Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier: pshR69vwXwWGFadQ2A5yg8oYn9WYp55iUHxCBrVKeZ4=
Subject key identifier: 27:51:0D:37:37:9C:6F:8E:6B:5D:BF:09:27:E5:8F:2A:D9:11:DB:9B
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 019D26CCD6ADCF72BBB0016D39C8FC57204C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number: 0FD9
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: FKqb6xzvddOBKsdPHF3mhYAJS0k.roa (hash: 910PvDYWRjp0nPe0uzUMCv2AassoiwccQm9jYSF+i2c=)
2: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: BBPzs+5woa1vk8j+rmXlBUdGnsAOsAPBBK66THDYd5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d6:ad:cf:72:bb:b0:01:6d:39:c8:fc:57:20:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=27510d37379c6f8e6b5dbf0927e58f2ad911db9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:b5:cf:42:e5:40:05:ec:3b:40:c5:be:2f:
ad:20:3e:d7:b0:77:05:ed:cf:d3:0f:76:b8:32:0c:
5a:c9:c3:9a:2d:82:ad:e1:1a:97:10:09:3c:70:9f:
49:d0:66:41:81:51:3f:dc:e1:2c:4e:57:5e:de:fc:
96:af:81:91:2a:08:96:f4:57:2f:fe:e9:68:a1:76:
aa:fa:f4:51:a6:68:ec:05:37:46:e3:7e:89:83:db:
6d:3c:1b:99:e8:5d:3e:76:6b:c2:58:7a:ad:5f:42:
a2:69:69:fb:29:fc:bb:8b:cc:f0:ef:43:46:46:9c:
89:86:c0:8e:5d:8a:0b:fb:08:5a:1d:ad:cf:72:57:
cf:c9:e7:40:62:b4:06:a8:e0:c5:e3:c7:1b:4f:db:
ee:38:d8:72:ce:ae:f2:ae:98:03:8b:43:cb:6c:4a:
2c:2e:47:9e:11:1b:03:5b:2f:3f:6a:12:8d:65:6e:
ca:f4:c6:8d:7a:9c:0d:c0:61:58:db:5c:bf:48:ae:
01:17:bf:2d:ac:91:ac:1f:32:3f:3f:07:65:29:68:
54:0f:17:f6:ed:5d:11:b6:ff:39:c4:9c:e4:7a:fb:
2f:a7:0a:54:3e:0a:d9:00:6b:66:3d:1d:3f:40:7b:
96:db:af:1a:2a:46:f2:99:34:e0:e7:ed:cb:d4:4c:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:0D:37:37:9C:6F:8E:6B:5D:BF:09:27:E5:8F:2A:D9:11:DB:9B
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:4b:98:0d:98:6d:f4:0e:b2:80:3e:e0:59:58:3e:b2:7b:
73:7f:4c:60:a8:5c:25:02:68:14:9c:9e:0e:4d:40:e4:84:92:
c2:7c:e6:4b:ea:a3:29:9d:c0:2f:62:9d:37:9e:0e:c4:37:2f:
3e:ff:93:21:2f:17:cc:01:b3:ca:4b:ca:6b:d1:4b:7f:4e:d3:
da:69:2c:a4:1b:0d:29:dd:a9:a0:32:f8:64:52:ce:43:85:65:
55:84:bd:e7:ed:76:1e:c3:0c:76:00:ca:19:e0:24:4a:53:34:
8d:d1:38:f9:70:a3:8e:61:89:52:f1:a1:a8:2c:cf:e0:5d:45:
a0:f8:44:30:47:41:c6:db:08:22:b1:24:1b:2a:59:db:4d:c0:
2c:7d:2b:88:e6:80:1e:98:10:3d:34:5b:09:0c:c8:a1:6e:72:
01:88:b7:d9:7d:33:ba:26:8a:7f:45:3c:3f:7c:90:9b:78:1c:
67:ff:22:2a:60:d1:21:37:c4:cb:2a:c9:31:84:43:84:87:c2:
e6:74:9f:48:52:9f:67:66:a7:ca:6d:e6:ed:ff:a8:1e:7d:95:
39:b0:55:aa:02:1d:28:78:15:ef:3f:18:1c:31:fc:c1:9e:6a:
46:71:12:f5:52:9b:dc:a8:a6:47:d4:a5:ff:86:a0:4c:5e:b6:
29:bb:aa:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNatz3K7sAFtOcj8VyBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyODg5MDNkOTBjMDFlMmQ1Y2UxODc4ODA1YWQ0YTkyZDI4
YWVkYzkwHhcNMjYwMzI1MjEwMDUxWhcNMjYwMzI2MjEwMDUxWjAzMTEwLwYDVQQD
EygyNzUxMGQzNzM3OWM2ZjhlNmI1ZGJmMDkyN2U1OGYyYWQ5MTFkYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd21z0LlQAXsO0DFvi+tID7XsHcF
7c/TD3a4MgxaycOaLYKt4RqXEAk8cJ9J0GZBgVE/3OEsTlde3vyWr4GRKgiW9Fcv
/ulooXaq+vRRpmjsBTdG436Jg9ttPBuZ6F0+dmvCWHqtX0KiaWn7Kfy7i8zw70NG
RpyJhsCOXYoL+whaHa3PclfPyedAYrQGqODF48cbT9vuONhyzq7yrpgDi0PLbEos
LkeeERsDWy8/ahKNZW7K9MaNepwNwGFY21y/SK4BF78trJGsHzI/PwdlKWhUDxf2
7V0Rtv85xJzkevsvpwpUPgrZAGtmPR0/QHuW268aKkbymTTg5+3L1EzaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdRDTc3nG+Oa12/CSfljyrZEdubMB8GA1UdIwQY
MBaAFIKIkD2QwB4tXOGHiAWtSpLSiu3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84M2Y4MmQtMTU0NS00MDc0LTg2ODIt
YTFkZTU4YTNiMzViLzEvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84M2Y4MmQtMTU0NS00MDc0LTg2ODItYTFkZTU4YTNiMzVi
LzEvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxdLmA2Y
bfQOsoA+4FlYPrJ7c39MYKhcJQJoFJyeDk1A5ISSwnzmS+qjKZ3AL2KdN54OxDcv
Pv+TIS8XzAGzykvKa9FLf07T2mkspBsNKd2poDL4ZFLOQ4VlVYS95+12HsMMdgDK
GeAkSlM0jdE4+XCjjmGJUvGhqCzP4F1FoPhEMEdBxtsIIrEkGypZ203ALH0riOaA
HpgQPTRbCQzIoW5yAYi32X0zuiaKf0U8P3yQm3gcZ/8iKmDRITfEyyrJMYRDhIfC
5nSfSFKfZ2anym3m7f+oHn2VObBVqgIdKHgV7z8YHDH8wZ5qRnES9VKb3KimR9Sl
/4agTF62KbuqcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:24 2026 by rpki-client