Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: H3aiEjP3m6gRw+r+Cw5Z/CjrzfRJCvSy7ov4s1WQ+CE=
Subject key identifier: CD:9E:8A:39:9C:E6:62:89:9B:FE:31:DA:7C:59:6C:E9:7C:01:51:2D
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019DA566BAC6CFFE167C940C8FB312137891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 0219
Signing time: Sun 19 Apr 2026 11:01:06 +0000
Manifest this update: Sun 19 Apr 2026 11:01:06 +0000
Manifest next update: Mon 20 Apr 2026 11:01:06 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: 0LVDWcdq4+XXMt/R8caIH335tT/W5OlNgGCGOgplxNQ=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:ba:c6:cf:fe:16:7c:94:0c:8f:b3:12:13:78:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Apr 19 11:01:06 2026 GMT
Not After : Apr 20 11:01:06 2026 GMT
Subject: CN=cd9e8a399ce662899bfe31da7c596ce97c01512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:83:af:c0:71:00:50:3c:b7:0b:ad:64:de:
69:cd:ba:1e:f8:5d:42:b8:54:80:05:e8:75:b8:b3:
3b:40:0c:68:73:92:a1:8d:fc:5d:39:0d:86:a6:8b:
28:5c:32:71:49:62:e4:57:b2:2c:36:0d:35:79:27:
57:c1:08:15:b0:da:9f:a0:74:3a:3e:9e:26:af:d4:
b6:e2:8a:ea:6a:5e:51:ea:50:2d:b6:05:5d:10:5f:
da:d6:a7:d9:74:75:8a:0d:f6:7f:21:33:c8:6c:ed:
c1:20:de:bd:3a:6f:c8:00:a2:04:1c:e5:d8:59:bf:
b5:ac:04:9c:7c:9d:c4:df:45:cb:61:32:4c:18:d2:
91:d2:60:f8:c3:ae:96:c3:73:d5:8e:8e:ca:fb:c6:
a6:2e:39:4f:06:e0:75:17:5b:36:d8:ba:33:40:3a:
46:29:9a:59:5b:13:14:34:73:44:95:36:94:9a:f0:
7f:79:51:00:a9:42:14:f0:de:97:48:c3:14:50:31:
4d:ef:f9:c6:bf:dc:76:a7:c4:3f:62:eb:ad:36:b3:
2f:5b:98:72:4a:05:a0:58:41:8e:a9:f9:56:a7:7b:
08:f3:7d:ad:9a:aa:4d:db:91:bd:d2:b4:db:b6:29:
e9:df:77:09:73:31:ff:04:c5:5d:b2:17:49:f5:a3:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:8A:39:9C:E6:62:89:9B:FE:31:DA:7C:59:6C:E9:7C:01:51:2D
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:a4:8c:3b:6a:6b:31:ca:1e:80:a0:75:1f:2d:7b:69:ee:
23:43:ff:1b:50:45:05:d6:14:f8:cb:80:bd:ae:41:98:fd:9b:
c8:bd:9f:69:4c:70:ac:57:c6:bf:71:5c:56:d9:c1:67:7b:4a:
20:a4:ec:e1:cf:d8:b7:2c:52:15:f2:6f:34:e2:1e:89:3f:64:
7c:43:08:f8:7c:54:12:1d:87:aa:ca:4a:87:95:f8:99:ad:89:
40:6b:bd:f7:35:a4:cb:45:8a:4e:27:cb:d9:bb:65:80:80:aa:
78:10:cd:21:03:73:fd:ff:62:e3:4a:bd:41:e9:9f:89:2f:38:
86:e1:10:e4:5f:83:dd:50:55:65:1e:1e:68:2c:72:1d:a7:93:
5d:76:58:e1:07:1c:d2:62:41:a7:fe:87:ed:0c:d8:66:b3:73:
30:f1:ab:c8:68:2e:11:cc:1b:2b:dc:52:59:65:ef:8e:53:54:
2b:db:6b:18:ff:33:1d:21:b3:83:07:8f:b2:4b:1f:27:3e:1e:
8b:06:99:c8:b8:52:80:f1:61:55:9a:0c:43:a9:91:ba:96:c0:
c9:18:cf:fd:5d:21:92:21:cc:f8:21:53:4a:b2:ee:69:ba:60:
38:01:64:31:24:9e:ee:93:cc:9e:20:42:b5:d6:d1:a6:96:48:
d4:98:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:21 2026 by rpki-client