Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: a8mXg+RNnqzyNgwQb4nrAv+Lv7l5GYZT1pV4WA60Hlc=
Subject key identifier: 26:F0:14:63:E3:53:CA:26:69:E6:98:DC:F6:62:C5:EC:36:8B:C2:A8
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 01A1A6DD6B3751E3B2E01B042C0D07190EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 042C
Signing time: Wed 04 Nov 2026 14:01:31 +0000
Manifest this update: Wed 04 Nov 2026 14:01:31 +0000
Manifest next update: Thu 05 Nov 2026 14:01:31 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: 5u2ZXx9Yh2wt2qPgAHpDlCPH8IyGJWJDi7AkbSVbTUs=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:dd:6b:37:51:e3:b2:e0:1b:04:2c:0d:07:19:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Nov 4 14:01:31 2026 GMT
Not After : Nov 5 14:01:31 2026 GMT
Subject: CN=26f01463e353ca2669e698dcf662c5ec368bc2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:14:af:47:cc:12:54:2f:e8:dd:1f:45:c7:
4c:ef:5a:dc:af:49:af:a1:26:48:28:5a:61:b3:a5:
e6:7e:f0:54:0c:5d:ea:30:08:9e:98:e1:fa:d8:23:
79:18:3f:49:bd:e4:dc:3a:4a:70:9a:4d:c2:71:ab:
ba:ed:ee:23:c2:b3:71:46:3e:9a:d5:cb:a7:6b:f7:
39:df:43:5d:bd:3c:42:ed:e6:07:e1:f9:f1:ea:2c:
11:ab:20:46:59:b3:46:4f:57:72:9d:88:3a:79:f3:
3d:b0:13:c9:b4:db:63:c7:86:c2:a0:82:28:c6:7f:
35:a8:48:e6:3d:ba:6f:98:63:2e:5e:74:ee:96:0a:
74:5f:3b:e1:02:de:95:00:62:1d:7c:74:3b:94:ef:
3f:ee:86:59:2c:02:2a:68:d2:f0:79:b6:ec:59:5a:
97:2b:6d:f0:e5:9e:b6:18:be:dc:d5:83:12:5d:25:
4a:79:81:13:cc:09:f2:62:32:ea:93:9f:97:5e:bb:
22:9e:dd:17:fb:d0:4a:a6:51:78:5b:8e:0c:50:24:
65:7b:da:5a:74:a7:df:51:79:db:05:59:83:a7:0d:
be:2c:01:f1:81:88:dd:77:2e:35:eb:43:ad:9f:87:
8a:5d:26:ce:c3:2d:cf:f4:f5:61:56:6a:ba:e7:e8:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F0:14:63:E3:53:CA:26:69:E6:98:DC:F6:62:C5:EC:36:8B:C2:A8
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:49:1d:7e:af:f7:f2:4d:35:10:07:ac:8e:da:8b:3a:cc:
1d:22:8f:49:b4:f8:36:1f:ce:16:21:f0:8a:6e:e8:93:1e:35:
91:04:a9:da:fa:65:77:45:c0:09:87:ad:09:b4:ba:f9:12:6f:
ee:c5:fb:da:e3:0c:14:95:76:45:b3:b5:27:c4:04:00:9d:0c:
67:01:ab:59:8e:5b:9b:8d:3f:26:78:f9:7a:a3:1b:d3:6f:43:
75:70:1c:0b:13:24:8d:2a:9e:76:50:aa:7b:ae:11:52:5c:b9:
00:2e:69:e8:09:62:2b:c4:2b:70:2c:42:ea:1d:49:d3:ca:2f:
e3:44:59:0c:9d:df:43:c5:ef:e2:28:19:e3:fb:89:2d:5c:71:
52:a1:40:45:86:b0:b6:69:7f:7c:f5:1c:fd:86:af:20:c4:73:
28:6e:47:da:1a:80:d7:53:88:e0:e1:40:43:a4:12:ab:7d:b9:
3c:f2:c0:1b:a2:7a:72:7d:4a:c8:e4:c0:dc:c0:eb:0f:4a:3d:
a9:1c:85:cc:3d:21:57:3a:92:3d:e3:3f:f6:5c:d6:71:29:c3:
64:11:d5:a8:ca:76:fc:d2:42:db:41:77:51:f5:a8:f1:ca:24:
e3:0f:89:b0:90:a8:b3:ef:c9:c2:6b:e0:33:53:df:91:07:2c:
41:26:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:36 2026 by rpki-client