Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: rSs15SW11crpujNQiBlDzn/jmBCDUd3B8g5bEWoOynA=
Subject key identifier: 3B:0E:2B:85:21:ED:81:D1:C9:80:D4:C4:FF:EF:76:28:70:16:2F:98
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019CF3F27DAA8918D121C0903365D77E3607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 56
Signing time: Mon 16 Mar 2026 00:01:21 +0000
Manifest this update: Mon 16 Mar 2026 00:01:21 +0000
Manifest next update: Tue 17 Mar 2026 00:01:21 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: vlWcyrR82ccoriIP+TNInKPApP+ULc19VHEKkGxsPsU=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:7d:aa:89:18:d1:21:c0:90:33:65:d7:7e:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Mar 16 00:01:21 2026 GMT
Not After : Mar 17 00:01:21 2026 GMT
Subject: CN=3b0e2b8521ed81d1c980d4c4ffef762870162f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:5d:ed:67:a5:af:c0:94:eb:b6:a8:5f:6e:
79:72:3a:3c:88:1c:55:f2:52:46:7b:4c:28:57:d2:
1a:53:cf:2d:44:4c:c6:b5:0e:e7:ae:5b:cf:03:33:
db:48:8f:4b:15:9d:3e:da:d7:cc:b4:ef:a4:71:ef:
a2:67:25:36:98:d7:b4:8b:cd:10:2d:a1:56:dc:c0:
93:5e:31:60:cf:91:13:8e:83:9e:ca:fd:05:a3:c5:
a1:30:9b:ea:ad:fa:46:02:b8:10:43:2e:da:e6:dd:
f4:15:71:fa:d6:74:a9:6d:62:9a:cb:ca:55:36:0d:
c9:7e:23:b0:f0:a5:1e:62:fb:11:1f:f3:26:00:11:
64:2f:11:d6:8f:96:9d:e7:b4:eb:9f:b7:f7:b1:a2:
2f:fc:95:d7:d6:2e:b5:54:ef:76:f1:83:b9:f7:2f:
c5:55:1f:75:5b:a8:ba:12:91:75:83:ca:c6:4c:e1:
b2:6b:7a:cc:f3:96:0f:03:e1:cf:28:86:90:b0:57:
39:ef:f4:00:95:39:f1:8a:ae:4f:55:51:08:0b:02:
31:82:5a:8f:ca:46:25:5a:61:fd:02:bd:6b:2e:90:
cc:79:85:f0:14:94:b2:7b:95:f9:fa:61:ad:54:e8:
8f:72:b4:18:62:6e:7c:62:83:da:61:cd:5c:a2:82:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:2B:85:21:ED:81:D1:C9:80:D4:C4:FF:EF:76:28:70:16:2F:98
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0c:87:ab:82:09:69:21:a3:f9:ea:1e:c5:d1:8d:bf:a9:8f:
3a:b6:b1:1c:9a:90:68:8f:46:62:e4:b6:bf:ec:d8:8a:74:71:
0a:0d:da:ee:fd:ee:3a:68:3c:f1:d9:8a:55:1e:56:92:68:e7:
0b:d3:25:d1:6e:91:91:af:ee:62:93:0c:5e:38:91:52:26:28:
0f:fe:da:8e:d8:da:1f:54:b7:d5:b5:9f:92:cc:e5:0c:a7:52:
05:4c:fa:94:26:07:5e:13:c4:a8:93:80:2d:55:c4:c6:33:13:
a6:08:44:9f:61:4b:d2:63:db:75:bf:f3:b9:8f:60:b6:f0:75:
30:da:54:a4:0f:fb:d5:83:13:f1:a9:27:99:44:00:57:70:9b:
d9:95:56:2c:f7:63:2e:d3:7e:2a:e3:fd:1e:d0:a5:82:09:0a:
b9:8c:a8:19:26:ea:75:a0:1b:65:70:9d:7a:fa:da:14:16:bf:
4a:51:ae:d7:97:01:42:34:75:11:fa:6f:58:9b:8b:b2:63:4c:
e4:f9:88:59:4c:54:d5:5a:37:57:10:2a:30:5a:3c:15:e3:f2:
64:d6:5f:51:f6:e8:7f:2f:4f:21:0a:c1:42:e7:48:84:39:01:
b2:8b:56:7b:11:2a:95:c5:39:33:5d:b0:97:66:91:0a:91:09:
53:25:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:40:49 2026 by rpki-client