Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: fwnBCLY1j3R4hir8PBW64tq5KeAIMBpFt+BjV6RlTGc=
Subject key identifier: 1B:80:90:A6:DD:35:99:0C:12:0B:A2:18:65:90:09:B5:C9:06:71:BB
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 01A0C2FABF0EECC44C8D3E8C002FED5F3AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 03B6
Signing time: Mon 21 Sep 2026 08:00:07 +0000
Manifest this update: Mon 21 Sep 2026 08:00:07 +0000
Manifest next update: Tue 22 Sep 2026 08:00:07 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: CONF7XKmU3VDiSpu0033bl2fEXUnvr4n0HtWGhNnCII=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:bf:0e:ec:c4:4c:8d:3e:8c:00:2f:ed:5f:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Sep 21 08:00:07 2026 GMT
Not After : Sep 22 08:00:07 2026 GMT
Subject: CN=1b8090a6dd35990c120ba218659009b5c90671bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:20:5f:b7:e6:e6:a7:ce:c1:be:8d:9f:33:
38:ec:da:4c:24:22:73:3f:37:00:36:06:ee:48:19:
2b:43:53:3c:a8:c1:06:5b:7a:e5:ca:b0:37:03:c1:
d9:81:f3:7c:c6:fd:b8:84:c0:2c:61:68:68:63:f0:
98:82:f1:24:f9:7c:28:02:0a:49:a9:bc:16:30:23:
d6:e5:78:5e:25:71:52:ac:98:79:6f:58:41:42:79:
95:4f:33:f1:d2:92:bc:8f:4f:0e:ae:bb:0f:3a:fd:
fb:a9:7c:53:b7:2b:28:d3:6c:a6:e2:04:d9:71:06:
d0:48:7c:ef:8a:4d:af:03:8c:83:cd:59:22:cf:95:
35:3e:4a:a4:b9:73:b4:49:3d:26:04:81:c9:af:a3:
19:20:43:16:aa:fd:b7:4b:57:05:52:74:e9:82:32:
27:b7:c4:6b:5e:cb:fd:f1:da:e3:eb:9f:be:2c:76:
87:47:8f:70:9d:4b:17:96:2d:dc:ee:19:48:b2:5c:
7d:1b:f3:d2:5d:d7:4f:a0:ff:b0:5d:8d:4b:c4:1e:
f5:0e:9e:e5:db:5b:88:0e:bc:95:e1:32:e6:dd:c1:
3f:73:27:cf:4e:56:6f:a5:a0:7d:5f:a6:51:6d:1f:
22:f0:e0:e9:7c:56:8f:30:ff:a0:d1:90:a7:be:2f:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:90:A6:DD:35:99:0C:12:0B:A2:18:65:90:09:B5:C9:06:71:BB
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cc:ec:ee:bc:aa:6e:fa:7b:9c:76:ec:94:db:c6:e0:9d:19:
93:c7:32:20:d4:50:ee:9d:92:fb:f9:dc:61:69:0e:fd:3a:56:
33:3d:79:c9:5e:8f:c2:d6:2b:8b:a1:2a:49:63:d4:f4:c3:d5:
81:67:56:3c:60:19:3d:d3:8d:22:e8:bd:23:59:47:1f:a7:fe:
3a:2c:33:16:e5:73:d5:25:cc:e6:73:66:9a:2e:11:79:60:e8:
35:8a:5a:85:59:d1:3a:8d:e4:6b:12:5a:a3:93:68:eb:f1:6d:
13:29:0e:dc:ca:9a:48:8d:4b:a2:d9:cc:c8:84:40:03:19:b8:
23:43:8a:3d:5f:1e:6c:9b:42:47:00:07:ef:8b:9d:4d:22:88:
ad:ff:0d:d1:9b:b3:fe:f8:8b:b3:36:cf:20:de:d2:25:f2:71:
6f:0e:1a:f1:60:0b:da:fa:7d:9f:bd:f9:c8:5f:09:cb:6f:64:
1f:5a:d4:6d:51:9b:9a:33:1b:25:d4:3e:52:b9:b8:43:55:00:
3a:97:c4:aa:db:e8:eb:d6:b2:98:2f:02:fd:40:6c:a2:35:c5:
3c:ae:2b:83:c5:cb:1a:36:df:42:15:e6:0e:c7:1c:94:65:e7:
ea:f2:54:66:01:d3:61:b1:46:dd:d1:59:a6:02:fe:46:4f:58:
34:c9:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:44 2026 by rpki-client