Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: TfJzODp9InEaOjcAbtg/3CL98mWoflsg7z+jk0g/t+0=
Subject key identifier: 5D:19:95:3A:95:CE:8E:44:3F:2B:BF:7E:84:C6:70:BE:7C:83:DE:E0
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01A08A1E3AA5C1C1315065440434FAE3A2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0D72
Signing time: Thu 10 Sep 2026 07:00:31 +0000
Manifest this update: Thu 10 Sep 2026 07:00:31 +0000
Manifest next update: Fri 11 Sep 2026 07:00:31 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: iP3DLUq4oJIf94lLkVVo5agCCAKcYvJPziEBSekrboE=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:3a:a5:c1:c1:31:50:65:44:04:34:fa:e3:a2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Sep 10 07:00:31 2026 GMT
Not After : Sep 11 07:00:31 2026 GMT
Subject: CN=5d19953a95ce8e443f2bbf7e84c670be7c83dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:fb:54:b4:51:28:6d:df:8a:4d:af:85:ce:
d7:a6:b4:c5:78:98:7b:f0:d6:45:ec:b4:a5:e4:9c:
97:bb:c2:38:b7:67:91:d8:91:7c:8d:7a:8b:c8:9c:
6d:a2:52:37:bc:5f:b6:a4:0c:fb:39:68:90:4d:d2:
a4:b4:ad:91:47:57:05:64:33:42:39:c6:44:5a:09:
12:53:2b:ad:24:8c:7d:62:1c:dc:87:47:ff:47:fb:
28:f4:7e:b5:db:0a:44:9f:63:5d:d3:8f:47:4c:ea:
7b:68:f8:c3:81:41:40:1e:f0:ea:7d:79:5a:e4:f4:
df:ba:1a:9c:5c:e9:0b:96:1a:53:d4:7d:45:56:af:
8b:36:c0:a2:8b:ba:57:1d:ad:71:93:6f:a6:16:2a:
05:72:99:59:87:1f:0b:4c:df:5e:84:2f:b4:a5:4f:
56:bc:ad:43:00:d8:58:52:bd:67:99:5e:19:2f:6d:
73:a4:69:80:6c:87:77:37:a1:47:33:56:c7:20:26:
6f:1c:3b:80:c3:f3:66:80:40:35:46:84:c4:c6:a5:
4f:6b:6d:64:96:3a:04:3e:4b:48:06:39:c2:66:63:
25:c5:b1:14:ad:ff:97:49:78:50:ba:c2:52:d2:88:
fd:7b:7a:a9:ee:0a:08:82:26:f9:19:43:02:b0:28:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:95:3A:95:CE:8E:44:3F:2B:BF:7E:84:C6:70:BE:7C:83:DE:E0
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6a:bf:57:00:6f:b1:19:84:52:50:bb:78:13:40:0b:8e:1b:
a0:1f:e7:bb:95:3c:fd:27:57:be:1c:fc:04:d4:fb:93:ad:56:
d2:8b:8d:87:d6:58:e4:e4:4a:3a:68:ac:7d:62:59:8a:fa:b3:
f1:41:63:f6:64:a4:e9:62:50:2a:5e:1b:97:af:d9:e8:ae:f8:
da:a9:3b:1a:b3:f0:51:2d:2a:53:33:94:c9:9b:9a:0d:cf:b1:
74:fb:9f:f8:8d:79:44:38:1d:00:9a:40:2d:6c:b3:98:b3:7b:
86:0d:68:91:7a:ce:b9:bf:d2:56:00:85:62:05:8a:09:e4:fc:
7f:74:3e:e2:22:29:ce:68:74:2d:ac:30:32:97:a8:52:df:dc:
68:1a:de:8c:df:7e:7a:e3:7b:53:dd:ad:92:66:74:63:6f:1e:
cc:ad:63:f7:25:a6:28:75:b2:8b:1c:79:94:c9:fe:90:19:d2:
64:d8:d8:91:aa:dc:b1:49:90:8d:25:90:69:37:79:fd:5b:05:
5d:67:68:e8:bc:7c:90:73:df:6b:c4:3f:17:f3:64:7a:30:c3:
a7:fb:6e:f3:56:a1:91:32:e2:a0:c7:ce:14:9d:21:e2:25:47:
e1:9f:47:0a:8a:10:8b:32:5a:a3:06:b4:71:3e:36:bd:05:46:
65:76:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:38 2026 by rpki-client