Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: PTWjvOVnMH3uRaiEWNANP5bBJTYr1tKuiuvlSjv+oiI=
Subject key identifier: 99:18:CC:95:A2:DE:61:D6:0D:AF:49:FF:6C:B0:B2:D2:13:C7:76:EB
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019CB05AFBC753858E0C946F7AA9545481E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 33
Signing time: Mon 02 Mar 2026 21:01:18 +0000
Manifest this update: Mon 02 Mar 2026 21:01:18 +0000
Manifest next update: Tue 03 Mar 2026 21:01:18 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: N5Spy8e6uNO3JN1Tv74UX2MV5gRlq81CjGxC4x6gP3E=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:fb:c7:53:85:8e:0c:94:6f:7a:a9:54:54:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Mar 2 21:01:18 2026 GMT
Not After : Mar 3 21:01:18 2026 GMT
Subject: CN=9918cc95a2de61d60daf49ff6cb0b2d213c776eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:58:91:fa:c4:1e:17:17:43:ee:cc:3c:cc:
1a:e7:5a:90:da:14:cf:da:5d:4f:35:58:98:f4:50:
9c:54:15:ea:eb:b6:55:0d:77:63:29:69:5c:05:45:
66:cf:89:59:9e:43:1b:e5:c1:31:84:01:ec:66:f4:
aa:9a:7d:e6:91:a2:71:c7:3b:c2:88:b8:ec:d2:3a:
09:6c:a1:b9:a7:aa:84:94:49:d7:02:84:5e:40:c1:
72:6a:e9:d7:b7:27:c6:71:c3:ca:6d:e3:53:ed:b4:
5e:4b:a7:5e:5b:d7:6a:e2:c7:cb:e9:f8:30:b4:61:
89:16:65:9c:db:da:68:07:a8:d2:ed:57:ee:8d:36:
9c:40:09:d1:4e:62:d1:c1:5c:71:4d:81:4e:02:de:
e3:32:48:d9:ac:58:24:e8:4e:06:52:7d:af:41:63:
ad:3f:48:c2:d1:ee:4b:80:d1:1b:50:ed:73:7f:42:
69:17:cd:df:42:a3:e3:40:c3:28:76:d5:7d:55:a3:
16:c9:c0:94:c6:28:f9:2c:98:d4:f5:da:5b:7b:e5:
62:ad:5c:e1:7d:e3:2f:0d:f8:55:fa:6b:6d:30:bb:
1b:e2:b7:bc:b8:3f:6e:f0:28:26:99:0c:3a:00:64:
44:00:78:79:0c:e5:b1:6a:7b:89:f6:41:43:53:c7:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:CC:95:A2:DE:61:D6:0D:AF:49:FF:6C:B0:B2:D2:13:C7:76:EB
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:11:de:50:93:f3:59:82:b2:03:2a:29:7c:14:a2:d0:67:
f0:87:8d:cf:8c:1c:f5:8d:2d:81:9f:3a:62:17:58:99:b1:b0:
4f:42:07:2c:f8:e8:a6:21:80:f3:0b:ff:90:87:b7:08:90:9a:
f6:d3:ff:80:d2:59:f8:30:d5:2c:d5:21:0a:06:50:3f:72:c8:
3c:68:69:03:1e:0c:6b:6a:20:d9:54:b4:1b:02:8f:ac:4b:fe:
6c:ea:07:47:e5:84:16:2b:10:0b:3a:39:6f:f3:29:5d:27:a0:
93:2f:45:a8:1a:4b:28:01:19:36:fb:d3:79:ef:ba:27:9d:3f:
b3:09:2f:9f:c7:e6:05:41:df:46:34:5d:16:cc:e6:08:4b:82:
3e:3d:3c:87:7a:04:ba:42:04:2c:eb:52:17:8b:43:4f:2c:70:
c4:d5:7e:21:53:35:42:78:3f:f3:71:ef:a3:9c:08:8c:b3:33:
13:52:e4:79:65:d3:b9:41:60:a0:9d:f8:a2:d8:95:15:50:5e:
27:c6:07:32:e6:c7:e6:1e:9a:4e:b6:1f:4c:97:88:64:d6:9e:
0a:6b:1c:82:4a:ae:52:fc:22:d3:aa:2c:ff:a0:03:cf:42:b8:
79:47:ea:bf:a0:fd:26:f3:b6:18:8c:78:47:4b:79:58:f9:85:
bb:93:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:28:29 2026 by rpki-client