Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: Kg5BewirPn27AHm/FFxTqmjIAdWE4kArAEgopeCyQ4M=
Subject key identifier: D8:1E:53:19:51:80:BB:C2:F7:C0:F4:1E:E7:B6:D7:18:EC:9C:0A:E3
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019D394173B66D32D20BDAA88BB49DAE3359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 01E1
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: x9lwUkMtUKNXQOF94JjRT3bmQ/McNUOHdN8g7/zlaDo=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:73:b6:6d:32:d2:0b:da:a8:8b:b4:9d:ae:33:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=d81e53195180bbc2f7c0f41ee7b6d718ec9c0ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:a4:d8:95:0a:73:21:90:79:db:36:0b:ca:
ac:52:8c:7c:35:eb:3f:41:a8:8a:f0:66:a2:b7:10:
90:3c:eb:58:ab:58:0e:77:b4:9a:0f:8e:83:cd:cc:
c4:f6:47:00:90:54:0b:69:8e:1b:bc:ba:67:36:a0:
80:f7:f3:78:12:45:65:38:d5:77:ec:ec:77:a2:99:
27:d3:69:72:49:81:c7:5f:e7:b2:80:18:70:7d:af:
74:f4:a9:a4:d6:ae:b7:2e:6a:98:5c:89:1b:18:27:
cf:50:fd:c6:b4:6a:bd:47:48:a4:19:53:0d:d2:40:
66:a5:91:cf:73:2b:0d:98:95:a8:1c:bf:20:5e:87:
ed:58:d5:25:2e:34:58:98:51:1c:1d:2a:a9:69:95:
cc:f0:9e:69:5b:d5:95:76:25:dc:90:b9:09:ce:72:
0a:e7:c8:af:31:72:77:be:03:c9:fa:ae:ef:f1:f3:
8a:d0:4d:e9:d3:97:12:2d:3a:f5:10:16:aa:5c:44:
48:88:39:7a:0a:29:93:a9:ce:ed:58:e6:8f:95:87:
4d:aa:c5:4c:32:82:b9:d9:e7:d8:6a:06:95:7b:67:
e2:af:c0:9c:88:63:10:41:8a:c9:e3:7c:d6:ea:07:
e5:71:1f:1b:51:a5:e0:0f:a5:da:62:24:1f:70:bb:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1E:53:19:51:80:BB:C2:F7:C0:F4:1E:E7:B6:D7:18:EC:9C:0A:E3
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:de:d2:ac:ef:da:9e:85:88:b4:5f:99:7d:9e:62:26:97:6c:
09:70:0d:d3:7c:7d:c8:cb:94:ab:a9:1e:63:0e:e3:e8:61:62:
11:94:7e:cc:6c:13:19:a9:24:04:4b:8e:bc:0a:07:cc:64:d5:
65:2b:3b:bf:18:fc:29:87:0b:7d:ea:56:7e:58:d1:11:a3:75:
a1:97:f2:43:d9:bd:6e:e8:2d:02:04:87:28:ed:45:36:03:08:
d8:08:c4:d2:05:34:09:df:c5:58:a8:92:4e:07:1b:0f:b1:a9:
8e:c2:ca:84:6e:da:d1:44:f6:a9:8a:de:8c:29:3d:3c:1f:b2:
d7:45:db:42:59:60:27:5d:cd:c8:bc:9e:0d:18:85:c9:96:d7:
db:83:a6:0f:0a:19:42:7d:fa:84:a3:a9:2c:42:99:60:ef:9d:
9f:b6:7b:49:ff:33:65:30:67:f3:38:81:fc:4c:8a:05:b5:c2:
2f:e2:8d:a3:aa:81:42:32:ac:0b:b7:fc:f0:a3:a2:cb:88:7b:
93:77:b0:f2:22:69:f5:35:46:a5:52:04:05:dd:ce:df:cb:d2:
34:88:73:82:cb:6d:57:f6:c3:01:4a:c1:62:7c:2b:bf:44:e9:
82:99:56:59:00:81:d3:13:48:58:80:2b:ac:55:bd:7d:f8:8b:
dc:72:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client