Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: qEBESSWNXrXJSzDMK7WHQZY/I8znswb2haIfAwZEzow=
Subject key identifier: E0:23:9F:CA:40:BA:FD:5A:DF:1F:1D:7E:09:DA:81:CD:40:17:C4:42
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 019D25832E36D96FBE7B826C82CC06CD1D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 1720
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: 3kGre/LL+It6UvGUBQfZIj8p+HXSbBujjYfKG2bKeGw=)
2: JkUDr7vH6bEJKoPEB2K_5RQGMfQ.roa (hash: kYn3aZZS3X4+BpeBTLyeB9Sj2A8UIze/R0SxrdLQR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2e:36:d9:6f:be:7b:82:6c:82:cc:06:cd:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=e0239fca40bafd5adf1f1d7e09da81cd4017c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:b1:82:0b:f4:81:e4:df:2c:00:dc:6f:31:
38:38:cf:ea:dd:1f:36:96:d8:7e:61:a0:d2:a4:d2:
86:0e:71:54:c2:79:e0:a8:94:5e:02:2b:7c:cc:5b:
5f:ec:09:33:38:13:63:59:4b:2c:dd:ff:a6:d4:be:
49:1f:9a:0e:7e:1e:55:8f:56:95:68:ed:68:68:b3:
da:b4:78:ca:0b:77:af:cb:05:74:61:e0:41:34:fc:
e9:a5:88:50:b8:16:f4:ea:0d:17:35:b1:2a:35:5e:
d7:ae:ed:bf:34:4b:b5:7e:ae:03:51:e1:4d:3c:21:
08:2e:95:11:74:24:85:2d:1c:a7:cf:77:9d:2e:01:
6b:de:b4:e2:3a:f3:82:bc:8d:22:16:25:22:28:19:
f7:ea:05:7c:09:a7:71:1c:e9:ba:a4:9f:2a:b9:f2:
8a:fc:48:62:8c:7d:cc:65:8e:b2:ba:0c:3b:6f:62:
55:0b:3a:3e:3b:1b:0a:10:e5:ed:f8:9c:58:cc:0d:
5a:f1:96:ef:dc:87:09:6b:b6:6b:3c:62:b4:11:f9:
6b:3b:05:57:87:ee:31:ef:16:08:aa:b0:4b:8b:d7:
a8:34:ab:5a:0f:cc:c2:f3:81:2a:28:4e:7e:a1:fc:
a4:32:e5:60:18:58:85:0a:b5:0e:ff:6a:2f:96:50:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:9F:CA:40:BA:FD:5A:DF:1F:1D:7E:09:DA:81:CD:40:17:C4:42
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:4f:cf:2e:29:e1:d9:93:f2:98:22:02:1b:aa:c4:1a:f3:
b6:95:2d:e3:66:72:c3:f5:02:ae:28:7a:1c:87:ca:30:9c:b7:
5d:e7:07:3f:d2:38:2d:9f:85:df:fa:33:94:9c:7d:49:59:76:
0d:65:d8:33:ff:10:20:74:ed:96:70:fd:6b:13:e5:6c:4f:2c:
97:32:79:68:3d:51:ea:18:d5:cb:c8:ec:6f:06:fc:86:e9:bb:
bc:f6:f6:54:3f:93:7e:4e:56:b1:5b:62:fc:26:2d:50:89:41:
16:66:d9:5b:fb:12:cb:4a:bf:9d:db:83:4a:52:d0:7e:87:d5:
9c:07:02:53:f7:bf:1a:6b:bb:49:1a:63:6b:da:0d:9f:ab:03:
b4:aa:2b:07:c7:f4:98:c4:7d:0d:92:f5:30:0f:66:9a:7d:a4:
23:db:7d:a5:d8:63:1e:6c:84:47:4a:26:62:6a:f0:e3:f4:58:
66:8a:1e:cd:a0:e1:ae:b3:06:cd:2a:38:6f:a8:68:52:68:fc:
56:32:41:a4:24:ed:ff:56:52:49:70:ac:5d:63:1d:f7:d2:be:
99:6e:04:bc:c3:73:54:5d:d8:66:0d:f4:49:b2:60:0b:c6:84:
2e:f7:37:e5:fb:3e:b0:7f:8a:a5:68:98:db:37:27:e7:e0:ff:
f0:20:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:51 2026 by rpki-client