Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: /DlP7b+WMakhVtVd3tWFG/9xzDQOP7ZXRmbxR3MxGrk=
Subject key identifier: 76:E5:82:0D:57:9A:EE:D9:C0:8D:E1:DF:F6:C6:D3:11:B0:1E:E8:CA
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019D9BF54CEE5FED1EF606DD341D2B79D055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: AD
Signing time: Fri 17 Apr 2026 15:00:37 +0000
Manifest this update: Fri 17 Apr 2026 15:00:37 +0000
Manifest next update: Sat 18 Apr 2026 15:00:37 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: /qXJFJbVsXtmwo1TxdKfr5GELQa/HhFE39NH1aJ9aT8=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:4c:ee:5f:ed:1e:f6:06:dd:34:1d:2b:79:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Apr 17 15:00:37 2026 GMT
Not After : Apr 18 15:00:37 2026 GMT
Subject: CN=76e5820d579aeed9c08de1dff6c6d311b01ee8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:c9:c5:04:9d:c9:2b:34:5d:15:9f:05:85:
12:73:65:11:1f:ad:4c:64:ea:99:f2:83:be:0f:8b:
8b:4d:e5:88:f7:03:1a:71:1f:13:16:62:b6:94:70:
fc:81:58:3e:9d:26:74:e1:f0:6c:dd:22:80:c3:09:
e4:7a:66:61:d0:db:b1:9c:6f:e8:99:f2:84:dc:d7:
8b:e7:85:3e:3d:0b:e5:7c:b3:16:d9:03:df:1e:fe:
19:8a:72:53:d1:c5:02:8a:d0:ad:6b:e8:c5:c7:60:
10:ba:d7:3a:78:9f:fc:ca:fc:c2:9b:69:ae:b9:9e:
e7:4f:af:72:a8:e8:14:fc:c5:d5:ad:a9:ac:21:bb:
25:64:19:16:01:c2:e2:92:d7:d9:33:b3:7c:29:b4:
89:b6:58:0a:80:f7:a3:e7:d4:f9:80:2a:74:01:af:
39:ec:c1:ec:bf:b1:cd:4c:2c:d4:d1:43:33:df:37:
06:2e:2f:e5:01:e1:5f:a7:b5:a6:25:c6:d1:39:6d:
0a:b9:29:71:56:b2:3e:89:bd:bf:f7:20:1d:78:93:
15:57:ee:c7:08:42:25:96:f7:10:a4:73:f7:97:a0:
f7:74:ee:7b:22:2e:ef:d9:43:39:85:9c:0b:bd:d2:
5d:13:29:27:f1:c8:fd:b0:e0:42:35:18:46:5e:fc:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:82:0D:57:9A:EE:D9:C0:8D:E1:DF:F6:C6:D3:11:B0:1E:E8:CA
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:f2:2d:40:5e:19:c2:89:4c:dc:c8:65:83:bb:dd:9d:71:
41:f1:ae:59:37:32:f1:14:a1:d6:f2:fd:d5:1d:99:7d:ff:93:
70:34:9c:d1:dd:85:04:d4:c8:e0:44:c9:44:f9:34:62:f5:52:
22:74:cb:ef:c2:fa:43:08:5f:7c:74:d5:b1:66:ed:06:c6:c4:
8d:75:2d:37:ac:63:fb:83:9f:27:97:1e:f9:6b:42:05:9a:aa:
de:20:ce:b5:45:f3:ba:9e:89:7e:93:fa:9a:3a:5a:70:14:a8:
5d:51:97:ce:61:28:9c:41:a9:49:a5:99:05:57:44:27:95:a4:
c8:ee:20:07:9b:15:d2:98:06:da:e9:67:52:cc:e5:b0:b1:7b:
95:ff:c3:f7:26:99:a7:b0:90:d3:1c:5c:6f:3b:3a:9e:39:01:
3e:aa:36:90:32:b5:de:a1:b3:41:7f:9a:55:29:a1:54:f3:94:
29:ea:62:b6:ad:57:66:5a:83:cb:c9:1b:ae:bd:23:2d:27:5a:
eb:16:39:f6:1c:fb:19:3c:00:11:4c:a8:28:7d:62:c7:8a:91:
b7:36:6a:5b:4a:f5:67:e8:dc:b0:47:0f:a3:8f:7e:ca:55:95:
97:28:98:b0:7f:5e:d7:9d:4a:fc:83:4e:77:3e:63:c4:f8:77:
26:7c:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:42 2026 by rpki-client