Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: XkrX5qTRjVwRi56JyCtwqhFvtm7N5SjNLJ9fCThU5P8=
Subject key identifier: B7:37:80:58:0F:36:56:CC:33:20:0B:40:7F:0C:A8:5D:53:E1:BB:C2
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019EC180364DB62214C13BD9FCD9B45082B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 0145
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: Kvu9jOjaV7Yr2w1qHglFEC8CQSHwW4CmHVqHGtmVHsk=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:36:4d:b6:22:14:c1:3b:d9:fc:d9:b4:50:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=b73780580f3656cc33200b407f0ca85d53e1bbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:ab:1a:3e:83:0e:22:f8:63:22:35:22:e2:
6b:e6:fe:99:7d:bd:f2:76:9a:ae:d2:da:93:66:18:
3d:54:ef:7b:aa:5f:3c:73:0c:df:d2:45:5d:ee:72:
75:c7:d4:72:48:f9:ed:2f:64:ca:31:62:c1:53:5c:
27:99:11:08:de:a0:5a:83:79:3c:5e:e9:38:de:44:
cd:16:76:94:4e:6e:a3:e6:56:e9:b5:61:df:98:14:
bd:c0:c6:8a:26:11:1a:e4:f8:73:c7:78:4c:5e:a9:
b7:07:13:a1:fa:91:72:6e:94:a2:6b:77:b9:fd:c6:
42:f8:06:28:e1:fb:8c:a4:60:4c:84:08:8e:96:0e:
38:1e:0b:5b:a8:29:59:71:36:70:54:c3:01:0f:7d:
67:30:31:e2:ce:46:d9:42:9a:8c:ec:f3:3a:8d:73:
01:16:bb:f5:47:c7:b0:3b:b5:37:1d:0a:1b:b6:69:
6a:bb:8c:5e:d6:5c:12:46:45:b4:17:e7:3a:40:6a:
50:70:da:cf:12:26:67:37:8c:ab:70:59:e8:da:16:
2c:c8:53:b2:95:1b:d4:14:7b:20:06:5d:29:2a:40:
3e:9d:48:1b:9c:a9:11:3b:37:0e:e4:70:e3:b8:65:
b7:5e:b6:9f:2b:48:52:f4:a2:93:ad:50:98:aa:7a:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:80:58:0F:36:56:CC:33:20:0B:40:7F:0C:A8:5D:53:E1:BB:C2
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:40:5a:97:14:48:45:15:cf:25:e8:e7:22:51:09:09:e1:
91:57:3e:9e:72:b4:ce:e5:3f:7e:6e:95:4c:bd:63:f9:ed:55:
10:98:ec:63:ce:e5:f4:5b:52:62:3c:a5:65:07:0d:20:14:bd:
ca:dc:65:03:52:3b:2b:4b:39:f9:9e:f5:07:72:85:f7:f7:8e:
1b:79:f4:f2:dd:a5:51:5d:7d:eb:a5:d1:d2:7f:7d:e0:48:91:
f4:c6:2b:5f:02:03:59:fe:b3:07:0c:21:61:eb:57:a9:c5:b3:
92:3a:27:0e:2f:20:a9:72:80:3d:39:1f:cd:69:dc:b4:be:bf:
62:b0:9d:32:92:14:1f:3d:53:d0:75:2f:48:a3:e8:3c:ab:9e:
f8:06:23:06:8e:0e:d0:bd:45:8e:21:63:da:70:15:65:d8:3e:
c2:8b:87:43:d5:30:fa:62:c8:2f:ea:ed:21:3c:37:86:fd:e0:
5d:f2:17:a3:a8:27:d8:eb:b8:68:0b:ec:6e:06:bf:bd:36:6c:
93:2a:d6:f8:ad:62:98:15:d3:c2:c5:1e:50:42:cf:11:43:5d:
6f:97:e0:09:21:33:a4:58:c0:dd:12:8d:e9:8c:f9:2d:65:34:
ee:8f:38:4b:8e:7e:d6:49:2e:e2:6f:a9:94:db:08:a7:9d:29:
44:ba:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:08 2026 by rpki-client