Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: msSJXbCnbRFtgb4uHoN520rKAAsjay3zSww5T5WqwGU=
Subject key identifier: D6:63:A1:AD:C5:DA:EE:CB:87:AF:3A:94:B0:45:7D:89:4E:F2:A2:C0
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 01A133352DA8343B8826BE91BE98EC15C649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 0289
Signing time: Tue 13 Oct 2026 03:01:25 +0000
Manifest this update: Tue 13 Oct 2026 03:01:25 +0000
Manifest next update: Wed 14 Oct 2026 03:01:25 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: wrVg9TlyTGuzfTtrm0bgpr/tw7NyMnmKdbY2hMAL8nI=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:35:2d:a8:34:3b:88:26:be:91:be:98:ec:15:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Oct 13 03:01:25 2026 GMT
Not After : Oct 14 03:01:25 2026 GMT
Subject: CN=d663a1adc5daeecb87af3a94b0457d894ef2a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:e9:bb:42:03:e9:cf:af:aa:f5:19:fb:49:
90:47:cb:85:cd:15:75:35:95:3a:a9:48:3b:dc:eb:
5e:62:9d:55:46:72:3d:10:6a:f1:2f:64:f7:d7:4e:
09:72:60:48:65:18:26:ee:81:e2:28:0f:6e:96:1a:
d8:11:f0:ad:77:7f:88:ad:cb:65:4a:ba:32:47:3a:
f3:f2:f0:de:10:25:6b:98:53:8e:7b:bb:c1:b7:44:
88:5d:b9:a8:45:17:9f:41:ec:f9:d1:21:3c:27:9e:
d7:0a:50:0a:4e:d6:06:41:fc:ea:33:55:ea:b9:46:
79:c0:d2:2b:41:0a:39:54:1b:72:43:bb:09:4a:d0:
7b:a4:37:9e:b4:80:14:09:41:d7:b9:ce:15:40:a2:
08:84:ae:33:db:70:31:b2:15:60:06:b5:5a:be:aa:
86:fa:66:ac:68:cb:c2:7f:b4:5b:5b:dc:0b:fd:d3:
d2:38:4c:95:0f:23:32:09:14:7a:10:1b:22:cf:7b:
48:39:e3:48:f5:e2:5c:5d:6a:00:6e:16:0e:7e:96:
93:60:db:00:3b:a5:43:a9:8d:ac:a9:65:9b:3c:bf:
b2:4b:50:61:a9:d9:df:61:9e:99:f1:28:08:db:b2:
e1:3b:3a:a0:15:7a:79:a5:06:a2:9f:9f:e7:25:33:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:A1:AD:C5:DA:EE:CB:87:AF:3A:94:B0:45:7D:89:4E:F2:A2:C0
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ab:6f:43:7d:96:95:37:7e:32:57:8e:a0:a1:39:30:3a:fc:
bc:87:4a:4d:01:95:2d:2b:b8:dd:1f:9d:9a:3d:12:c5:01:51:
12:fb:41:95:36:e5:cd:c8:52:5a:85:f8:b7:48:9f:06:0e:fb:
24:95:76:d4:5f:58:eb:93:fb:e4:79:c9:ca:0b:4c:e4:88:a7:
7d:90:bd:45:ff:f6:e5:1f:ab:6b:6c:f4:5a:b5:f3:18:d4:21:
e9:df:a1:b3:0d:7c:d2:11:2f:50:33:64:3f:cd:73:83:fb:de:
6d:cb:17:c6:cd:ce:63:36:10:c7:2a:34:e3:32:27:e0:21:5a:
48:e3:d3:35:77:0e:31:be:21:44:70:8d:bf:21:49:6e:2a:43:
0a:d0:fb:be:6c:59:d1:7f:3f:2a:77:c7:85:ab:73:c4:c6:76:
dc:dd:5f:6b:2e:60:d2:be:2b:76:8e:2b:63:69:d4:cf:19:6e:
9b:72:43:7f:c4:99:3e:e4:6e:49:b7:b7:cc:3a:a3:fc:82:4e:
f2:89:0c:b2:88:cf:5c:8b:ab:a6:ac:78:59:03:1c:82:42:cd:
15:d4:c5:a2:0a:13:5b:c4:82:5a:c1:a5:21:df:82:f7:37:fe:
79:aa:60:7b:a7:e3:a9:3a:ca:2d:4a:db:3d:0c:99:3b:e7:1b:
e5:a2:1a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzNS2oNDuIJr6RvpjsFcZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGEyMmNjNjQyZjA0NDRmODBiMTc2MmUyMWRkMzJhZDk2
YTY0NDMwHhcNMjYxMDEzMDMwMTI1WhcNMjYxMDE0MDMwMTI1WjAzMTEwLwYDVQQD
EyhkNjYzYTFhZGM1ZGFlZWNiODdhZjNhOTRiMDQ1N2Q4OTRlZjJhMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK/pu0ID6c+vqvUZ+0mQR8uFzRV1
NZU6qUg73OteYp1VRnI9EGrxL2T3104JcmBIZRgm7oHiKA9ulhrYEfCtd3+Irctl
SroyRzrz8vDeECVrmFOOe7vBt0SIXbmoRRefQez50SE8J57XClAKTtYGQfzqM1Xq
uUZ5wNIrQQo5VBtyQ7sJStB7pDeetIAUCUHXuc4VQKIIhK4z23AxshVgBrVavqqG
+masaMvCf7RbW9wL/dPSOEyVDyMyCRR6EBsiz3tIOeNI9eJcXWoAbhYOfpaTYNsA
O6VDqY2sqWWbPL+yS1BhqdnfYZ6Z8SgI27LhOzqgFXp5pQain5/nJTNuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZjoa3F2u7Lh686lLBFfYlO8qLAMB8GA1UdIwQY
MBaAFPIKIsxkLwRE+AsXYuId0yrZamRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGIt
ZDU0NGU3ZjEzMjIwLzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83OWM3MDItNjJjMC00M2M1LTk5OGItZDU0NGU3ZjEzMjIw
LzEvOGdvaXpHUXZCRVQ0Q3hkaTRoM1RLdGxxWkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoatvQ32W
lTd+MleOoKE5MDr8vIdKTQGVLSu43R+dmj0SxQFREvtBlTblzchSWoX4t0ifBg77
JJV21F9Y65P75HnJygtM5IinfZC9Rf/25R+ra2z0WrXzGNQh6d+hsw180hEvUDNk
P81zg/vebcsXxs3OYzYQxyo04zIn4CFaSOPTNXcOMb4hRHCNvyFJbipDCtD7vmxZ
0X8/KnfHhatzxMZ23N1fay5g0r4rdo4rY2nUzxlum3JDf8SZPuRuSbe3zDqj/IJO
8okMsojPXIurpqx4WQMcgkLNFdTFogoTW8SCWsGlId+C9zf+eapge6fjqTrKLUrb
PQyZO+cb5aIa1A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:06:18 2026 by rpki-client