Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: 09rH4/xrvcGfAQhmQ17EMCosRKE2K5k3IP6kdM+coPg=
Subject key identifier: 8E:4C:A1:D1:DF:A5:CA:D7:29:AA:D0:4A:D6:F9:88:54:AA:E9:AC:A6
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019DCF07F63502D1E5C69AE1C5F4B7BA056A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0C08
Signing time: Mon 27 Apr 2026 13:01:38 +0000
Manifest this update: Mon 27 Apr 2026 13:01:38 +0000
Manifest next update: Tue 28 Apr 2026 13:01:38 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: e7NSglnarQHKTHaVnqTNpZWzgSzxim9tbYdfPp+CGyg=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:f6:35:02:d1:e5:c6:9a:e1:c5:f4:b7:ba:05:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Apr 27 13:01:38 2026 GMT
Not After : Apr 28 13:01:38 2026 GMT
Subject: CN=8e4ca1d1dfa5cad729aad04ad6f98854aae9aca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:ee:40:8e:c8:d1:5a:bb:5f:31:d0:11:a6:
50:bc:b1:42:d5:45:e2:fa:d8:9d:8c:96:e0:4a:01:
0c:8e:2c:b9:28:d1:99:7a:e6:4b:f4:ec:eb:d2:ac:
b8:70:df:9f:69:3c:67:2f:f1:89:20:6c:2b:97:9e:
45:29:96:56:c3:8e:03:9e:4b:24:f6:c3:ce:06:f8:
00:b2:fb:68:38:b4:43:9b:fb:d8:e4:2b:e2:b9:06:
4d:45:89:88:d0:c3:70:0b:3a:39:27:4f:2f:1c:62:
d1:45:72:00:f7:45:25:f4:05:cb:71:1f:b9:36:82:
e5:93:4c:ea:8f:30:57:74:38:09:30:d5:83:2d:03:
f0:2f:22:ba:fe:81:c9:ce:ae:4a:8d:ea:07:16:91:
71:1a:03:11:9d:ee:2a:78:04:c3:80:bb:28:2c:62:
52:c1:51:66:2f:94:e3:8a:fc:32:2d:c3:07:fa:f2:
67:26:54:86:53:38:76:2a:2e:af:a9:12:78:d0:d2:
39:61:21:48:88:7b:34:e9:e3:56:a2:fe:5f:7c:70:
11:8c:b8:36:ef:66:94:9d:eb:0a:78:50:89:f2:df:
d4:f9:99:c5:ed:1e:f0:07:0b:b5:2e:25:30:61:76:
39:19:cd:97:92:5a:75:4f:e2:fd:1f:7d:09:61:51:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4C:A1:D1:DF:A5:CA:D7:29:AA:D0:4A:D6:F9:88:54:AA:E9:AC:A6
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f3:b3:16:a4:24:9c:9a:c4:23:b6:91:cc:50:ec:2b:82:01:
bd:74:f8:ba:0b:55:d5:6d:80:ad:c1:cd:de:bc:96:6b:e1:98:
3e:fc:bc:e1:46:1a:8a:cd:2f:4d:dc:34:d4:ed:c9:29:a8:85:
2e:90:bf:2c:7a:0d:e1:0b:e0:7b:ac:ce:8a:ab:c4:7b:dd:48:
8a:34:52:fe:79:64:c5:da:5e:bf:d1:44:7a:3f:9a:23:b0:3d:
f7:ae:4b:aa:b9:4d:d0:a1:54:33:f6:f0:7f:0f:6c:4a:4a:8e:
73:8c:50:e9:1e:69:3c:bf:47:03:a2:d2:92:2e:8f:ea:02:6c:
b2:b1:d1:bc:62:c7:51:59:f9:72:9f:17:f0:66:a2:16:6f:03:
7c:e8:9b:ed:09:3d:07:eb:8f:74:5f:20:1e:83:84:9d:33:b7:
65:34:7d:14:ed:78:88:06:e4:a8:a2:6b:1a:00:97:41:44:b8:
2f:e1:f1:22:1a:7c:1d:fe:e5:59:33:82:36:64:74:54:16:33:
13:f6:3a:de:d6:f3:ef:06:b2:23:43:12:f3:f8:8c:97:4e:13:
75:bb:d3:93:e3:66:be:3a:84:4f:55:36:ae:c7:3a:ba:00:51:
49:53:95:21:9f:b0:9d:bb:84:e4:aa:04:5e:9b:99:24:e3:f5:
5f:a4:4c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB/Y1AtHlxprhxfS3ugVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjYwNDI3MTMwMTM4WhcNMjYwNDI4MTMwMTM4WjAzMTEwLwYDVQQD
Eyg4ZTRjYTFkMWRmYTVjYWQ3MjlhYWQwNGFkNmY5ODg1NGFhZTlhY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3fuQI7I0Vq7XzHQEaZQvLFC1UXi
+tidjJbgSgEMjiy5KNGZeuZL9Ozr0qy4cN+faTxnL/GJIGwrl55FKZZWw44Dnksk
9sPOBvgAsvtoOLRDm/vY5CviuQZNRYmI0MNwCzo5J08vHGLRRXIA90Ul9AXLcR+5
NoLlk0zqjzBXdDgJMNWDLQPwLyK6/oHJzq5KjeoHFpFxGgMRne4qeATDgLsoLGJS
wVFmL5TjivwyLcMH+vJnJlSGUzh2Ki6vqRJ40NI5YSFIiHs06eNWov5ffHARjLg2
72aUnesKeFCJ8t/U+ZnF7R7wBwu1LiUwYXY5Gc2Xklp1T+L9H30JYVG2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ModHfpcrXKarQStb5iFSq6aymMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffOzFqQk
nJrEI7aRzFDsK4IBvXT4ugtV1W2ArcHN3ryWa+GYPvy84UYais0vTdw01O3JKaiF
LpC/LHoN4Qvge6zOiqvEe91IijRS/nlkxdpev9FEej+aI7A9965LqrlN0KFUM/bw
fw9sSkqOc4xQ6R5pPL9HA6LSki6P6gJssrHRvGLHUVn5cp8X8GaiFm8DfOib7Qk9
B+uPdF8gHoOEnTO3ZTR9FO14iAbkqKJrGgCXQUS4L+HxIhp8Hf7lWTOCNmR0VBYz
E/Y63tbz7wayI0MS8/iMl04TdbvTk+NmvjqET1U2rsc6ugBRSVOVIZ+wnbuE5KoE
XpuZJOP1X6RMTw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:10 2026 by rpki-client