Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: Yc9Y3ajW8TPgllIwws/0slNWikcBF7PQa3pQnPaGmp0=
Subject key identifier: 70:80:18:6E:E8:65:97:ED:35:73:9A:B1:61:46:4E:54:9C:41:EA:6D
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019E1D59A0749C26BEFD1DF2A6742C62D74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: F0
Signing time: Tue 12 May 2026 18:01:13 +0000
Manifest this update: Tue 12 May 2026 18:01:13 +0000
Manifest next update: Wed 13 May 2026 18:01:13 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: blisU2lCz2u74eUUpd58TZNXJSLpG9UxJxO+GSYx1Ss=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a0:74:9c:26:be:fd:1d:f2:a6:74:2c:62:d7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: May 12 18:01:13 2026 GMT
Not After : May 13 18:01:13 2026 GMT
Subject: CN=7080186ee86597ed35739ab161464e549c41ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:9e:68:2b:c8:0c:78:38:59:74:6b:b9:46:
bd:9f:1c:e1:e3:db:15:36:22:05:02:03:dc:f7:80:
a5:22:8d:10:7a:04:c3:cd:9f:2f:b3:a3:98:30:d5:
17:52:1a:fb:48:9e:04:44:ee:bf:84:82:5c:b8:b3:
e5:6f:6e:88:d7:4d:be:fa:cc:53:1e:08:c2:11:ad:
9e:80:b5:16:35:c9:59:d0:d6:d5:c0:62:73:e0:63:
f4:be:8b:fa:52:c6:52:ef:26:72:62:d9:94:1d:8c:
ad:27:80:a3:6a:a0:2c:3d:39:00:78:a9:4c:51:0b:
d7:e8:d6:b9:77:b8:99:53:d8:49:5d:c2:0d:f4:d1:
f5:60:ad:44:96:8c:e3:36:72:c6:7f:3c:02:12:46:
dd:e9:4e:82:7a:25:3a:c2:81:00:d2:59:c8:0c:17:
58:6a:0f:62:7e:6a:58:cd:2a:20:8e:8a:82:01:73:
47:a7:7a:62:21:a4:2d:27:44:3e:63:5a:a7:c4:e4:
9e:77:6b:07:c4:ef:9e:5d:0a:21:6c:21:1c:67:64:
fd:db:3d:b8:50:65:13:58:21:82:7d:fc:44:9c:a3:
dd:76:bd:94:5a:f6:13:d3:d0:a2:5a:9d:0f:ba:09:
db:ea:e8:e3:d7:12:dd:57:03:51:a6:23:8c:92:9e:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:18:6E:E8:65:97:ED:35:73:9A:B1:61:46:4E:54:9C:41:EA:6D
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:b9:87:58:69:e1:48:5f:b1:95:76:ef:18:83:fb:ef:c0:
5e:0b:a2:7d:d1:d1:4d:90:c1:11:89:80:20:74:6b:5a:1b:11:
2f:97:b1:23:03:2c:35:7c:52:e0:2f:49:59:e3:17:a9:c6:ef:
d7:ce:56:6c:d8:84:03:62:ab:b6:2f:cd:fd:27:c9:ee:85:0d:
62:a6:aa:01:89:5f:04:cd:78:53:b9:4e:2e:f0:f1:97:44:82:
9d:e3:e1:4b:5b:52:de:e8:6d:b2:d1:7e:91:a4:e4:70:b6:98:
7a:2f:d5:c3:83:52:31:fd:c0:3e:7f:72:29:60:81:61:66:fd:
82:37:28:4f:11:88:ec:c3:ec:84:2a:80:cb:87:83:02:5d:a3:
39:28:03:e1:3d:87:89:68:b9:fb:a6:5c:9e:cf:a2:1a:ce:0d:
99:fe:c6:ea:71:90:49:42:62:cc:ec:14:23:e9:8c:fe:02:e4:
4b:11:d3:5b:a5:b1:16:d1:0a:33:1d:74:eb:8c:e0:1e:bc:d9:
e1:d5:b4:71:dd:76:15:fc:22:eb:8a:aa:c7:34:26:58:b7:1e:
ee:1f:28:92:27:74:5c:77:14:40:1c:7b:29:fa:df:96:25:77:
6c:c2:e8:3b:a2:38:9c:7f:f8:37:c3:5d:4e:2b:92:78:ca:57:
04:84:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:50 2026 by rpki-client