Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier: nmenBxS3jDtS9yzH46rwk3L2qxeEZpaimlMQY/HFrmo=
Subject key identifier: FD:17:DA:12:FF:06:01:52:94:93:27:8C:D8:80:16:47:85:F2:01:99
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial: 019D2AA98BE44E28F05C8332C18D936F6F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 15:00:47 +0000
Manifest this update: Thu 26 Mar 2026 15:00:47 +0000
Manifest next update: Fri 27 Mar 2026 15:00:47 +0000
Files and hashes: 1: BR3wphovR_RPvqDUE27elOUu4-g.roa (hash: /d+bM8z6dvoIJGOJEV4LkgmXfHsdFv9RsRrj+TP+634=)
2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: fhSdtoJ6iLtMt5h60OCdlkXKVAGGHxuZuiwogA6JJIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:8b:e4:4e:28:f0:5c:83:32:c1:8d:93:6f:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Validity
Not Before: Mar 26 15:00:47 2026 GMT
Not After : Mar 27 15:00:47 2026 GMT
Subject: CN=fd17da12ff0601529493278cd880164785f20199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:62:fb:73:07:6b:1a:be:ab:b3:33:91:2f:
44:5a:03:f5:5a:d2:80:95:b2:c2:62:bc:41:3a:71:
f8:5d:16:c2:06:b0:7d:6b:8a:bb:4f:7f:77:a5:f4:
ee:13:f8:f0:34:c6:81:a1:76:cd:a2:40:a0:9a:57:
2f:f6:a6:38:6f:6d:c1:30:24:fa:58:da:21:30:7e:
11:66:07:36:70:dc:e3:b9:83:e5:14:a6:08:cf:9f:
39:96:30:c6:b9:ef:52:fc:cd:7b:9e:d1:4f:3c:18:
48:4d:20:11:00:74:57:9a:0f:39:34:96:0a:dc:19:
9f:e4:af:7c:ff:0f:42:b8:b8:e9:7e:6c:20:c5:28:
e9:a5:f7:80:47:13:3f:5d:9a:e8:da:5c:27:bf:3e:
86:8c:6f:d6:a5:c7:93:d2:9a:d7:a8:67:a1:ab:9c:
49:38:bf:69:27:c4:43:03:a1:e1:26:a2:be:42:ae:
c3:f3:a6:89:42:60:85:c2:a4:bf:fe:7a:4e:a0:33:
85:05:88:97:ea:2d:50:4e:89:d2:b8:c7:d8:72:4a:
22:83:f6:6a:b7:27:00:2b:f7:bc:4f:9c:b6:54:07:
ff:9f:09:fc:b3:f4:fa:ee:79:3d:a9:e9:ab:8c:0c:
6b:7b:74:49:e4:da:bf:5f:68:4a:51:9d:ff:3c:e7:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:DA:12:FF:06:01:52:94:93:27:8C:D8:80:16:47:85:F2:01:99
X509v3 Authority Key Identifier:
keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:72:d9:b9:7e:bd:fa:17:86:af:cd:7a:4c:23:b1:15:d9:
82:da:18:45:4d:d7:79:83:8b:3f:77:cd:84:38:59:9d:e6:d8:
2f:46:ac:03:75:ef:ae:26:dd:63:09:dc:5d:57:4e:eb:dc:01:
d9:ae:98:6c:f7:11:0f:5e:db:de:56:86:aa:08:17:66:57:f1:
3b:6a:e0:73:89:62:6e:84:c8:93:24:0b:5c:fb:8d:84:0e:84:
be:8f:dc:f4:66:6a:07:77:6c:cf:9a:91:0f:24:93:db:90:ca:
3e:57:c3:a1:3f:a3:74:4f:bb:43:cc:e3:e1:71:78:1f:ad:f5:
ac:27:c4:c9:0a:7c:95:fc:68:e7:21:2a:2a:04:32:92:ce:48:
13:c9:03:b3:45:d4:62:95:c4:6a:ea:6b:82:58:29:bf:88:ad:
cb:7e:ff:e5:b5:63:7a:99:0a:f5:db:ec:4e:ff:af:70:09:5a:
1a:08:3c:33:6c:5d:07:63:07:91:da:c9:05:5e:ba:d3:64:23:
8a:15:87:6e:f7:51:cd:95:c1:a8:21:00:f1:28:ee:46:10:fd:
b2:e1:ce:3b:09:b1:40:d2:a8:46:66:90:5c:f5:ca:b3:b0:5f:
6a:10:e1:36:16:6b:dd:4a:b1:09:c9:4a:5c:7f:45:81:33:a1:
05:ee:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:56 2026 by rpki-client