Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: 7JZhfSfD0BIDoxdN/jv2+3jNS2SkQ/3x7WgdgwrIJ/I=
Subject key identifier: B4:BE:9F:C1:D9:D7:8F:9A:2B:0A:FE:6D:62:B6:60:0E:A8:9F:F0:28
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 01A13146A40D3265CE9A7E9AE70A9859E5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 0288
Signing time: Mon 12 Oct 2026 18:01:15 +0000
Manifest this update: Mon 12 Oct 2026 18:01:15 +0000
Manifest next update: Tue 13 Oct 2026 18:01:15 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: ce8oNL8DW4vAgHoG/VMTfYpZ2tbqlI2byTcpNszLq1c=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:a4:0d:32:65:ce:9a:7e:9a:e7:0a:98:59:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Oct 12 18:01:15 2026 GMT
Not After : Oct 13 18:01:15 2026 GMT
Subject: CN=b4be9fc1d9d78f9a2b0afe6d62b6600ea89ff028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:c3:cd:5a:22:7f:cc:e7:1a:77:3b:b4:3f:
20:4a:01:85:4d:b2:ef:d2:c6:92:08:95:70:03:d4:
2f:af:e6:c9:ad:b7:5e:2d:78:1a:3a:0f:a1:3c:1e:
fa:8b:2d:0c:a2:35:d5:b9:fb:13:4c:a1:30:c3:ed:
e3:24:9f:1d:46:1b:8b:92:6e:0b:24:67:39:22:ac:
ee:33:ad:d3:9d:f5:5a:1e:4e:92:a1:1a:f8:93:55:
99:c2:e6:d8:26:49:d8:50:01:40:c3:10:7f:fa:3b:
ca:cb:9d:e8:09:c2:b9:a7:18:40:60:16:0c:37:84:
35:b7:79:bb:1e:34:18:8d:b9:ae:69:e1:da:48:ca:
c5:1e:b7:a3:54:c7:28:3f:6e:f1:83:30:e2:50:cf:
7d:71:57:97:aa:79:bd:dc:fc:75:d8:fe:7f:bf:1a:
e0:b6:73:c3:d3:62:7f:1d:f6:4b:06:f7:5d:55:60:
3c:e5:06:f2:1c:5b:9d:63:dd:90:60:d5:28:ee:73:
4e:dc:59:4e:c5:e1:82:f6:ca:65:2b:83:ec:83:64:
a7:bc:c8:dd:af:78:19:d1:d3:2b:28:c9:1a:69:81:
66:38:db:72:6a:4e:8f:9a:26:15:74:f7:de:9f:ac:
f7:4c:bd:2d:ea:fd:98:92:3f:f3:e6:bb:73:f2:99:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:9F:C1:D9:D7:8F:9A:2B:0A:FE:6D:62:B6:60:0E:A8:9F:F0:28
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:1e:6e:72:41:41:8f:93:7e:a6:66:ed:7a:17:45:fd:4f:
71:63:ba:6f:cd:72:13:3e:bc:4f:a5:92:c8:40:1a:29:48:86:
5b:d5:32:54:8f:eb:da:32:ee:25:db:c2:e4:7b:1c:63:4b:86:
47:b4:cc:9d:25:5c:4e:25:85:1d:81:b2:fe:84:83:ce:5c:b0:
a8:8a:ed:eb:a8:b8:77:5e:4f:dd:ba:f8:f4:e0:77:77:66:5d:
e4:74:b0:b3:b8:00:f6:05:9c:29:b1:13:68:b6:db:1e:7a:5d:
3c:fe:87:e7:a3:74:4d:08:01:11:de:18:49:62:c3:fa:78:cd:
6d:5b:7a:ad:be:1a:a7:e5:1b:20:ad:fa:90:40:99:34:a7:cb:
60:25:59:f9:05:2f:69:8d:ae:a2:59:4d:65:fb:5d:46:d6:8a:
99:32:63:f7:85:30:1f:51:b6:87:11:22:de:8c:aa:25:0d:24:
5d:08:b1:b5:fc:14:d4:6d:49:f2:e9:de:2b:02:af:94:60:8c:
d6:e7:e5:6b:e9:2a:d4:ef:c6:51:89:d6:e1:0c:be:76:85:bd:
4b:66:5b:c1:21:fe:cc:f5:3e:d3:f1:11:65:41:90:d6:e9:78:
ec:84:76:ac:78:76:01:66:19:9e:05:26:82:c4:58:4a:2b:0c:
49:0c:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:12:54 2026 by rpki-client