Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: EpnGQsQsNpn2pnpgd5d5/RHQ6FxA1Y9hwtVT/MiWaY4=
Subject key identifier: C5:1F:90:CA:49:F0:3B:C5:61:9E:C5:E3:F6:5B:E7:0B:F6:4F:5A:2E
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019EBF5AAB8521A7CE6E2C78971420A5F331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 02AB
Signing time: Sat 13 Jun 2026 05:00:50 +0000
Manifest this update: Sat 13 Jun 2026 05:00:50 +0000
Manifest next update: Sun 14 Jun 2026 05:00:50 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: TsA/yBymeG1XvRnrJFGKhchL57KP4yOEmPCczCpjQaU=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ab:85:21:a7:ce:6e:2c:78:97:14:20:a5:f3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Jun 13 05:00:50 2026 GMT
Not After : Jun 14 05:00:50 2026 GMT
Subject: CN=c51f90ca49f03bc5619ec5e3f65be70bf64f5a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:be:8b:94:7f:07:bd:4b:d2:93:49:e7:07:
e3:9c:65:23:42:a8:45:b6:2c:aa:25:83:bd:8b:f4:
26:9e:80:83:6c:36:ac:26:f8:d3:2f:56:da:61:ad:
b2:7c:57:80:bd:3b:90:4a:bc:f7:b8:d9:19:81:ce:
bb:8d:02:75:b3:66:94:38:fd:ee:6e:ea:84:44:93:
b0:17:99:36:77:ce:e7:2d:c7:9d:63:51:8d:ea:ac:
c3:46:37:ef:8a:92:4f:0e:7e:02:be:e6:ab:d3:4d:
45:31:a1:cd:5a:2a:ab:1d:46:76:f4:83:ec:12:2d:
f3:32:58:e7:9a:6a:2c:01:91:67:c7:ee:06:5e:2d:
41:85:27:94:33:85:dc:dc:52:69:56:5a:9a:ea:b3:
8c:d8:95:c7:d9:49:fa:df:03:c7:7a:59:03:b3:f1:
18:33:08:c1:49:6a:30:08:6e:5a:59:4a:c9:cb:2e:
cb:da:d6:27:dd:b1:bb:8e:50:55:76:ab:a2:39:66:
69:b2:0e:6e:4d:20:c3:71:64:33:29:b6:a1:09:eb:
c3:73:fb:7a:d0:8c:7d:ab:1f:da:84:f0:da:a2:42:
43:87:2c:4b:2a:3d:65:af:24:89:55:7b:fe:f0:db:
23:55:d2:ea:09:ea:16:0c:c3:57:0c:6b:48:03:81:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:90:CA:49:F0:3B:C5:61:9E:C5:E3:F6:5B:E7:0B:F6:4F:5A:2E
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2e:06:4c:5f:7f:45:dc:3e:2d:6e:5e:30:d1:92:a6:1f:c7:
ff:df:a5:ea:bd:22:fc:08:86:57:85:67:25:18:c9:6f:7b:7e:
9e:ce:2c:eb:00:b2:f1:03:5b:85:42:49:bd:ab:d5:a4:0d:3f:
08:e1:d5:a8:72:b1:c9:d2:09:0b:a5:2b:e2:d6:e2:ce:fe:11:
fd:7a:ac:5c:a4:84:69:44:95:a5:24:5b:6f:0b:48:1d:b3:f0:
f7:79:4a:db:e6:28:2c:62:3c:d5:bf:39:9e:8a:f2:9c:ca:b0:
2e:bb:5d:29:6a:cf:d6:5f:4a:59:5e:85:79:1e:35:0d:17:1c:
3c:ba:c4:07:4d:32:9d:05:78:2b:92:43:36:84:d1:6f:67:ec:
ce:1e:d8:c2:46:a7:f2:5b:a5:e5:9f:9c:c8:d1:a7:9a:93:d6:
a0:df:09:14:04:31:76:c2:84:48:df:0d:6e:a4:11:7d:2b:d2:
f9:17:83:9a:3e:e8:f7:c1:ed:25:e4:36:4d:9d:df:be:bf:55:
db:69:bd:5d:cd:a3:bf:63:4a:7d:59:d2:7a:e9:cf:fc:ad:dc:
80:79:1d:b4:9c:a1:3a:93:f2:26:11:3a:c0:33:1b:d3:95:86:
aa:4b:98:78:ec:f1:df:f7:6d:90:c4:fd:1f:5c:f3:fa:a7:d3:
31:a3:fd:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WquFIafObix4lxQgpfMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWExN2RkM2JlYjhkYzg0OGZiZTc2MjkwNjFkNjA4MDE0
MWU3ZDQwHhcNMjYwNjEzMDUwMDUwWhcNMjYwNjE0MDUwMDUwWjAzMTEwLwYDVQQD
EyhjNTFmOTBjYTQ5ZjAzYmM1NjE5ZWM1ZTNmNjViZTcwYmY2NGY1YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiW+i5R/B71L0pNJ5wfjnGUjQqhF
tiyqJYO9i/QmnoCDbDasJvjTL1baYa2yfFeAvTuQSrz3uNkZgc67jQJ1s2aUOP3u
buqERJOwF5k2d87nLcedY1GN6qzDRjfvipJPDn4Cvuar001FMaHNWiqrHUZ29IPs
Ei3zMljnmmosAZFnx+4GXi1BhSeUM4Xc3FJpVlqa6rOM2JXH2Un63wPHelkDs/EY
MwjBSWowCG5aWUrJyy7L2tYn3bG7jlBVdquiOWZpsg5uTSDDcWQzKbahCevDc/t6
0Ix9qx/ahPDaokJDhyxLKj1lrySJVXv+8NsjVdLqCeoWDMNXDGtIA4ENYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUfkMpJ8DvFYZ7F4/Zb5wv2T1ouMB8GA1UdIwQY
MBaAFPBaF907643ISPvnYpBh1ggBQefUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2It
M2QxM2U5Nzc2ZmY3LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2ItM2QxM2U5Nzc2ZmY3
LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC4GTF9/
Rdw+LW5eMNGSph/H/9+l6r0i/AiGV4VnJRjJb3t+ns4s6wCy8QNbhUJJvavVpA0/
COHVqHKxydIJC6Ur4tbizv4R/XqsXKSEaUSVpSRbbwtIHbPw93lK2+YoLGI81b85
norynMqwLrtdKWrP1l9KWV6FeR41DRccPLrEB00ynQV4K5JDNoTRb2fszh7Ywkan
8lul5Z+cyNGnmpPWoN8JFAQxdsKESN8NbqQRfSvS+ReDmj7o98HtJeQ2TZ3fvr9V
22m9Xc2jv2NKfVnSeunP/K3cgHkdtJyhOpPyJhE6wDMb05WGqkuYeOzx3/dtkMT9
H1zz+qfTMaP9rQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:25 2026 by rpki-client