Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: ERmXw5VnV2WNvnlA2AcWNCVJm0VbsBHgMZDBBzPHPQM=
Subject key identifier: 5B:9E:FB:66:AF:AF:83:2B:A5:F4:73:3F:4F:B5:EB:42:F9:7B:52:44
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019EDC897467B8D58797BEF1AC0C4968A31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 0153
Signing time: Thu 18 Jun 2026 21:00:56 +0000
Manifest this update: Thu 18 Jun 2026 21:00:56 +0000
Manifest next update: Fri 19 Jun 2026 21:00:56 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: g3r+XqIJ0pJFH/VzZIsvqR4vcvnfIJNQmiIb0MeQbCA=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:89:74:67:b8:d5:87:97:be:f1:ac:0c:49:68:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Jun 18 21:00:56 2026 GMT
Not After : Jun 19 21:00:56 2026 GMT
Subject: CN=5b9efb66afaf832ba5f4733f4fb5eb42f97b5244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:3b:35:27:b0:d0:cc:59:cd:06:db:f4:45:
6d:18:2c:f8:19:dc:79:84:ae:53:9f:8c:a0:29:30:
c8:7f:fe:0d:08:38:9e:b9:f6:a1:c3:d8:54:f1:83:
0a:60:4c:fe:68:7e:10:ae:4a:2c:57:93:e1:bb:1c:
0a:7e:bd:62:f5:7b:cb:ef:6b:9f:c3:51:37:05:a1:
1b:85:e2:a9:18:ea:b8:b0:36:b8:ea:79:ff:e2:9b:
34:bd:c9:05:d5:81:64:6b:9b:54:1e:9b:e4:60:f9:
af:c3:a4:0f:ef:63:08:e7:24:34:bd:af:bf:d7:2b:
aa:af:aa:64:b8:bb:3d:51:0b:9a:89:26:9d:cc:b7:
da:49:4f:7c:b3:f0:7d:ab:98:10:f6:37:22:d6:66:
19:df:46:66:24:f9:19:28:36:4d:ce:6c:a8:e2:b1:
ca:41:0e:50:58:af:3c:ea:d0:cf:41:83:19:37:6d:
c6:df:3d:bd:da:3a:d5:72:81:4e:49:2f:f5:de:c9:
83:5f:b1:a4:ef:7b:19:c7:19:02:a1:00:93:24:3f:
a9:93:ea:c5:43:e9:81:f0:81:7b:c1:49:68:b2:5a:
bb:2b:d5:43:89:39:9c:16:41:3e:7d:7e:34:29:b5:
1f:f7:07:56:fd:b6:02:87:41:08:c6:23:be:2e:48:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9E:FB:66:AF:AF:83:2B:A5:F4:73:3F:4F:B5:EB:42:F9:7B:52:44
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:0b:77:fe:61:b8:37:92:75:3c:83:60:57:bf:1b:80:4d:
19:29:d8:47:22:84:f5:8e:b2:79:b1:8d:82:51:ae:c0:b7:60:
22:4a:08:65:15:e3:8c:89:d5:89:1e:07:48:82:49:96:c9:90:
e9:96:56:38:9b:bf:f6:1d:cf:a6:1b:7a:21:98:76:48:35:70:
72:1c:20:00:4f:40:dc:50:fe:8f:c5:5d:c3:79:c7:d6:7a:03:
53:4b:3c:0b:d4:89:4f:34:dc:ae:44:b4:e3:89:1a:0d:9d:52:
ca:28:67:d2:14:05:7b:29:23:67:27:9c:16:f6:a8:68:cb:ac:
6c:61:33:dd:7e:89:3e:6f:17:56:6f:c5:d3:e0:9b:f6:13:7d:
c1:9b:6e:02:db:d6:14:de:17:25:de:55:b1:a4:f5:b7:96:e9:
d5:36:8c:db:0a:0e:24:92:52:50:36:91:93:bd:f2:99:60:d4:
c2:f3:68:87:b3:2c:83:a0:5d:f0:6e:b3:4e:71:85:a8:5d:99:
72:72:b5:68:f0:6a:f9:3e:c2:0e:20:a1:53:4a:c9:90:8e:16:
89:7b:bc:85:7a:37:17:2f:bf:7e:d1:5c:40:a5:3c:ce:3a:51:
51:7c:c3:b3:e8:6d:e5:37:b7:39:fd:b9:3e:82:b1:63:ef:5f:
6f:75:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 07:41:48 2026 by rpki-client