Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: UVOCtrEoO+kg746aSza1Ye6X2RsMkwX1PfPhIJhLOjU=
Subject key identifier: 29:52:DF:76:E6:8D:B8:EA:8E:9E:89:83:F7:2A:42:48:D6:D4:82:C7
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019CE55AC14C4E416B0402B6EF36F9F0E76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0B8F
Signing time: Fri 13 Mar 2026 04:00:55 +0000
Manifest this update: Fri 13 Mar 2026 04:00:55 +0000
Manifest next update: Sat 14 Mar 2026 04:00:55 +0000
Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: tzNz9FRYv1RmAacb7XaaYtCsdDlQhgkOsj4yZlygYi8=)
2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:c1:4c:4e:41:6b:04:02:b6:ef:36:f9:f0:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Mar 13 04:00:55 2026 GMT
Not After : Mar 14 04:00:55 2026 GMT
Subject: CN=2952df76e68db8ea8e9e8983f72a4248d6d482c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:6b:14:3c:94:51:8a:b6:d0:cc:40:3b:95:
55:7f:85:31:fc:29:a9:2b:16:34:6e:98:89:48:39:
f0:c2:3c:56:37:56:00:41:62:ca:73:59:8c:e0:53:
7e:58:fc:b1:89:3d:bb:aa:8b:af:1e:4d:0f:d8:83:
ed:74:bf:96:d3:89:67:ad:b4:78:c9:58:61:12:20:
ea:a5:f5:d9:a7:71:8e:ed:f7:2f:93:70:e3:72:d3:
25:d1:51:1a:e0:cb:0e:08:8f:2b:b9:93:be:cd:d4:
6f:5e:e5:4d:59:82:5c:8b:d1:f4:87:31:6c:96:ad:
b6:d3:0b:01:72:8c:5e:85:54:5b:85:eb:1e:5e:61:
39:6e:d2:62:6f:d3:5c:74:8d:55:9b:49:f2:d4:22:
51:92:23:c3:01:0a:43:ea:34:01:30:fc:5f:64:cf:
f9:e9:8e:52:ed:66:b4:57:b5:34:2f:0b:91:6d:16:
26:ab:46:e9:d6:19:8c:cd:21:86:08:af:19:ea:c1:
54:9a:f0:51:b3:94:ce:09:5c:30:de:8d:a4:d9:cc:
42:6a:06:9d:b8:90:02:b7:63:fb:32:e5:31:a8:ca:
eb:4a:f1:f8:3d:22:4e:c6:e7:be:1f:64:1b:c9:63:
1d:c9:e5:ca:7e:3b:bd:ec:58:9c:b3:c3:ca:01:9a:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:DF:76:E6:8D:B8:EA:8E:9E:89:83:F7:2A:42:48:D6:D4:82:C7
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:49:6a:fc:d2:92:0e:1b:28:de:bb:0b:1e:ee:b7:83:48:
87:ed:4c:cf:3c:01:83:f0:e2:ac:df:19:3c:b5:ba:6c:39:d9:
ff:d9:de:48:5d:0f:35:9a:aa:79:40:d3:07:71:86:43:8e:c2:
eb:2d:30:89:14:c3:5e:14:31:d8:3a:2b:ca:4e:44:c4:db:f7:
7e:ab:15:12:bb:d4:d1:18:be:c5:15:25:18:46:53:17:bc:7b:
48:14:95:2c:95:03:94:0d:83:ee:23:f0:6a:5e:0b:1f:50:6e:
cb:9b:aa:e8:c4:06:7c:58:6c:8f:1d:1d:81:ef:64:ea:f7:cb:
12:2a:1a:b2:6d:ab:4e:d3:2d:5e:b0:ce:bd:c0:2f:ed:dd:13:
e9:c4:af:b0:7b:d0:5e:0a:33:97:ac:94:52:48:76:50:5a:03:
59:5e:8f:d8:0f:60:54:51:db:89:e5:9e:da:2c:4b:84:82:42:
ef:73:c6:98:87:8c:81:d5:82:93:ca:8c:ad:5d:40:e8:e2:f8:
71:59:d0:1d:20:c6:40:01:94:4f:16:43:b4:f5:3e:ae:0b:7f:
f6:6e:8c:6d:36:ce:49:a3:bd:f9:ef:d9:17:d5:a0:06:d1:75:
f1:83:b6:df:2c:b7:da:1e:91:ac:ed:0a:63:2c:ad:f7:27:29:
91:54:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:58 2026 by rpki-client