Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: wGpnFsftWuMmR5Yr1TAmRz2Sy+E/X6A5tq86PJHzXjo=
Subject key identifier: 2D:40:E8:80:79:ED:EE:E2:87:70:A0:03:4A:A0:57:3C:A4:12:89:D3
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019D2627F6A03EBF289273F244E9997A93DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 70
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: Kb10pePeUJR2izIdyIn/IYZoWX/OZI77mX0BMrRAKWo=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f6:a0:3e:bf:28:92:73:f2:44:e9:99:7a:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=2d40e88079edeee28770a0034aa0573ca41289d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:04:a1:27:24:b1:6a:34:fd:b4:96:84:40:
f3:5f:5d:c9:62:74:19:8c:bc:95:9f:25:67:4e:d6:
cc:54:9d:9f:ef:88:8b:f7:a8:f2:05:08:23:5d:38:
d1:6d:7d:20:e8:30:de:86:f0:67:41:35:f2:cf:6d:
da:b9:ca:99:10:a5:bb:4b:38:31:bb:ed:85:65:c0:
f8:d8:60:51:75:36:d7:e8:44:43:5c:9e:9c:4b:00:
b0:da:0f:0d:e0:0c:8b:b6:ab:75:36:ec:08:2a:cd:
00:3f:1d:54:6c:68:6c:9b:66:55:e7:5a:8b:f9:ad:
53:bc:d0:6c:af:b2:89:68:62:2b:3f:e8:75:d5:5d:
a1:ce:c1:4d:d3:5d:4a:f7:32:ff:e0:f1:8e:94:4c:
3f:5e:8c:ea:14:aa:80:eb:62:15:68:e4:1b:c4:e8:
fb:63:ea:7a:70:24:f9:d0:92:e5:ee:6c:9b:b6:a0:
e1:8d:bc:20:ce:45:2b:f8:e4:6b:58:5f:5d:c0:16:
1e:71:3a:5c:a7:98:c0:23:23:b0:73:e8:2e:97:60:
40:0d:ee:05:bc:55:88:31:fa:d7:f8:55:12:8c:25:
c0:44:e7:c3:5d:ef:30:0a:d0:8e:1a:21:6e:6a:dd:
42:ba:9d:64:fc:75:59:b8:9e:fe:8d:08:6b:8d:07:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:E8:80:79:ED:EE:E2:87:70:A0:03:4A:A0:57:3C:A4:12:89:D3
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:98:e7:d5:43:b4:41:d8:97:fe:3f:64:40:0f:3a:0e:eb:
7f:00:47:47:fc:d5:69:a5:e2:2f:b3:7d:bb:f6:a4:16:b5:d4:
b7:c9:1d:60:e7:cb:b8:eb:75:62:d4:61:ac:51:67:49:10:15:
c9:bb:73:36:c3:33:cc:a2:c3:48:ce:df:4c:05:bb:27:63:17:
f2:db:3c:0b:89:02:ef:a3:04:51:ad:01:68:08:2c:17:95:4f:
c9:63:5d:54:2a:52:8f:d9:f9:90:03:29:17:e1:99:6d:8d:dc:
24:a7:5f:cf:76:0b:2b:aa:65:11:1e:47:0a:86:82:3c:66:e7:
b2:40:fe:e2:4a:4c:24:d1:ed:0d:d0:27:61:a7:5c:0e:46:89:
31:cd:29:14:0f:17:15:a4:61:66:4f:2c:b5:b8:2d:17:2a:a5:
b0:68:c5:b9:09:06:f2:eb:8a:93:93:24:ca:14:e9:57:ed:f3:
1c:de:4d:cf:14:c8:cd:e2:41:9f:fd:84:68:cd:4a:17:ea:25:
8f:86:33:24:fc:29:db:6d:67:d2:bf:99:1e:4a:e5:49:83:39:
1f:cc:bb:31:4c:da:d8:85:e7:41:bb:d8:0a:f4:07:d9:f9:4a:
f0:41:81:a2:19:bb:e8:c4:ff:76:06:16:ec:93:b3:46:5c:c4:
63:0d:0c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/agPr8oknPyROmZepPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGEyMmNjNjQyZjA0NDRmODBiMTc2MmUyMWRkMzJhZDk2
YTY0NDMwHhcNMjYwMzI1MTgwMDQ2WhcNMjYwMzI2MTgwMDQ2WjAzMTEwLwYDVQQD
EygyZDQwZTg4MDc5ZWRlZWUyODc3MGEwMDM0YWEwNTczY2E0MTI4OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpsEoScksWo0/bSWhEDzX13JYnQZ
jLyVnyVnTtbMVJ2f74iL96jyBQgjXTjRbX0g6DDehvBnQTXyz23aucqZEKW7Szgx
u+2FZcD42GBRdTbX6ERDXJ6cSwCw2g8N4AyLtqt1NuwIKs0APx1UbGhsm2ZV51qL
+a1TvNBsr7KJaGIrP+h11V2hzsFN011K9zL/4PGOlEw/XozqFKqA62IVaOQbxOj7
Y+p6cCT50JLl7mybtqDhjbwgzkUr+ORrWF9dwBYecTpcp5jAIyOwc+gul2BADe4F
vFWIMfrX+FUSjCXAROfDXe8wCtCOGiFuat1Cup1k/HVZuJ7+jQhrjQdCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1A6IB57e7ih3CgA0qgVzykEonTMB8GA1UdIwQY
MBaAFPIKIsxkLwRE+AsXYuId0yrZamRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGIt
ZDU0NGU3ZjEzMjIwLzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGItZDU0NGU3ZjEzMjIw
LzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0iY59VD
tEHYl/4/ZEAPOg7rfwBHR/zVaaXiL7N9u/akFrXUt8kdYOfLuOt1YtRhrFFnSRAV
ybtzNsMzzKLDSM7fTAW7J2MX8ts8C4kC76MEUa0BaAgsF5VPyWNdVCpSj9n5kAMp
F+GZbY3cJKdfz3YLK6plER5HCoaCPGbnskD+4kpMJNHtDdAnYadcDkaJMc0pFA8X
FaRhZk8stbgtFyqlsGjFuQkG8uuKk5MkyhTpV+3zHN5NzxTIzeJBn/2EaM1KF+ol
j4YzJPwp221n0r+ZHkrlSYM5H8y7MUza2IXnQbvYCvQH2flK8EGBohm76MT/dgYW
7JOzRlzEYw0Mww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:16 2026 by rpki-client