Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: N+QA+d/10cgEH5rV6yhuadSMyU5t6Dj8F5mY/II2ABw=
Subject key identifier: E5:0F:12:93:92:D2:87:C5:DF:29:55:E8:E4:92:6A:1B:2F:8E:EC:E1
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019DDD9EDBA7EC45C13019125BB88BCCCB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: CF
Signing time: Thu 30 Apr 2026 09:01:08 +0000
Manifest this update: Thu 30 Apr 2026 09:01:08 +0000
Manifest next update: Fri 01 May 2026 09:01:08 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: oiNYwVR7DEi7/c/sRiR+oI7HriLhgN/0rrq0ngSYkAg=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:db:a7:ec:45:c1:30:19:12:5b:b8:8b:cc:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Apr 30 09:01:08 2026 GMT
Not After : May 1 09:01:08 2026 GMT
Subject: CN=e50f129392d287c5df2955e8e4926a1b2f8eece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:ac:75:af:0a:7a:2e:e9:c3:fc:a5:b6:48:
be:45:6e:90:4c:6f:ac:fa:6c:fc:cd:ec:5f:f4:ca:
ed:a6:1f:eb:26:c9:27:3a:36:07:37:ad:65:9c:7a:
bf:c2:6d:59:ba:23:ec:06:3e:6c:12:8b:d7:a3:7e:
e7:98:2b:6e:c2:45:e8:f6:28:e8:9e:b7:0a:a5:d1:
12:01:4c:3d:89:e5:0d:a1:0d:08:5d:c6:53:b4:ca:
6b:62:86:25:09:e4:fb:2e:d7:88:8b:46:3d:f3:71:
b6:dd:68:d1:e6:5f:5c:98:1c:f2:fa:ad:0a:1a:cf:
aa:bc:2d:87:27:0b:f2:de:a7:30:61:f7:08:e5:68:
48:16:7d:0b:dc:30:46:61:56:d7:e0:1c:f1:b1:68:
c3:7e:c1:8c:52:33:72:9e:7b:42:46:2a:dc:0a:27:
ec:59:d2:d1:a1:c2:f8:6f:c7:dd:73:89:95:77:7f:
8a:e6:9b:1b:64:af:a9:80:72:e9:26:2a:e8:ea:ef:
78:f4:d4:29:04:33:b6:bd:18:e9:85:72:ea:fa:b5:
c3:95:ea:84:8e:cd:62:ae:44:d5:5d:0d:02:cd:7f:
62:c6:3a:b1:d0:c5:d2:37:d2:e9:69:95:58:1b:7b:
b2:0f:96:69:46:fc:41:bd:15:4d:95:c3:62:07:38:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:12:93:92:D2:87:C5:DF:29:55:E8:E4:92:6A:1B:2F:8E:EC:E1
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:13:93:98:c9:5b:63:2b:e1:76:e5:f2:8b:f4:ff:b8:0d:7d:
ee:55:2b:76:38:0e:48:e5:99:e2:76:f7:ac:07:05:fe:59:6e:
4c:97:4d:d4:57:27:8b:f8:5e:bd:16:0d:47:27:11:74:0e:2a:
f3:2b:92:c4:ef:b8:08:01:c3:6b:ce:f6:36:0e:5c:b3:9d:6e:
5b:e3:96:ef:e2:7c:90:fa:c0:d2:57:34:1f:5e:0d:44:2b:d7:
85:c3:98:6a:54:ac:66:99:13:3f:01:35:89:35:79:4f:35:35:
04:2a:9d:3f:b9:84:c8:a0:40:6b:b3:15:c1:4a:ee:57:de:a0:
d4:25:51:e7:f6:80:36:9b:8b:2e:eb:b9:e8:a3:23:98:13:86:
32:97:f5:98:d9:0d:75:cf:77:6b:2b:0c:9a:e2:94:e3:95:5a:
3d:78:26:a1:36:35:5e:b4:f9:53:ed:89:02:e1:4f:4d:35:fc:
cd:b7:95:5f:45:5d:bd:dd:2a:af:f6:d5:90:9c:1c:3f:4e:d2:
47:6b:e9:4c:f7:5a:98:71:07:91:30:bb:3f:bb:0a:31:2e:b8:
b9:2e:e9:68:6f:0f:1c:19:01:fb:1f:69:4e:75:f5:9b:f7:b9:
ea:ab:a9:aa:ef:4f:48:a6:c3:be:e5:76:e7:c8:25:e2:7a:e5:
2c:48:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:43:17 2026 by rpki-client