Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier: Ccq5UTyE8pgwghxz7FCM73pVOtgzcpTTNkjXyQRVhxY=
Subject key identifier: DB:62:54:14:EE:BA:17:20:56:15:A3:6F:B2:89:0B:8C:46:CF:3D:6B
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 019E1D23194B0E41CF3E3DA166652048D004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number: 0257
Signing time: Tue 12 May 2026 17:01:39 +0000
Manifest this update: Tue 12 May 2026 17:01:39 +0000
Manifest next update: Wed 13 May 2026 17:01:39 +0000
Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: leeGeInPInDO+RRHXt7L07bFX893+5SKtAPxO4pHPsM=)
2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:19:4b:0e:41:cf:3e:3d:a1:66:65:20:48:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: May 12 17:01:39 2026 GMT
Not After : May 13 17:01:39 2026 GMT
Subject: CN=db625414eeba17205615a36fb2890b8c46cf3d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:24:28:05:c9:03:e4:47:7e:11:2f:99:14:
eb:c5:9b:3a:51:1b:58:f7:dd:c3:98:52:ad:0a:d1:
ad:fd:3e:b0:23:77:56:eb:ee:87:81:7f:c7:9a:6a:
61:3f:d0:7f:26:c0:96:25:c6:d4:4b:64:4a:48:b8:
b0:85:e5:b4:98:49:59:00:5a:eb:ed:63:ad:cf:ea:
2c:63:81:ef:6b:0c:38:3f:0f:06:f8:4c:2d:49:40:
9d:c8:f0:4f:34:1f:4c:43:50:73:e4:76:f9:1a:30:
ea:07:5f:e6:96:72:ef:b0:a1:32:6d:ef:1d:94:b4:
ab:6e:50:74:d4:79:ed:c0:1b:45:56:1b:a0:01:53:
af:6d:12:a4:b1:0a:7a:8d:94:c1:8b:bb:cc:80:06:
9d:5c:57:79:65:a7:ed:d4:98:77:5e:3a:f4:1d:31:
84:89:92:ab:41:19:2f:01:66:4c:af:96:ab:14:6a:
8a:16:cc:fa:b8:32:94:22:ec:37:ff:b2:f5:b6:6b:
cc:63:fa:ac:65:63:06:7c:53:6c:7b:7f:b3:87:e8:
36:de:a7:0a:01:ad:cb:b8:e1:57:25:3d:48:9c:8a:
41:d9:2f:70:17:72:ad:52:80:c0:eb:3e:0e:95:05:
bb:ef:aa:bb:e2:3e:82:3d:3a:05:1e:8b:18:b2:ce:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:54:14:EE:BA:17:20:56:15:A3:6F:B2:89:0B:8C:46:CF:3D:6B
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3d:e5:f5:f2:7a:5c:cb:ce:de:48:52:91:64:15:06:0a:08:
02:f2:a5:86:47:3e:d6:97:78:b8:c5:2d:ae:db:05:24:40:43:
c8:5b:07:b9:2b:e5:0e:92:10:e3:95:72:86:93:ca:bd:fd:b3:
51:20:da:13:48:9c:74:f4:82:7c:74:7c:94:61:14:dc:f1:35:
18:f7:e4:31:0a:94:76:cc:3f:0b:da:68:eb:4e:df:ae:ac:32:
1f:df:49:27:ea:61:ba:ab:f1:b2:9b:28:b1:7c:66:6c:aa:23:
65:d3:5d:66:42:61:16:9b:3a:7a:00:f7:6b:75:4c:a0:56:62:
1d:f5:eb:c6:62:ac:5c:24:9c:c5:25:05:71:1a:bd:52:64:c2:
79:c3:48:5e:e1:19:cd:6b:27:1f:b4:ee:dd:f7:b3:b1:bc:b5:
f4:a4:44:8f:ef:62:a0:00:5f:4f:0b:a6:a3:c9:9a:ed:7c:b1:
c3:3e:db:5d:10:dc:0d:95:14:34:4f:e6:17:07:ff:37:65:81:
91:de:14:55:22:51:25:fa:13:cb:af:73:7b:f4:ae:84:f2:a7:
67:ec:1e:c5:1f:a3:4f:81:50:29:aa:d8:10:67:2b:a0:c0:02:
ab:f3:a5:fd:4d:a9:55:2c:82:cc:eb:2c:08:36:51:52:6b:fe:
70:be:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:27 2026 by rpki-client