Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 94o7mOZbZ+NzvwYIJdxOiP4F+Ly1Jp3OvNPcKDzjlCw=
Subject key identifier: FD:78:BB:65:B0:26:A1:BF:69:10:8C:C6:5A:FA:E3:68:60:C4:68:00
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019D2696437D9D60D8E6AF1F0FC8345A8A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: qHB2yZHuN0fO3L7hyYUZiyIJvZPCqYFPC50J9VnUiec=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:43:7d:9d:60:d8:e6:af:1f:0f:c8:34:5a:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=fd78bb65b026a1bf69108cc65afae36860c46800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:f5:8b:85:fc:ea:6a:e3:b9:f5:34:cb:47:
da:2d:17:d4:ec:86:4d:c6:02:37:3e:4b:ee:11:66:
ac:44:81:ca:7f:a3:b1:71:8a:d5:75:64:04:1a:92:
8d:83:76:b8:93:35:89:db:c4:ba:70:20:91:b4:5b:
59:3e:cf:01:d9:49:bf:1a:a0:18:33:52:49:bd:c1:
76:09:55:3e:02:0b:ad:ec:b8:df:d0:be:f5:ae:54:
53:a8:8b:62:ad:d3:d0:38:4f:f1:fe:c9:5f:5e:e3:
d0:15:5d:9b:7d:8a:ab:03:a8:a2:f5:08:ae:8e:1e:
95:d8:de:fa:25:15:1a:84:7b:c1:73:64:cc:40:97:
73:fb:e5:bb:0e:ac:93:cb:c0:a6:c0:a8:fc:27:93:
37:c4:96:67:d1:dd:56:b4:93:3c:7f:a6:a4:08:dc:
83:50:67:12:ac:75:e9:02:c1:d6:7b:42:a4:e7:f2:
13:a8:be:e7:cd:a6:60:4d:e5:0a:70:91:bc:b2:b1:
c6:f3:00:1e:98:94:fa:64:86:46:98:26:7f:7c:8d:
ce:1e:c1:84:36:7a:38:c6:00:b0:d0:41:bb:fc:19:
87:08:a8:bc:ef:db:4d:66:ef:b8:94:94:df:ad:a5:
7b:7a:0c:99:3e:07:39:38:43:a8:26:94:9a:89:46:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:BB:65:B0:26:A1:BF:69:10:8C:C6:5A:FA:E3:68:60:C4:68:00
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:99:a0:7c:e4:3d:59:39:89:02:ae:fa:18:8a:3e:87:3c:08:
3e:c1:cd:83:a9:fe:bc:2a:86:fb:20:11:bc:60:37:40:bf:61:
49:c7:c8:b6:2c:06:c3:5c:ab:55:d9:71:a9:2d:25:4f:cb:b7:
d4:35:b8:cc:bd:85:f7:df:1c:22:a1:5f:5c:8e:e4:f6:e3:9d:
64:b6:40:d9:1a:8b:81:d7:cd:2e:18:86:a1:18:01:3b:c4:a7:
f9:18:60:b7:b8:f1:44:89:b7:94:ec:a5:4e:89:b5:12:b8:f1:
b6:2a:ea:1b:cc:55:51:60:00:a1:ec:4a:28:c6:75:5c:b0:53:
9d:39:4a:b2:9b:73:3e:ec:c2:83:b2:dd:58:4d:61:ca:4c:55:
fd:cb:12:ca:50:45:a6:22:7c:48:1e:3d:82:49:84:52:0d:38:
08:db:98:c4:b6:dc:4e:b0:de:bd:6b:10:9a:0f:f2:b8:81:b6:
a3:db:7a:8a:f3:b1:f5:9e:8e:5e:dd:98:82:7d:be:2c:41:ed:
14:b1:23:26:60:ee:8a:d2:81:77:bf:a7:83:01:a8:98:10:39:
de:1a:bd:86:71:38:1f:27:e4:b7:c2:c2:44:9a:f4:5b:b9:25:
9c:a7:8e:fc:da:22:9b:f2:3d:61:fa:d9:a6:c9:73:f6:99:47:
57:50:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:05 2026 by rpki-client