Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: DbsbvDc8fIWOVI4JShfLd1r9vqA65cipv5+hntJ/jcg=
Subject key identifier: 84:80:D8:7F:8C:CA:9D:15:68:EC:CB:26:90:34:5E:CE:11:77:F9:D0
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019CAA59174EE3E5F1F2FF203C03266F0612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 0197
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: KZwGwU3NYKown9EwbFciK9eST8CS1NOop7ZJbPjHN1Y=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:17:4e:e3:e5:f1:f2:ff:20:3c:03:26:6f:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=8480d87f8cca9d1568eccb2690345ece1177f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:66:a4:2e:36:14:66:43:2e:89:38:54:ea:
27:bd:f6:12:30:5d:0f:99:96:fd:47:ff:90:bf:e6:
05:4f:b2:a6:85:63:79:5d:2e:04:01:1d:f4:1e:1b:
7f:71:7c:8e:4c:76:95:4d:bb:ef:18:34:50:a6:0c:
d0:7f:7f:c6:5f:51:1b:93:18:0c:2c:a7:eb:36:4e:
03:12:13:a4:be:ad:db:a3:c4:81:46:1c:8b:eb:8f:
88:1b:6b:8b:29:ca:8e:ea:4d:ec:30:98:0c:3a:42:
34:38:c0:d0:b9:30:75:65:fd:53:c7:2f:0b:b2:1d:
81:be:aa:db:27:62:9e:5c:15:dd:d7:6d:fe:01:35:
40:f3:e5:bd:d9:a3:4a:52:96:e7:7a:e4:bb:fa:73:
0e:65:d2:ef:42:0a:06:b9:e9:f5:d8:4b:6f:70:47:
8a:a9:b3:b3:1e:5e:c0:d0:58:5d:43:b6:5b:67:62:
0b:8c:51:62:8d:e6:e2:ae:34:78:b9:0e:c3:41:58:
50:dc:71:07:0f:10:b7:96:93:a6:bf:c4:79:90:a3:
ac:70:95:df:11:34:5c:b2:fb:aa:17:22:e6:bd:a7:
ed:7e:9a:ce:92:83:95:6e:fe:f9:f2:50:39:1b:59:
9a:8c:8e:ea:63:1b:30:40:c5:67:23:e8:ba:2f:2e:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:D8:7F:8C:CA:9D:15:68:EC:CB:26:90:34:5E:CE:11:77:F9:D0
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dd:44:8d:00:9f:be:5a:51:fd:a5:b6:e9:9c:3f:73:98:37:
7f:31:fe:54:c2:24:21:47:f5:04:ee:16:41:2c:c8:0e:bc:aa:
b3:21:c7:62:ea:cb:77:75:86:66:84:28:8f:9f:05:9d:c5:83:
df:2c:cb:49:45:11:65:ba:24:37:ee:22:ff:85:d2:25:f1:09:
a1:a6:8b:09:be:e7:35:e8:c4:f3:96:f9:5a:c7:95:d4:e8:4f:
82:e0:bd:06:5a:d3:be:88:16:9a:29:b7:32:38:86:2c:2b:7b:
74:dc:f2:3f:a9:92:60:dd:23:4c:6e:13:93:12:37:f1:12:22:
06:53:f6:16:2b:57:fc:1d:e4:77:38:8e:08:88:bd:c8:68:c3:
5f:ad:8c:49:e4:7b:d1:36:89:e4:a3:2b:ca:54:57:71:b0:67:
3d:81:47:50:35:99:f3:5c:90:c3:13:51:e7:d9:63:40:41:ae:
34:5d:34:85:3a:15:72:57:59:bc:f1:2e:4c:11:f3:4f:d3:97:
6e:54:e1:35:14:8d:b4:60:7a:de:0b:97:89:b6:79:67:7b:30:
dd:f9:b7:43:94:5d:a8:14:81:25:4d:f5:a2:9b:ef:b3:a9:3c:
83:c5:21:0f:4e:6d:51:67:9a:88:bf:d8:66:9c:b4:17:54:fe:
c1:08:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:53 2026 by rpki-client