Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: 6J2HENkBbyUCA17ScE8SOAf4esobSkPoHidLa0RDKbU=
Subject key identifier: 83:D5:63:6A:1D:5E:30:F0:FA:8F:1A:35:78:53:95:7D:D0:B4:C0:B8
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 019D29296A88B09AF7915C951E3EE4068227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 14DA
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: bTXmvUAQaRact+JqqcJY+pek/OiLi39FD62CcEEBFlA=)
2: O2yqyVYgMd1D21b33Ew-cuZUWKs.roa (hash: mXmtbWNjV9pCi5BRUwRDhllYcEQ3x1WSO9bUZGlzGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6a:88:b0:9a:f7:91:5c:95:1e:3e:e4:06:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=83d5636a1d5e30f0fa8f1a357853957dd0b4c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:e1:ae:18:66:29:35:8d:ff:d3:83:83:fa:
67:5d:04:51:eb:b3:fe:6b:ce:89:56:00:37:45:b4:
bb:9b:93:69:39:09:22:b4:51:13:f7:4c:dc:e8:70:
40:5b:1a:16:d9:a7:14:c7:8c:73:17:31:97:e2:57:
50:19:b3:19:5b:5a:0a:87:89:a0:01:70:14:30:b6:
31:46:2c:8e:4d:d5:0d:ba:8f:a0:83:72:e2:85:c9:
38:46:59:7a:ba:24:7d:3f:34:f0:0a:9f:41:6b:6f:
25:4b:a8:14:b1:5d:25:88:af:5a:c4:1f:22:c4:4f:
90:c2:f4:6e:09:fe:82:21:6a:ed:58:f9:29:11:04:
94:54:13:17:94:eb:99:f3:7a:a4:45:87:b3:6a:0f:
88:da:df:f3:18:93:0b:0f:3d:46:e9:1f:c9:f2:fa:
11:6e:95:35:dd:96:80:70:f1:29:38:ff:12:a1:67:
1f:a7:34:1b:b0:bb:a2:4d:3e:17:63:95:40:0b:f6:
6c:99:a8:df:cd:92:6d:fb:f8:a4:e3:4c:07:57:e9:
fb:04:d0:34:6a:ab:87:d5:e5:28:89:da:ba:8d:f7:
88:c2:d7:66:01:e4:c7:06:82:3e:75:bc:38:88:16:
35:5e:70:1c:2b:1c:6c:d4:3f:0d:58:82:7c:f7:d0:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:63:6A:1D:5E:30:F0:FA:8F:1A:35:78:53:95:7D:D0:B4:C0:B8
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:a2:e4:29:f7:31:9f:50:d7:f6:58:44:60:3e:93:c4:00:
2a:ee:16:31:ef:b8:04:b3:c4:23:34:49:93:2c:3f:8d:7b:e6:
49:41:68:23:9b:0a:94:14:7e:02:ba:e2:df:69:8c:93:3f:0c:
35:75:6b:86:90:d5:d3:a3:c9:a9:c8:32:05:81:fc:16:7d:83:
e5:8a:20:ea:61:90:2a:35:8b:05:51:4c:e4:ad:8d:8b:ea:19:
9f:c1:5a:e5:0b:b0:c3:03:97:46:63:8c:68:fb:5f:b6:57:f9:
28:ae:d9:e4:6e:16:d1:2e:17:ec:5b:3e:21:26:36:c3:75:43:
41:62:de:7a:89:a4:f2:39:e9:b4:28:08:4f:fe:75:e2:56:c9:
40:25:d3:69:0d:2f:2c:1c:f9:2b:8f:16:09:17:87:a1:bf:2c:
8e:c2:fa:ea:bc:6f:76:88:53:06:cd:66:3b:44:29:8f:f7:c6:
39:12:45:a1:93:82:99:4e:57:6a:44:0f:a6:cd:53:bc:3e:02:
9c:16:8c:bd:c1:0e:21:3c:c9:b9:d7:89:05:86:54:7f:36:22:
19:df:5a:32:b8:da:7b:26:b9:dc:11:02:91:99:5d:b7:d9:7d:
c0:a2:61:0c:3a:a6:86:6b:7d:81:60:d5:ff:b2:12:95:7c:5b:
6d:51:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:55 2026 by rpki-client