Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: /KBPDSRUoptCtwJ6iXys6sSYQsBwy0x0c6eca+XfBqM=
Subject key identifier: 20:09:78:D1:DB:DC:BD:C6:31:FD:15:01:EE:AD:A7:70:DE:EC:CA:9F
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 01A0B79BBE003185AB20CC886EFBE6D94796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 0249
Signing time: Sat 19 Sep 2026 03:00:32 +0000
Manifest this update: Sat 19 Sep 2026 03:00:32 +0000
Manifest next update: Sun 20 Sep 2026 03:00:32 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: TS/3pvaQ5u+StqUK4vq4wd8i97V51eqCZeHxzl0xV84=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:9b:be:00:31:85:ab:20:cc:88:6e:fb:e6:d9:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Sep 19 03:00:32 2026 GMT
Not After : Sep 20 03:00:32 2026 GMT
Subject: CN=200978d1dbdcbdc631fd1501eeada770deecca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:42:ce:62:94:df:c2:bf:fc:ad:15:e9:54:
5c:e0:ab:e8:9b:8c:5f:ac:b2:c1:cd:b9:1d:1e:ce:
ce:f1:98:2a:3e:27:91:6a:a3:0f:2a:63:0a:7a:84:
0e:88:53:4e:0b:78:e9:bc:c1:13:7e:14:58:2c:56:
5f:25:b6:e4:ca:d1:5b:fa:6f:2b:74:51:5a:fa:8a:
96:b0:cc:32:b2:32:d3:ae:70:71:12:eb:17:83:4f:
1a:7f:0a:31:0a:0b:24:63:31:8b:d4:23:82:89:0f:
7f:34:82:09:2b:4b:60:26:58:a6:b1:e2:b9:f7:b3:
c6:93:79:2f:7f:ba:96:ca:2d:33:29:34:d6:1d:ba:
3e:35:b1:5e:bb:c2:91:28:f2:4a:3b:61:78:c6:83:
bb:b8:3f:ba:da:fd:5d:47:80:18:86:84:c9:c6:e5:
3b:41:1d:ae:80:fa:c9:3a:6c:eb:f0:58:05:49:08:
a9:df:84:e6:75:d9:6c:cb:92:0b:50:c0:68:49:59:
4a:62:9b:a6:3c:0e:2b:7b:11:de:37:6d:3d:7b:ed:
3a:86:99:d5:22:15:b0:ad:c1:e5:39:42:13:44:4e:
ba:d5:b2:00:ef:70:f3:2c:b7:ef:d2:f8:aa:89:d4:
73:63:48:23:08:7e:eb:57:d6:da:e5:c0:cb:91:e9:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:78:D1:DB:DC:BD:C6:31:FD:15:01:EE:AD:A7:70:DE:EC:CA:9F
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:28:c0:84:0e:49:75:3a:c6:4e:94:ba:e5:0e:a2:c0:3d:
a7:41:56:98:97:d9:b8:65:dd:e5:bc:c9:21:71:1c:61:2d:02:
a5:90:ca:54:f7:05:ed:a0:c2:0c:f6:53:05:9a:30:5b:48:43:
fa:4a:8f:5c:ea:b2:83:dc:55:35:9b:62:f4:45:ab:6b:ba:1e:
e4:fe:8e:57:9c:d3:3a:4f:39:01:f4:73:d1:e7:7e:83:ed:47:
70:b3:a1:c2:dc:56:f8:c1:93:e6:9c:1f:c4:dc:d5:b8:df:d3:
d9:b8:30:78:c1:99:6e:3b:f3:fd:a2:4c:76:a3:7e:14:60:00:
7c:39:b2:db:10:14:28:19:ef:92:38:71:5a:6c:d3:0b:b0:29:
a3:cb:9a:13:ae:51:ba:13:59:21:ce:a8:45:ba:bf:95:0f:b4:
d8:6e:3e:c1:ed:51:19:38:87:f9:50:ce:5b:0b:58:fe:29:16:
e5:eb:f0:fd:67:e3:08:2e:06:11:e4:85:5f:38:85:83:9f:ee:
9c:93:6d:df:6b:25:a8:11:22:f1:8b:88:9d:eb:d7:6c:ec:b3:
8d:48:03:cd:76:92:f8:c9:b2:8a:0d:b9:53:e4:2c:07:28:ef:
00:71:ab:c1:1c:91:92:ac:aa:96:fe:84:44:3d:a1:65:ef:1c:
5b:a7:c4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC3m74AMYWrIMyIbvvm2UeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGEyMmNjNjQyZjA0NDRmODBiMTc2MmUyMWRkMzJhZDk2
YTY0NDMwHhcNMjYwOTE5MDMwMDMyWhcNMjYwOTIwMDMwMDMyWjAzMTEwLwYDVQQD
EygyMDA5NzhkMWRiZGNiZGM2MzFmZDE1MDFlZWFkYTc3MGRlZWNjYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSpCzmKU38K//K0V6VRc4Kvom4xf
rLLBzbkdHs7O8ZgqPieRaqMPKmMKeoQOiFNOC3jpvMETfhRYLFZfJbbkytFb+m8r
dFFa+oqWsMwysjLTrnBxEusXg08afwoxCgskYzGL1COCiQ9/NIIJK0tgJlimseK5
97PGk3kvf7qWyi0zKTTWHbo+NbFeu8KRKPJKO2F4xoO7uD+62v1dR4AYhoTJxuU7
QR2ugPrJOmzr8FgFSQip34Tmddlsy5ILUMBoSVlKYpumPA4rexHeN209e+06hpnV
IhWwrcHlOUITRE661bIA73DzLLfv0viqidRzY0gjCH7rV9ba5cDLkekLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAJeNHb3L3GMf0VAe6tp3De7MqfMB8GA1UdIwQY
MBaAFPIKIsxkLwRE+AsXYuId0yrZamRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGIt
ZDU0NGU3ZjEzMjIwLzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGItZDU0NGU3ZjEzMjIw
LzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR4owIQO
SXU6xk6UuuUOosA9p0FWmJfZuGXd5bzJIXEcYS0CpZDKVPcF7aDCDPZTBZowW0hD
+kqPXOqyg9xVNZti9EWra7oe5P6OV5zTOk85AfRz0ed+g+1HcLOhwtxW+MGT5pwf
xNzVuN/T2bgweMGZbjvz/aJMdqN+FGAAfDmy2xAUKBnvkjhxWmzTC7Apo8uaE65R
uhNZIc6oRbq/lQ+02G4+we1RGTiH+VDOWwtY/ikW5evw/WfjCC4GEeSFXziFg5/u
nJNt32slqBEi8YuInevXbOyzjUgDzXaS+Mmyig25U+QsByjvAHGrwRyRkqyqlv6E
RD2hZe8cW6fESw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:05:58 2026 by rpki-client