Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.mft (raw, json)
Hash identifier: tTMJIZbRM8Z78N9niPfBir45VdWi9r4nW7ufBRekzvs=
Subject key identifier: 1D:2A:EA:30:7E:00:20:D4:F3:33:D4:EF:9D:C7:14:B7:E1:85:02:C0
Authority key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Certificate issuer: /CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Certificate serial: 019F9022F678F6F37D8F2D6A80441F97CB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
Manifest number: 01B0
Signing time: Thu 23 Jul 2026 18:00:38 +0000
Manifest this update: Thu 23 Jul 2026 18:00:38 +0000
Manifest next update: Fri 24 Jul 2026 18:00:38 +0000
Files and hashes: 1: 8goizGQvBET4Cxdi4h3TKtlqZEM.crl (hash: 1vWl42PawIWvIsCsy15NR00cU+7+drJ4UNTq0o0Plqw=)
2: KxgGnF6vb3Ni0-buINiimrlB5FA.roa (hash: I5qHdG7CgoGWsa9qwKXjDuC38Iefxr90rUgtaAZcSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f6:78:f6:f3:7d:8f:2d:6a:80:44:1f:97:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Validity
Not Before: Jul 23 18:00:38 2026 GMT
Not After : Jul 24 18:00:38 2026 GMT
Subject: CN=1d2aea307e0020d4f333d4ef9dc714b7e18502c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:fd:30:29:4a:a7:62:96:ba:2c:44:fb:ca:
a3:b4:b2:6b:95:f4:5b:79:6f:7c:c5:1c:4f:79:a5:
36:50:39:42:e9:be:c5:2f:f3:5a:b7:7d:93:93:06:
09:ee:b1:b2:d4:94:c1:1a:9f:58:39:6e:bd:38:93:
1c:73:1b:88:fb:35:c0:2e:6a:cf:ec:0f:f7:e1:be:
21:6e:bc:db:c2:e2:95:30:bd:a2:21:1b:8e:20:f0:
fb:9c:2d:54:4c:43:68:0f:3e:b8:f4:1a:fd:35:b2:
1f:87:fc:c5:6e:9f:5b:b7:b6:5d:a1:2b:e2:b7:e1:
06:73:d4:11:be:16:5c:b4:c3:38:d7:6f:a2:a7:11:
13:61:31:da:81:99:ce:20:3e:6e:1a:72:77:39:d3:
dd:c5:83:16:d7:08:2b:63:1f:33:56:39:64:2a:d1:
a8:71:6c:6f:e3:48:1e:e8:00:1d:80:99:8a:62:fa:
c9:3a:2d:a9:d0:33:fc:ed:96:ff:c5:24:88:0d:a9:
e4:36:c4:3d:ed:80:0b:78:88:a5:5e:7f:83:8f:8a:
1b:f5:21:75:6a:c2:1d:e5:ec:a3:d5:03:e7:9d:15:
35:bf:ad:49:6f:35:c5:bd:c0:28:41:4a:cf:60:0f:
73:d2:38:0c:29:ce:cb:b0:cd:1e:4d:a2:99:6d:fb:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:EA:30:7E:00:20:D4:F3:33:D4:EF:9D:C7:14:B7:E1:85:02:C0
X509v3 Authority Key Identifier:
keyid:F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:52:f9:c4:51:35:74:06:ee:93:95:c9:e2:4f:a6:ee:e8:48:
d1:25:8f:af:7f:74:58:3e:c8:27:e9:3a:22:94:67:f8:ba:6c:
77:e8:5c:00:7b:57:ea:3a:66:84:d3:da:5e:61:12:b5:3f:3d:
56:ec:18:79:32:86:83:f8:9a:7c:69:0f:3b:0c:fe:a6:34:64:
17:e6:1d:d9:7b:5d:f9:a2:28:c8:4a:f2:60:79:e5:fb:54:fa:
32:5a:2a:45:11:52:81:0d:96:a2:bd:13:3a:ed:15:92:a5:e4:
da:df:e2:6d:86:0f:aa:f4:25:0f:6a:c6:fe:97:3f:08:da:31:
7c:e2:34:a6:53:24:8e:d0:68:fa:23:6b:66:2f:1c:bd:ba:ed:
4f:30:3b:35:8a:c7:e7:55:27:3d:bd:2a:71:4c:7f:93:8f:29:
53:dc:82:ae:e7:95:b3:99:74:46:3a:d9:24:b6:0e:03:2c:57:
8c:ed:98:bf:89:5a:9a:80:64:38:f4:a5:f0:fd:33:a5:7e:56:
5e:55:52:fb:e8:ff:6b:d8:9d:84:46:a2:f8:81:cb:db:71:90:
e6:b0:f7:e7:be:93:8d:a5:7b:b9:01:be:65:a7:d6:e6:2f:ce:
86:60:2c:58:a9:11:35:3c:87:54:54:74:b6:cb:76:85:48:91:
6c:86:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:04 2026 by rpki-client