Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: x81xz4kyxRvfDYofgxDcGgiyA3U0DTRUR6La82sT1Cs=
Subject key identifier: 42:8E:D1:40:90:41:58:88:71:9D:37:30:91:57:B9:ED:23:9C:5A:8E
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01A17F61503BD9D0DEDED69AA33A80538F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0DF1
Signing time: Tue 27 Oct 2026 22:00:46 +0000
Manifest this update: Tue 27 Oct 2026 22:00:46 +0000
Manifest next update: Wed 28 Oct 2026 22:00:46 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: vN8iFDZct9Pjn1sEsly4aMp5zeoaS8GWoeMXlAoeqxI=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:50:3b:d9:d0:de:de:d6:9a:a3:3a:80:53:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Oct 27 22:00:46 2026 GMT
Not After : Oct 28 22:00:46 2026 GMT
Subject: CN=428ed14090415888719d37309157b9ed239c5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:f7:e3:d1:26:d2:c2:f0:ba:46:21:82:e7:
d4:fa:a8:42:9f:9a:12:11:fb:0b:2e:ab:a8:14:74:
ef:74:1f:c5:5b:c1:c3:c7:b2:de:ad:70:e6:bd:96:
39:7c:a6:72:af:1f:bc:61:ca:f0:aa:a9:f8:ef:47:
f7:4e:d0:df:29:e1:9a:ec:04:08:83:ab:49:8b:9b:
fe:ed:73:e1:e5:ef:96:e4:83:65:8d:83:e9:75:3c:
eb:6a:f1:2c:b8:32:48:2b:83:76:af:7c:11:0e:e1:
3a:fe:12:9f:a0:dd:56:15:f9:fa:8a:3c:d6:a3:01:
8e:07:df:45:5a:7f:25:1b:b0:74:c7:dc:66:16:b8:
72:a1:d0:5a:77:b9:33:f2:77:06:62:d4:c1:dd:dc:
cb:17:f3:6b:56:fb:a0:32:24:58:35:27:d8:09:cd:
b8:30:68:2c:67:74:e3:5a:80:90:da:f8:a9:9c:9a:
61:f6:e5:e9:67:d1:45:4a:48:63:c0:0a:86:bf:a3:
ec:11:3f:0a:1e:b5:27:1a:41:06:ac:1c:c0:4a:c7:
a0:2f:0a:b9:03:df:20:c2:92:64:68:9e:eb:ea:3e:
72:11:75:bb:de:3b:81:2b:5f:5a:90:76:81:1c:3d:
f3:af:8b:35:63:a4:5f:f0:fe:cf:a0:a1:67:0d:91:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:D1:40:90:41:58:88:71:9D:37:30:91:57:B9:ED:23:9C:5A:8E
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6b:68:c9:2f:03:30:cf:3a:ad:36:cf:38:e4:90:4a:d8:ad:
32:37:1d:fe:74:9a:c4:f7:81:16:42:93:52:7b:29:a5:4c:2a:
ea:46:f0:88:97:bf:e6:21:60:84:ec:f6:c8:e3:5c:88:00:b7:
64:b2:cb:06:e5:28:a7:92:f0:bc:a5:82:76:fd:00:1b:02:2a:
87:1d:4a:2c:c0:ba:4b:87:af:2b:7b:04:98:32:a7:b0:35:b0:
4b:e4:5b:b6:48:84:5f:5c:31:21:8b:3b:83:b3:33:ab:1d:ab:
df:18:95:12:0a:40:38:3c:ca:d3:58:a5:40:35:b8:57:4a:3f:
dd:3c:37:61:e7:7d:2d:da:81:d8:4b:31:8a:f3:a0:e7:0c:ec:
04:4c:6b:2c:4c:69:2b:6a:a2:5c:f3:60:58:20:d0:8e:34:a5:
6f:a9:ea:c3:d0:f1:c8:11:54:13:a2:98:2f:b9:34:ab:8e:68:
a1:57:bf:b3:7d:04:6a:19:7c:25:d6:4b:a5:ac:8e:3a:a7:7f:
16:b0:6e:6d:b2:08:78:2f:a3:79:ae:15:16:92:fd:35:b3:09:
1f:6d:c6:dd:3e:06:52:d5:e1:49:69:f3:dc:e9:49:7a:6e:a3:
79:44:fe:f9:77:5a:c7:27:44:c4:74:f2:0b:47:bb:1e:d3:e3:
df:52:96:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YVA72dDe3taaozqAU48fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjYxMDI3MjIwMDQ2WhcNMjYxMDI4MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg0MjhlZDE0MDkwNDE1ODg4NzE5ZDM3MzA5MTU3YjllZDIzOWM1YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGL349Em0sLwukYhgufU+qhCn5oS
EfsLLquoFHTvdB/FW8HDx7LerXDmvZY5fKZyrx+8Ycrwqqn470f3TtDfKeGa7AQI
g6tJi5v+7XPh5e+W5INljYPpdTzravEsuDJIK4N2r3wRDuE6/hKfoN1WFfn6ijzW
owGOB99FWn8lG7B0x9xmFrhyodBad7kz8ncGYtTB3dzLF/NrVvugMiRYNSfYCc24
MGgsZ3TjWoCQ2vipnJph9uXpZ9FFSkhjwAqGv6PsET8KHrUnGkEGrBzASsegLwq5
A98gwpJkaJ7r6j5yEXW73juBK19akHaBHD3zr4s1Y6Rf8P7PoKFnDZHDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKO0UCQQViIcZ03MJFXue0jnFqOMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmtoyS8D
MM86rTbPOOSQStitMjcd/nSaxPeBFkKTUnsppUwq6kbwiJe/5iFghOz2yONciAC3
ZLLLBuUop5LwvKWCdv0AGwIqhx1KLMC6S4evK3sEmDKnsDWwS+RbtkiEX1wxIYs7
g7Mzqx2r3xiVEgpAODzK01ilQDW4V0o/3Tw3Yed9LdqB2EsxivOg5wzsBExrLExp
K2qiXPNgWCDQjjSlb6nqw9DxyBFUE6KYL7k0q45ooVe/s30Eahl8JdZLpayOOqd/
FrBubbIIeC+jea4VFpL9NbMJH23G3T4GUtXhSWnz3OlJem6jeUT++XdaxydExHTy
C0e7HtPj31KWZQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:43 2026 by rpki-client