Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: xzK7GhP+39+MAmjWHcrWsa5k4Bo6MOxNVwxatP16uWM=
Subject key identifier: 46:6D:30:F4:7B:82:42:BF:86:8A:C4:35:13:22:0E:C3:89:F4:64:88
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019CAEDA50E391789BB3796C296EAA0307D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 152F
Signing time: Mon 02 Mar 2026 14:01:08 +0000
Manifest this update: Mon 02 Mar 2026 14:01:08 +0000
Manifest next update: Tue 03 Mar 2026 14:01:08 +0000
Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: Qo1Rg7A45JKUh3urRrmqFzbhp7ySE8q700c3zFpA8R0=)
2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:50:e3:91:78:9b:b3:79:6c:29:6e:aa:03:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Mar 2 14:01:08 2026 GMT
Not After : Mar 3 14:01:08 2026 GMT
Subject: CN=466d30f47b8242bf868ac43513220ec389f46488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:f8:f3:0b:fd:03:dc:a8:18:da:8c:c5:d9:
32:3d:af:4b:2c:29:19:d5:25:6b:d6:72:ee:d8:f8:
4f:01:5f:71:e2:fe:8c:a5:08:d9:1c:5c:24:f1:2a:
50:76:b9:99:5a:43:ab:e0:fe:31:4c:84:50:f5:d7:
9a:f5:7a:8f:60:b2:df:c4:bb:f4:dc:f7:f6:a0:6d:
1d:1d:b1:55:0b:6a:d5:71:62:a7:9b:f9:04:ee:a4:
23:3e:a4:47:75:c8:65:46:a1:1c:fa:2b:94:40:65:
dd:21:ef:1d:58:65:12:ed:04:c3:ea:7b:60:50:1c:
78:d9:17:12:c5:ae:ee:d6:9e:81:15:be:ae:85:b4:
ad:58:03:8d:09:13:f3:14:a6:cb:d1:f8:a4:25:45:
0c:41:54:e9:ea:e4:e0:0e:82:2c:8d:3e:81:1a:bc:
b4:7f:34:55:bb:2e:74:af:a7:9f:7e:e7:6d:d5:c6:
d3:2f:7d:76:59:95:14:c5:a4:b9:6a:61:68:73:60:
ac:33:cc:9b:e2:90:ac:a5:f6:79:e2:87:81:ec:d1:
6b:0c:23:6a:bc:95:99:47:d4:a2:88:79:81:30:80:
a0:b4:64:b2:df:98:47:38:52:26:1f:ab:68:91:21:
7c:62:2d:a6:b1:7f:c3:c4:94:58:3a:1b:a5:14:ec:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:30:F4:7B:82:42:BF:86:8A:C4:35:13:22:0E:C3:89:F4:64:88
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:78:6e:f1:6d:b4:e9:a6:e9:04:8c:3c:8d:be:62:ce:2f:22:
1b:70:fa:c0:c9:a2:f1:40:6e:4c:97:20:29:59:82:9b:02:9a:
17:5d:10:77:9f:c9:10:2f:0c:2f:9d:50:51:9d:1c:40:76:0c:
f6:4f:d8:ed:f9:c9:15:1d:16:60:95:70:d7:83:05:8f:38:14:
9e:32:b7:41:d4:94:1e:b2:0a:e5:a1:ef:4a:1e:21:8c:cf:24:
1c:d5:a9:72:a1:4b:f4:09:66:f5:c3:cc:a5:1d:a0:ca:ad:83:
f1:3e:16:46:60:24:dd:8f:08:b4:27:e5:66:42:17:96:b3:51:
61:24:97:63:49:de:e7:f7:2e:64:44:78:59:cd:05:bf:32:d4:
93:40:c3:30:b5:de:d4:80:97:80:3d:ac:f3:7a:0e:13:f0:4a:
17:2a:87:df:dd:3d:13:6d:09:bc:bf:cb:28:cc:70:0d:ab:18:
d2:0d:eb:8f:4f:1d:31:9d:70:5e:c2:52:a6:77:4e:4d:ad:73:
cf:4b:6d:bb:10:6c:cb:0a:f5:d4:86:ee:85:d1:bd:8f:f2:ef:
7f:12:39:37:0e:2d:16:a3:8f:73:6f:70:b7:f8:0b:e6:01:92:
a9:a5:2b:4c:45:ca:85:10:68:53:f4:f8:47:01:8b:29:f7:52:
60:f2:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:41 2026 by rpki-client