Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: CMxUEGBxfeMoiBVL8pnO3YcS1sWG/fuLm8RWnTCHQJg=
Subject key identifier: 3C:67:7D:CF:DA:A9:4B:37:1A:49:BB:E7:58:39:74:B4:8C:BA:BD:5C
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019EDA650B29999A9AD20B6DEED0535EDA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 02B9
Signing time: Thu 18 Jun 2026 11:01:55 +0000
Manifest this update: Thu 18 Jun 2026 11:01:55 +0000
Manifest next update: Fri 19 Jun 2026 11:01:55 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: b1zHAXPCGiJnT2p1FJInCNNoJJ2Kq3ZQBBz7teW9scQ=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:65:0b:29:99:9a:9a:d2:0b:6d:ee:d0:53:5e:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Jun 18 11:01:55 2026 GMT
Not After : Jun 19 11:01:55 2026 GMT
Subject: CN=3c677dcfdaa94b371a49bbe7583974b48cbabd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8b:cc:76:6e:a0:36:3f:16:c7:1d:bc:cd:78:
02:64:10:06:66:ff:14:2b:a7:2c:a5:a9:0e:44:ae:
e0:37:c3:0b:eb:a1:8e:54:4e:27:33:39:2e:07:af:
b1:57:a5:1d:0d:dc:93:e6:8b:80:85:29:7f:db:62:
6b:4f:01:75:6f:ae:b9:01:41:b4:aa:9e:18:d7:d6:
77:82:3e:c3:a7:4e:c1:b5:6b:54:c9:f3:2f:d7:5d:
a4:6a:da:3e:86:07:99:8d:91:a0:1b:37:f1:f0:5a:
ac:36:b8:63:54:03:48:01:fb:17:9e:b3:8e:1d:12:
2c:1e:5d:52:2c:79:52:80:8e:92:3f:c7:b3:76:6a:
cc:ee:f8:09:02:e7:39:44:02:64:36:bc:9d:a0:95:
cf:f7:2f:13:45:6e:bc:bb:e8:38:26:58:79:b7:48:
74:ac:4e:7a:7b:af:d0:18:76:37:c5:6c:ee:5d:d0:
f6:15:d9:a5:9c:f3:8a:f3:70:e2:e6:52:d2:76:a8:
a2:b5:bc:a6:b0:d1:b9:71:d6:23:c5:69:23:d5:58:
0a:26:58:2f:07:fa:54:7a:a9:53:1d:d6:82:f4:86:
e4:ef:53:6e:7c:4c:93:91:0c:f2:bd:38:e3:52:86:
7b:82:ef:73:3b:20:9b:0d:0a:bc:6a:a5:d1:43:d4:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:7D:CF:DA:A9:4B:37:1A:49:BB:E7:58:39:74:B4:8C:BA:BD:5C
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:22:6f:9f:74:16:1c:6c:b8:1d:c7:ae:bf:3d:a0:17:fc:8c:
49:1e:63:3d:b2:2d:04:99:bf:c5:ca:14:f4:b5:dd:4f:48:6b:
af:f2:ee:80:72:37:10:71:9c:61:e5:a9:e6:08:ec:00:8e:36:
68:d1:b5:20:50:99:ad:92:8b:6a:a7:65:0e:a6:ed:fb:f0:93:
79:c6:18:9c:d6:85:0f:37:ca:7c:c3:1b:66:74:15:b6:23:63:
2d:8d:8e:60:69:64:a5:d8:fc:f6:d0:90:db:fa:39:3a:92:1a:
8d:50:2b:93:a4:c5:57:37:53:10:c5:d3:6f:1a:de:47:3e:16:
fe:b6:4a:4f:8c:6a:5a:3a:60:fd:33:a2:90:69:6f:75:ae:3e:
c4:03:58:24:a8:15:24:61:ac:55:0a:81:87:1b:a3:f3:d5:04:
36:90:d3:29:c5:12:00:73:12:63:61:2a:74:e3:f0:3e:87:0e:
1c:5e:e9:58:e8:b9:8a:e7:fd:6d:c2:a4:36:9f:91:14:20:c5:
b8:b9:e7:f8:5e:fc:ef:84:14:c0:d9:11:a3:18:00:01:79:e1:
83:e4:c2:4a:08:b1:97:8d:ed:fe:b3:aa:7e:b0:dd:1e:b0:88:
df:b9:e1:e6:84:ab:2d:8e:77:b5:d9:61:69:56:4d:8c:99:ac:
77:9d:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 18:52:22 2026 by rpki-client