Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: hsh+wSsRD7Z8K455xgYi3qG/ghw6bkIOjAXBeNtSnOQ=
Subject key identifier: B6:91:FE:E8:C7:86:4A:41:6A:6A:38:8C:1F:02:6D:BD:1E:54:1E:AA
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019F8EA2301B1E68682AA69803BE8072C8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 11:00:21 +0000
Manifest this update: Thu 23 Jul 2026 11:00:21 +0000
Manifest next update: Fri 24 Jul 2026 11:00:21 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: XrYVcPL3dPu/DFyggUetmHZSgD90hN0uSlDxXgZ2SLw=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:30:1b:1e:68:68:2a:a6:98:03:be:80:72:c8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jul 23 11:00:21 2026 GMT
Not After : Jul 24 11:00:21 2026 GMT
Subject: CN=b691fee8c7864a416a6a388c1f026dbd1e541eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:41:6e:aa:59:fc:44:a7:ed:e1:cd:51:ee:
5c:2e:f6:ae:bd:0b:f3:b8:39:e9:ba:91:e3:78:68:
da:2d:0c:29:b4:e5:46:83:47:c5:79:2d:6f:bc:55:
48:08:6f:95:75:18:ad:69:4e:bf:a1:e5:1d:22:0e:
82:37:a3:26:8c:f0:49:18:b4:4d:76:51:a6:6e:6d:
92:40:80:7a:d3:c9:df:04:16:ff:8d:40:14:fa:03:
f6:ca:80:f0:69:a9:7e:a8:94:5c:69:db:ee:f1:75:
dd:45:9d:bf:bd:f7:dd:c5:ea:59:fa:49:a9:99:6e:
78:1b:96:47:0f:9b:a0:b7:94:de:f6:73:ee:d1:55:
c3:5d:a6:f1:b2:c5:7e:2e:a2:7b:0d:dd:5e:9c:60:
d8:b7:5d:65:68:c9:4e:76:1f:e1:18:6e:ba:5c:94:
71:c9:ff:f6:3a:0e:de:f0:ba:26:3e:73:03:a3:14:
1c:a5:3d:72:f2:bc:e3:33:a8:93:7d:35:75:db:88:
50:a9:38:c7:83:84:d6:03:8f:56:42:fd:ed:20:4d:
57:e9:86:3a:28:b8:d8:59:45:52:45:cb:a7:e1:6d:
14:1c:81:0c:c5:14:85:69:da:8f:5d:72:4f:6a:7c:
0d:e1:4b:ab:6f:bf:1b:87:09:aa:9a:36:6f:7e:0d:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:FE:E8:C7:86:4A:41:6A:6A:38:8C:1F:02:6D:BD:1E:54:1E:AA
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:77:38:51:e8:3d:df:d8:83:b6:4d:ae:24:6d:26:e9:fb:
28:88:2d:49:6c:7f:cc:48:b5:81:b7:e2:b2:40:ec:2d:ea:f7:
9b:75:c6:27:6f:ca:a4:91:25:cd:6f:60:b2:5f:9b:c7:ea:6b:
9f:93:c1:e4:64:89:71:99:2e:13:84:34:ab:34:ce:94:99:b1:
12:8d:c3:0f:12:a8:3b:78:91:45:ee:d1:ca:c3:64:44:1a:71:
85:e2:96:c0:c8:bf:3b:50:d3:96:db:96:73:96:55:bc:de:56:
6e:2e:94:b1:3d:4f:df:66:fb:c7:61:0c:66:df:e6:71:13:8e:
eb:d0:17:4e:27:dc:d7:2b:a6:d3:56:0d:39:6e:5f:1c:e3:58:
64:03:bc:ee:e3:a2:b7:d6:be:72:da:4b:47:94:99:47:a6:07:
8e:94:9f:48:66:20:76:85:64:5e:2c:d6:0e:22:42:73:c7:6f:
17:a2:d3:eb:75:2c:00:8f:8e:c8:dc:15:62:75:2e:49:73:5a:
c6:83:b5:23:7b:88:f1:5f:5b:2c:a9:fe:2c:3b:bb:fe:35:3e:
4b:7c:00:5e:0a:48:ec:58:c5:ac:28:37:20:67:1e:04:2c:10:
aa:4b:fa:51:35:4a:a2:50:ab:17:e0:bd:d7:a1:3b:5c:19:a1:
ba:89:c5:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OojAbHmhoKqaYA76Acsi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk
NGZjNmEwHhcNMjYwNzIzMTEwMDIxWhcNMjYwNzI0MTEwMDIxWjAzMTEwLwYDVQQD
EyhiNjkxZmVlOGM3ODY0YTQxNmE2YTM4OGMxZjAyNmRiZDFlNTQxZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HVBbqpZ/ESn7eHNUe5cLvauvQvz
uDnpupHjeGjaLQwptOVGg0fFeS1vvFVICG+VdRitaU6/oeUdIg6CN6MmjPBJGLRN
dlGmbm2SQIB608nfBBb/jUAU+gP2yoDwaal+qJRcadvu8XXdRZ2/vffdxepZ+kmp
mW54G5ZHD5ugt5Te9nPu0VXDXabxssV+LqJ7Dd1enGDYt11laMlOdh/hGG66XJRx
yf/2Og7e8LomPnMDoxQcpT1y8rzjM6iTfTV124hQqTjHg4TWA49WQv3tIE1X6YY6
KLjYWUVSRcun4W0UHIEMxRSFadqPXXJPanwN4Uurb78bhwmqmjZvfg0saQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaR/ujHhkpBamo4jB8Cbb0eVB6qMB8GA1UdIwQY
MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt
NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi
LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTx3OFHo
Pd/Yg7ZNriRtJun7KIgtSWx/zEi1gbfiskDsLer3m3XGJ2/KpJElzW9gsl+bx+pr
n5PB5GSJcZkuE4Q0qzTOlJmxEo3DDxKoO3iRRe7RysNkRBpxheKWwMi/O1DTltuW
c5ZVvN5Wbi6UsT1P32b7x2EMZt/mcROO69AXTifc1yum01YNOW5fHONYZAO87uOi
t9a+ctpLR5SZR6YHjpSfSGYgdoVkXizWDiJCc8dvF6LT63UsAI+OyNwVYnUuSXNa
xoO1I3uI8V9bLKn+LDu7/jU+S3wAXgpI7FjFrCg3IGceBCwQqkv6UTVKolCrF+C9
16E7XBmhuonFnQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:28 2026 by rpki-client