Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: 4nVpfumqUXLb/iF29xGg77RTEmFaPxuF8ONK1MQB7AQ=
Subject key identifier: C1:AF:36:C3:60:ED:19:E2:39:0B:8D:41:91:CD:62:FD:1E:AC:BC:B6
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019F91DAEB49DA7CDECC915CF15DCA073C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 0318
Signing time: Fri 24 Jul 2026 02:01:11 +0000
Manifest this update: Fri 24 Jul 2026 02:01:11 +0000
Manifest next update: Sat 25 Jul 2026 02:01:11 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: f6CXilKGZ0q/KHQ8OykcA06JJx31R868S+R/fDi5msg=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:eb:49:da:7c:de:cc:91:5c:f1:5d:ca:07:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Jul 24 02:01:11 2026 GMT
Not After : Jul 25 02:01:11 2026 GMT
Subject: CN=c1af36c360ed19e2390b8d4191cd62fd1eacbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:b6:c8:de:1b:6d:c4:a8:f9:74:cd:ac:9c:
d3:f6:6d:ed:f9:43:d0:9c:39:82:af:ec:20:6b:a8:
49:93:1b:24:af:81:9e:84:63:66:d9:3b:44:fd:dc:
e9:73:fe:eb:15:f1:34:17:e6:d0:fa:6c:9f:fe:67:
2e:82:9d:09:b6:48:d4:7f:a0:23:0d:8f:1f:f1:13:
2b:f3:2c:21:82:b6:c3:4d:8f:57:43:ac:b0:6b:51:
fe:aa:59:f6:0c:6b:c8:cc:b6:89:80:34:1b:50:2c:
b8:e9:35:ff:38:13:98:e6:3c:51:3a:1e:64:52:6f:
6f:4e:0c:14:5e:83:e6:b6:97:b6:a3:89:d8:a1:6b:
19:fb:08:60:cd:48:d2:48:99:fc:1e:82:78:25:cd:
1b:83:db:b2:a9:6d:23:7b:72:4f:c6:7b:c2:b5:43:
e8:2d:c0:65:50:0f:4d:ce:87:b6:43:c3:1c:47:6a:
e3:fa:e3:4a:3e:13:e1:40:51:e1:40:20:09:db:c9:
e2:c6:56:9e:89:d1:e5:4b:59:d1:b5:4b:3c:f9:c4:
90:88:a6:cf:46:b5:89:74:97:90:2e:8a:21:a4:1c:
a8:48:e5:34:bf:89:9a:e7:21:85:4c:da:2a:bd:9a:
97:9f:f2:80:77:4e:8e:92:06:68:52:86:0a:d5:32:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:36:C3:60:ED:19:E2:39:0B:8D:41:91:CD:62:FD:1E:AC:BC:B6
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2a:02:21:94:f9:af:54:1f:2b:e3:4e:8f:9a:b2:36:78:d8:
86:90:30:5f:c7:66:41:af:00:e5:a8:0f:02:b8:cb:1b:d0:2e:
65:84:d0:94:ad:34:8f:ee:00:61:14:ef:76:04:d3:00:74:bc:
e2:bc:de:c5:0f:20:cc:e7:15:51:b4:99:91:d9:ea:b2:e7:92:
06:6c:a7:9a:1f:9e:19:5b:b1:8b:35:08:e3:cb:d9:7a:93:ae:
38:99:86:37:37:51:9e:da:86:b2:5c:b7:21:f6:33:45:66:55:
8c:f6:95:5f:3e:52:32:59:61:03:44:03:e2:38:5b:51:e9:89:
d9:30:27:4f:9c:0d:58:34:b7:e0:21:c4:a3:7b:25:31:40:c8:
16:e2:f1:d4:9c:92:22:ae:b2:3c:b4:6f:f6:60:0a:69:8c:85:
1d:e4:f7:09:2f:b6:81:ad:ec:26:f9:0b:8c:e9:dd:83:3c:62:
78:65:91:a0:08:b9:e6:6d:cf:f7:5d:8f:a6:12:48:14:4a:51:
50:4d:68:b2:7f:fd:05:e4:c1:ac:ff:4a:01:c2:bd:62:aa:54:
fc:ef:2a:d0:6b:9d:7e:1e:ed:8e:d6:be:de:48:26:c6:64:bb:
ab:c4:ff:b0:9a:8c:84:6f:f0:4b:69:da:e1:1c:e5:ed:22:a7:
27:81:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:53 2026 by rpki-client