Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: sJCiji3tIRzqIQPcnDAPDNVbWGR2hzFRiH+0PHWKcJk=
Subject key identifier: EC:C9:98:9B:A9:CD:24:BF:A9:5D:BC:F5:DA:01:9C:15:27:09:5E:DC
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019D2A04873F626F6E82662A65B39BF09842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 04A7
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: +6d+ZI8g7NwmLwueH/S4ThQIfhVN/kFz7kXxKnfBRSQ=)
2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
3: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:87:3f:62:6f:6e:82:66:2a:65:b3:9b:f0:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=ecc9989ba9cd24bfa95dbcf5da019c1527095edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:41:70:ad:58:ca:45:f7:14:7b:63:23:c3:
c8:8a:92:4a:3c:22:25:79:b5:c6:17:bf:dc:ec:cd:
71:90:5e:a5:aa:08:0f:49:5f:c9:b4:b1:b8:78:e4:
aa:33:28:9f:8e:d7:3a:89:85:0d:ee:20:a4:70:c8:
5f:7e:18:db:7b:65:10:83:38:b1:1b:2c:1f:71:49:
da:fb:34:e4:61:9a:25:7d:a4:61:be:5b:d4:e4:72:
df:b2:c3:d9:c8:54:69:58:45:53:38:20:22:fe:d2:
0f:f2:e5:d3:0f:1f:80:b3:fc:e9:a7:92:de:e7:b4:
66:8f:0e:68:fe:64:bf:b3:bf:31:06:f2:28:ac:b1:
56:98:ff:c7:6a:73:41:d3:ea:75:90:30:e4:cb:57:
d6:ed:5f:e8:0f:6d:1c:73:db:ea:1e:e1:3f:03:06:
bd:e1:30:bc:3a:be:71:a8:94:3a:7b:02:15:89:5a:
ab:bb:85:fa:c5:f8:3d:c2:57:9c:ce:a5:34:e1:ce:
72:d2:ab:1a:86:55:a3:1d:81:48:a2:fd:99:61:20:
36:21:aa:fa:56:98:67:f6:f7:6f:39:ab:d7:ef:59:
38:07:a0:d3:be:f3:81:bb:f8:47:51:b9:5e:37:fb:
17:25:0d:ef:d3:ca:7b:f5:c3:67:6b:79:79:67:9c:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:98:9B:A9:CD:24:BF:A9:5D:BC:F5:DA:01:9C:15:27:09:5E:DC
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:96:62:ec:06:f0:57:42:99:1d:12:87:b0:67:b0:41:57:e7:
98:6d:14:79:47:0c:d5:65:2e:3d:9a:15:bc:3c:76:95:a4:0c:
76:a2:59:1a:c9:8c:4a:2b:f2:e5:a3:d3:8b:1d:91:18:52:39:
af:82:6a:de:76:5a:91:bd:62:e5:62:7c:8a:d2:d8:78:89:c7:
0c:24:c7:b8:20:e8:52:8b:5d:bf:50:32:53:c2:e4:68:11:b2:
41:14:d6:bb:7c:df:aa:03:21:e2:b7:4a:e1:5a:8d:28:f5:09:
0d:e0:29:31:b8:76:96:60:1f:16:40:ed:69:3b:66:a3:6f:db:
19:77:8b:98:1d:84:3a:56:4e:e0:0b:5e:a7:fb:46:75:ee:ba:
b1:d8:0b:91:9e:f8:41:1f:fc:75:d3:7d:7c:ab:2b:e7:6f:47:
db:8b:dc:8f:c1:b2:45:9d:25:35:86:4b:b9:ae:cb:f6:d2:5b:
52:8e:14:29:8a:c3:74:a7:e9:da:20:91:17:d7:be:04:7b:43:
c1:f4:28:ca:4c:01:7b:bd:66:18:96:ab:63:be:99:69:a4:24:
c9:29:ca:75:24:56:c3:61:fa:b4:b0:a3:fe:e6:a4:ac:01:19:
c8:50:84:ab:41:af:51:b1:5c:cd:d6:ea:91:39:9f:c6:1b:50:
3d:2a:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:06 2026 by rpki-client