Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: m68MT2E+Wyt/YMihpZ97mHn+XLVKr3RrSBu4feiwEBk=
Subject key identifier: 74:B4:EC:B0:95:DA:07:24:9C:6B:2D:00:22:71:68:77:89:D1:5A:0D
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 01A0C4E92728637BD66DAC851D3EA236E8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 03B7
Signing time: Mon 21 Sep 2026 17:00:09 +0000
Manifest this update: Mon 21 Sep 2026 17:00:09 +0000
Manifest next update: Tue 22 Sep 2026 17:00:09 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: nGjUgeQlUqByu9xQSG2aRuSbeaiYHmLkM03lu72MhaI=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:27:28:63:7b:d6:6d:ac:85:1d:3e:a2:36:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Sep 21 17:00:09 2026 GMT
Not After : Sep 22 17:00:09 2026 GMT
Subject: CN=74b4ecb095da07249c6b2d002271687789d15a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:fe:99:ba:9b:35:ba:8a:79:ce:14:44:53:
35:57:79:9d:a1:0d:80:ac:2a:04:8b:76:7e:54:a8:
72:32:c6:f6:47:07:f3:b6:6d:e5:22:b8:61:d5:fa:
bc:73:ae:15:63:63:a5:22:39:b8:f8:7c:29:ed:af:
62:04:ee:40:67:65:ce:fe:c1:87:d9:fe:6f:d5:22:
0d:d3:e0:e7:21:c9:c4:ba:1b:6b:4a:4b:1f:08:56:
ee:9b:78:17:01:bf:b9:30:7d:b8:c7:8e:f8:66:70:
a7:52:16:01:f7:ce:a7:c7:cd:36:01:05:ee:70:df:
4e:f3:fb:6b:2c:fc:c2:7d:f1:a3:d5:05:5c:da:f7:
59:07:c0:0b:be:1e:df:cb:56:7f:9b:91:c0:d7:32:
43:f9:dc:19:fb:1e:d0:a2:54:02:a8:91:34:a4:cd:
27:da:36:0f:6c:00:a4:b5:8c:cb:cf:af:bb:47:98:
8b:c7:4d:be:7d:67:a1:bd:31:1b:d9:2d:7b:35:c6:
49:ab:cc:1a:7d:54:cd:fa:88:a3:d5:cb:d6:07:59:
b9:8b:a1:e3:0c:2b:a5:70:d8:53:b9:36:20:fa:35:
f8:47:ce:46:60:b2:dc:eb:07:ec:58:98:bc:f8:55:
ce:43:ff:0c:04:65:07:3a:f8:b9:8a:89:25:9b:9d:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B4:EC:B0:95:DA:07:24:9C:6B:2D:00:22:71:68:77:89:D1:5A:0D
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:d7:3d:df:fc:71:4d:a7:cd:65:30:b3:52:02:60:ee:c8:
34:34:6f:aa:a5:5c:4f:08:92:6d:de:29:7d:c7:43:08:0a:ae:
3f:c1:83:8e:fd:23:80:eb:7c:e5:8b:ed:9f:54:4e:53:1c:fd:
e9:7a:a0:2e:fb:e7:7e:e1:f7:40:ee:de:2c:0b:8c:87:14:3a:
09:2c:f3:e0:15:71:6a:b6:d1:25:f8:f5:d9:75:16:c8:21:1d:
76:1c:06:dd:80:cc:aa:79:1d:83:59:57:0b:27:57:73:b9:40:
7b:5c:53:c8:97:c3:ba:6a:35:c4:9b:75:9f:26:5f:2e:16:53:
4e:d6:af:75:1a:96:0c:db:74:31:b2:79:a7:b7:b8:35:b4:da:
c6:93:f6:8b:60:f7:ed:d7:d8:5f:45:a8:4d:69:cf:d1:5b:f4:
bd:9e:50:8f:3e:87:8a:1a:c7:10:e0:b0:2e:bb:96:74:be:dc:
b2:2c:91:9d:1b:2a:96:62:1e:11:54:43:ff:4a:8d:76:90:3f:
0f:58:22:a1:36:73:d4:da:f3:46:a3:c5:24:22:c8:8a:81:5c:
4b:d1:de:b6:9e:6c:3d:3e:96:e0:5d:7c:f6:0d:b0:e7:2a:c9:
9e:29:fc:91:0b:98:1b:3a:a7:ba:7d:eb:79:44:d3:d3:17:18:
bf:9d:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:28 2026 by rpki-client