Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: bQKbTmaDOFhAEk1cK9KCZKgEQmzTU7Zjq8KJoNTxr3k=
Subject key identifier: 11:D4:C4:63:96:1E:95:CA:15:8A:6C:5E:AC:4B:3D:09:B1:FB:70:68
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019FC5FFE44826A824721881AC368D2BAFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 0333
Signing time: Mon 03 Aug 2026 05:01:49 +0000
Manifest this update: Mon 03 Aug 2026 05:01:49 +0000
Manifest next update: Tue 04 Aug 2026 05:01:49 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: 5Z8SbIgNbIbZLreXlAlzShofIURqVoRyxypEM+sT6MA=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:ff:e4:48:26:a8:24:72:18:81:ac:36:8d:2b:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Aug 3 05:01:49 2026 GMT
Not After : Aug 4 05:01:49 2026 GMT
Subject: CN=11d4c463961e95ca158a6c5eac4b3d09b1fb7068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:39:38:f1:32:16:b8:01:b8:34:c0:a8:47:
02:a7:37:a2:e4:28:80:d2:46:8a:e8:00:95:b7:39:
b3:6a:90:0c:d8:da:26:4a:5a:6b:d3:86:14:ad:74:
36:db:4f:c9:01:4f:27:6f:38:86:1c:d3:83:3a:bc:
b4:8a:1b:85:d4:84:61:2c:02:9f:5b:41:a0:21:3d:
aa:92:e9:59:54:bc:41:76:79:07:41:ff:ab:35:15:
8e:a7:fb:51:07:f6:1a:ea:54:12:51:06:da:de:d8:
fd:3d:3b:3a:63:f8:52:f8:e5:20:b3:e0:71:c7:a5:
db:e8:6e:50:4a:16:49:0b:88:e1:08:ef:05:67:1f:
59:bf:92:68:e1:d7:4e:14:cd:67:1d:ef:22:6d:98:
01:ab:9c:69:99:c0:3b:6e:2d:a5:66:af:9e:c7:c1:
90:ce:1a:2c:e7:1c:7d:4a:35:98:90:8c:21:20:78:
46:a8:b8:64:b7:9a:cb:d0:0e:ac:eb:ac:c0:92:ac:
42:44:20:93:74:0c:25:53:eb:32:64:62:c8:a6:15:
07:6f:fa:6a:01:1b:fb:53:f7:d4:f5:13:86:ac:26:
5a:a8:32:fb:23:bd:43:5e:50:48:60:34:24:18:a8:
8c:5a:54:57:af:c1:8e:f2:4b:88:8f:0a:64:fe:52:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:C4:63:96:1E:95:CA:15:8A:6C:5E:AC:4B:3D:09:B1:FB:70:68
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6d:2c:22:62:e3:1e:06:bc:92:e2:f3:99:c2:3d:2f:6d:ed:
a2:df:00:fa:08:4e:e7:1a:55:51:4c:e7:2e:56:6e:b1:67:cb:
52:d5:4a:ae:12:e6:75:26:0c:73:a5:8e:3b:f2:3a:bd:b7:5b:
56:73:e6:73:91:48:f1:2b:45:8e:db:83:f5:bc:eb:1e:3b:c9:
61:90:07:b5:fc:22:eb:f4:06:1c:4b:d3:47:95:f0:8b:81:6b:
68:d0:6f:c5:e1:e7:e3:7e:ea:5f:b2:99:4e:62:c6:31:a0:29:
7a:ca:1d:dd:89:77:e6:f4:84:21:d2:d8:31:c1:87:af:c1:0f:
5a:bf:4b:c8:89:f5:d5:9b:ec:55:16:72:e5:ee:81:1f:1c:3d:
16:07:5f:0b:44:a3:ee:c8:dc:ce:ca:66:2e:21:20:32:74:3c:
76:f0:ae:49:cb:e5:08:df:c9:7a:c3:d0:d5:f4:ae:07:06:ed:
ac:b8:1e:47:95:43:5c:55:81:76:ce:55:78:86:47:b8:0f:de:
6a:57:4c:76:e5:02:47:cf:7f:0f:08:4c:aa:0b:92:a9:53:89:
41:e3:8d:39:43:9e:71:ab:09:3b:6c:f9:05:14:00:90:ef:97:
0c:b4:38:7b:f7:f7:4d:03:a2:d3:a0:2a:f1:57:86:e9:49:29:
7a:e9:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:28:05 2026 by rpki-client