Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File: GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier: H/fh3StXnSykXG43lDihib8Koih/ne4qs99AsGfby6k=
Subject key identifier: 0B:5C:5B:04:4B:5F:9D:25:5D:0E:A7:2C:66:AA:D5:36:2B:A8:32:FC
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 01A0E218AC4B11C34E76BEC2E23E35AE8DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number: DD
Signing time: Sun 27 Sep 2026 09:01:02 +0000
Manifest this update: Sun 27 Sep 2026 09:01:02 +0000
Manifest next update: Mon 28 Sep 2026 09:01:02 +0000
Files and hashes: 1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: 6Tb3xKZB4uW/WhVrVwo3KXm5wpVGRmzmc1QKUFNlXRw=)
2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
4: iULSu1XOMW528tmeTQYP8c_wAb8.roa (hash: RURInJ6+YkolxYt5T8//7OYPXS8SUDD30iDV+JQ/+4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:ac:4b:11:c3:4e:76:be:c2:e2:3e:35:ae:8d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Sep 27 09:01:02 2026 GMT
Not After : Sep 28 09:01:02 2026 GMT
Subject: CN=0b5c5b044b5f9d255d0ea72c66aad5362ba832fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:0c:e8:aa:e6:c2:b7:b0:26:a3:5a:db:67:
79:e1:10:fd:97:d7:b2:58:dc:38:b9:76:5e:0c:aa:
3f:e0:c4:63:17:24:f0:b8:2b:9d:56:f9:04:f4:a2:
42:a3:96:2b:80:5b:f3:6e:ab:f2:42:8b:2c:0f:08:
e3:c4:ae:10:cc:59:2f:22:da:df:0d:4f:c3:83:5b:
83:4d:b7:08:64:b7:22:a1:d5:bf:e6:a1:7a:eb:d7:
30:a5:93:1b:db:51:92:49:75:5f:c4:70:dd:65:c2:
30:d9:d0:c7:a4:62:6f:41:7e:73:ad:6d:11:94:f7:
16:45:85:16:d8:13:00:4b:96:13:ae:73:80:b1:36:
0d:9c:c6:3a:32:1b:72:ef:56:4a:1a:60:30:46:72:
72:7d:81:2c:28:f1:6e:a7:35:d9:5e:ad:17:56:42:
71:66:31:97:ba:5a:5c:ee:43:11:b5:5f:8e:7d:6f:
27:bd:74:37:d3:fe:e2:71:19:7e:ca:99:01:75:e4:
9a:b5:67:f8:5d:b9:92:ca:98:64:31:25:2c:a7:8d:
7c:5d:af:48:7f:c7:58:a2:f3:22:17:74:8b:a5:bc:
47:cc:e0:f4:60:55:d5:2d:74:3c:31:ae:ce:4e:50:
7d:b5:00:03:d5:6f:e0:5b:e7:81:04:7c:c9:9c:12:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:5B:04:4B:5F:9D:25:5D:0E:A7:2C:66:AA:D5:36:2B:A8:32:FC
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:95:aa:5e:0b:ee:93:3d:3f:fe:13:c7:e0:9b:66:07:b1:9e:
f5:64:64:3c:83:26:8c:d7:f0:bd:cf:95:bc:b3:aa:bb:9f:84:
6b:6a:88:d4:2d:b7:72:4e:aa:50:e6:ae:c9:8a:db:b2:2f:1c:
d4:a4:04:94:ad:b5:bd:5a:e7:22:af:37:1c:0a:b9:bb:3a:23:
e8:ab:21:6a:28:5a:71:77:f3:90:87:ac:58:64:f6:72:53:2f:
d4:c8:18:87:c7:93:ad:16:ba:ae:14:9d:fa:18:c3:60:be:f2:
f3:91:94:a6:c1:4e:a7:d5:72:a2:5c:d5:ec:16:47:e4:55:e6:
c4:e3:6e:58:15:3d:74:3b:81:93:ea:c4:3d:23:a4:04:8e:61:
bb:63:06:21:bd:4e:17:47:5e:98:be:0b:4e:b4:0e:72:28:2c:
d8:d3:39:8f:7d:74:66:c8:95:2e:57:13:c3:17:20:2f:58:88:
84:52:45:c3:ac:bb:49:db:78:0c:86:bc:51:bf:f7:16:71:92:
ab:95:b2:3c:30:47:50:43:77:b9:15:a4:20:f4:dd:56:b6:91:
10:98:59:bc:c2:3e:e8:47:9e:0a:b4:aa:49:46:ac:32:c3:cb:
c2:45:23:6c:2f:78:39:7f:8a:d2:56:80:30:ee:04:95:5f:fd:
1e:62:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:37:23 2026 by rpki-client