Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: uly0n5eBuhjA5PBG+jd+4ebbyegJdvXXD51wXLkkJ14=
Subject key identifier: 1C:5E:85:6F:5B:4D:9B:02:18:65:FA:5A:72:B8:AA:50:6E:89:0A:77
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 01A0AFAAEB2C4E78FA374AF1EE916F0D4DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 03AC
Signing time: Thu 17 Sep 2026 14:00:09 +0000
Manifest this update: Thu 17 Sep 2026 14:00:09 +0000
Manifest next update: Fri 18 Sep 2026 14:00:09 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: DMz3ivTtUzXotDUsgEZaPRl3YSbj0xrQGiY1X7G2q2s=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:aa:eb:2c:4e:78:fa:37:4a:f1:ee:91:6f:0d:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Sep 17 14:00:09 2026 GMT
Not After : Sep 18 14:00:09 2026 GMT
Subject: CN=1c5e856f5b4d9b021865fa5a72b8aa506e890a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:3f:58:93:dc:8a:05:59:d0:94:1d:df:7d:
0c:05:2d:2e:5d:bd:db:1f:8f:93:5f:33:0a:ca:8b:
2b:28:60:e6:cc:ad:28:52:4c:5e:3a:c4:f8:09:e4:
7d:d6:15:66:fa:ee:1d:d4:53:9f:9f:c9:5f:df:36:
97:8c:92:3d:e0:34:b9:eb:56:cb:2c:b5:b3:5c:74:
10:8a:b9:c4:27:4d:04:75:2f:37:00:3b:ae:62:9b:
42:29:d1:96:6b:9d:7b:27:3d:fb:13:78:9e:f6:de:
ef:3b:6b:55:39:6a:7b:b2:5c:68:47:d9:39:2a:bb:
60:6e:3d:64:c9:80:5c:93:ee:fb:ce:2a:e5:64:ad:
fb:56:5a:5a:e4:db:a1:e0:5b:bc:fe:b2:d0:dc:41:
ba:c5:88:37:bb:1d:dc:69:0a:57:18:f0:7f:ee:37:
b0:63:52:82:ae:44:1b:39:bb:a2:4c:17:b8:3a:3e:
30:89:b0:73:9a:7c:39:75:5a:d2:ec:3a:db:08:15:
d6:92:56:d2:aa:54:ff:36:b0:72:b8:6f:49:89:95:
02:a3:0d:ee:40:ef:2a:a3:66:aa:ee:a9:e6:82:5a:
b9:23:bc:3d:22:38:08:4e:b4:d0:63:a9:c2:ec:f5:
d1:0d:d5:b4:ec:ba:1f:11:8e:1f:1b:f6:5b:97:b7:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:85:6F:5B:4D:9B:02:18:65:FA:5A:72:B8:AA:50:6E:89:0A:77
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:50:fc:70:8d:6c:2f:84:1e:69:14:e6:1b:62:0c:fd:e1:
64:9d:5c:a0:43:1b:bd:21:88:1c:0d:73:3c:6a:54:35:02:41:
c6:ec:5c:84:ad:ab:a3:58:9e:2b:9a:cb:4c:a5:0f:2b:4a:3f:
5b:a3:55:9b:b8:45:59:ea:8d:85:6c:b1:97:0a:0f:26:1e:2e:
28:d5:72:52:6b:4e:7c:df:2a:58:f0:5a:ef:37:f9:a8:c0:52:
8f:4d:ab:61:9e:c9:1c:25:c3:b7:90:be:a1:ca:88:e3:93:e6:
9a:81:d7:b2:d4:b5:4a:e1:75:20:91:a7:d5:dd:72:6e:e5:df:
02:64:82:ae:b7:6e:99:c8:3f:73:03:e8:11:ca:30:33:b7:1e:
fe:b3:ef:c4:fd:16:65:91:7d:b2:9a:91:21:41:27:88:0e:c1:
6c:9a:a5:47:0b:bc:a2:ff:d5:7e:2c:f4:3f:e0:c7:72:7e:69:
d9:78:50:3a:27:af:f1:94:59:d9:12:37:09:e9:af:26:32:8a:
2f:d8:19:af:cf:c2:2e:ac:7a:d3:74:3d:eb:0b:45:44:b8:58:
a9:26:4c:4c:4e:e6:52:c0:0d:ff:25:74:f3:cc:65:d2:20:97:
80:32:3d:39:76:4b:2b:59:07:5c:c5:42:01:b2:37:85:9c:99:
c2:92:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:00:35 2026 by rpki-client