Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File: GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier: AqIcIFCLPDb5j3W1rbtc63CAu8DTOj9hD6vr1yJTvTw=
Subject key identifier: 18:DA:BD:F8:9A:2B:64:A6:8C:E5:FD:51:E7:C2:5C:F9:74:97:C0:AA
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 019F8F7EF07835FA372792D74CFA7A7BFB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number: 2D
Signing time: Thu 23 Jul 2026 15:01:28 +0000
Manifest this update: Thu 23 Jul 2026 15:01:28 +0000
Manifest next update: Fri 24 Jul 2026 15:01:28 +0000
Files and hashes: 1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: h1+i8kR9FeQ6U96Ai84Xuux2VTH+2QcFz3+uEjjRWmE=)
2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:f0:78:35:fa:37:27:92:d7:4c:fa:7a:7b:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Jul 23 15:01:28 2026 GMT
Not After : Jul 24 15:01:28 2026 GMT
Subject: CN=18dabdf89a2b64a68ce5fd51e7c25cf97497c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:62:99:51:5b:fb:fc:81:24:ef:d7:08:c3:
cf:41:33:73:3f:de:74:02:3d:cb:fe:3f:c1:21:a0:
3d:df:97:e0:3e:4b:9d:4c:db:de:7f:b9:af:3d:bc:
07:91:44:a1:17:10:2e:b4:d4:02:a2:1c:5d:2a:34:
d1:34:d5:a2:c9:19:e3:56:ff:1b:6f:df:d3:0c:a4:
78:54:2d:15:71:f5:63:22:ba:29:fb:0a:fa:58:b7:
8d:a9:0b:f7:16:5a:a3:0e:6f:31:ca:58:d5:a0:ae:
b1:d2:18:79:be:75:88:32:11:80:c8:81:6a:bd:44:
4a:22:82:f1:f9:73:8f:b5:83:34:34:a7:db:cc:b1:
8a:23:1b:74:a1:f5:d5:75:26:64:24:0e:54:b2:8a:
6f:5c:53:5d:d8:45:3a:aa:53:0a:a5:a1:ea:47:35:
50:76:dd:cf:66:e8:c6:2a:47:6b:5c:20:80:c0:ce:
43:19:eb:55:57:a4:6f:02:0e:e8:e4:a4:7c:9b:de:
50:c0:d8:5b:aa:99:f7:0e:a4:d2:f9:6f:30:a7:82:
b5:96:50:e6:59:c4:b7:0c:56:6b:87:a8:c9:7b:6b:
f4:c5:a2:a2:23:7c:26:c6:18:ba:1e:1e:75:93:ff:
be:49:5f:c1:68:e0:d9:95:72:0a:92:d1:f9:3f:e2:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:BD:F8:9A:2B:64:A6:8C:E5:FD:51:E7:C2:5C:F9:74:97:C0:AA
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a3:9c:b1:a6:e4:1c:d6:8b:4a:aa:d0:f6:b6:5c:1c:44:d0:
d9:98:51:e1:8d:db:d4:f6:0d:47:e7:a8:6d:84:3f:6f:99:66:
0b:4b:68:a3:5a:a6:7a:7f:19:8e:46:32:e9:10:cf:b1:f1:14:
59:31:fa:68:56:f2:9b:a1:12:24:74:0c:91:7e:4b:17:81:65:
18:9e:4f:db:cb:85:b9:23:ea:60:50:80:d4:e5:31:43:9a:ed:
78:75:da:df:83:4c:99:54:f4:c2:23:53:77:b1:65:16:03:2f:
92:13:dc:48:8d:2b:70:5e:66:0d:b1:b6:63:c4:51:cb:47:dd:
5b:68:9f:3b:0e:e9:82:28:46:e6:89:06:b0:11:33:4d:a1:71:
f5:d4:ea:93:78:0b:ce:45:0e:af:d0:94:0f:b4:e9:8c:55:09:
97:fe:7c:df:c0:d8:b2:c2:8f:66:f3:58:1f:73:dd:c0:2e:ee:
d7:bb:3e:6d:97:37:9f:5c:fe:a4:b9:95:5b:0f:7b:16:c8:75:
62:e2:be:2b:bf:df:3c:0d:ed:0b:96:e5:e3:96:13:14:82:8c:
be:e0:10:e7:b7:26:57:aa:d0:37:54:69:d8:5b:55:ff:73:a7:
62:5f:14:73:b9:86:e9:1e:99:ff:bc:2a:4b:28:db:49:60:b5:
be:65:e4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:15 2026 by rpki-client