2a:b5:d9:e4:a8:
40:73:19:fc:18:f3:95:84:50:45:bb:9a:db:3d:2f:
33:21:09:a2:4b:42:81:bf:01:25:e7:b9:71:fc:b1:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:58:8B:23:01:C3:38:7C:4B:FD:D8:D6:37:D2:5C:0D:8E:C9:0B
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:04:9a:47:85:f7:eb:96:bb:0a:d5:ba:61:da:b4:76:8e:
f4:fa:3a:68:d9:5b:4d:17:9f:c4:c1:ae:af:ef:fa:8e:df:64:
1d:35:b8:bf:e6:a1:83:2a:c8:52:0f:eb:cb:de:35:67:a0:d1:
89:e0:f0:cf:97:8e:11:ad:bd:75:56:2b:96:c9:c2:93:d8:00:
4b:15:5b:87:20:18:d1:73:d0:3a:7b:82:37:21:5f:f6:86:70:
a9:33:c9:3c:f3:3e:b5:4b:d1:86:8a:d6:39:ed:a0:4e:a8:2b:
cd:01:c8:8b:8d:ef:84:ba:6e:01:a6:4d:f1:ae:b5:29:29:68:
b7:0d:d4:c9:6a:40:10:e8:5a:2f:e3:69:30:0f:c4:ed:cd:cf:
d8:36:24:62:fd:ff:43:7c:d9:25:ed:10:d3:32:99:61:dc:42:
97:50:33:7b:ab:6b:a9:65:a5:5c:4f:27:7d:e9:a8:ee:9a:92:
56:86:79:b2:ae:4f:bb:6d:e3:84:fd:53:43:94:71:27:0c:3b:
6a:c9:e5:8e:c0:9f:89:b5:0b:a3:6d:71:2c:8f:44:0e:d2:07:
b2:da:17:8a:b7:59:3e:7e:07:1b:e0:2b:b9:6b:32:2b:ef:de:
88:08:99:2a:f7:ac:60:d2:2d:38:bf:00:00:47:05:33:ef:fb:
8b:81:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:21:02 2026 by rpki-client