Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 8k/k+A0flt+SpL4yQGMb3TRMkEjg6wQc3Bgo8sTilxg=
Subject key identifier: 49:02:A6:77:57:F2:B1:FA:50:78:C3:D9:04:63:51:BB:25:63:9C:08
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019E1DC7A789DD5FAA632A8E400D046F20CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 20:01:24 +0000
Manifest this update: Tue 12 May 2026 20:01:24 +0000
Manifest next update: Wed 13 May 2026 20:01:24 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: 4y8NWFNkBhYLAgCseOqPg2UfW+9oe+oiCtpoc9ufouU=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a7:89:dd:5f:aa:63:2a:8e:40:0d:04:6f:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: May 12 20:01:24 2026 GMT
Not After : May 13 20:01:24 2026 GMT
Subject: CN=4902a67757f2b1fa5078c3d9046351bb25639c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:11:38:fd:1c:43:46:fb:e1:52:5f:03:20:
72:f2:b4:ba:a3:9f:15:75:55:4e:2c:98:f2:00:ba:
69:06:6a:d1:b0:e7:ca:62:5f:ea:79:42:11:3a:75:
0c:e0:93:2a:69:b5:14:1d:88:67:22:8d:30:44:cf:
41:d3:8f:17:39:60:2d:19:5e:6e:0b:1d:7b:10:7f:
3b:a5:12:d5:9d:ab:29:de:4d:c5:de:e1:c2:d0:a7:
87:12:70:39:e9:89:08:66:ab:93:46:72:0d:de:94:
67:ad:cd:bb:36:52:2d:a4:40:84:23:87:41:bc:1e:
bb:49:d4:c3:c3:43:da:55:38:8c:50:4f:70:df:78:
5b:b9:63:e2:10:00:48:48:7b:66:0a:93:30:9c:b2:
82:8f:5f:7b:4d:04:e7:37:7b:4a:98:c3:27:d7:38:
de:d5:c1:8e:b9:eb:ab:05:3e:14:ac:e4:b8:96:87:
a9:ba:af:05:2c:da:d0:63:78:8a:ed:69:73:4e:6a:
ef:8c:8c:be:9b:dc:42:90:d2:c1:da:be:ac:18:0b:
68:c5:14:32:e9:02:28:de:aa:45:88:fa:16:b8:1f:
42:a8:f8:2a:17:e6:89:55:2a:65:ff:4d:a2:1c:3a:
f7:d0:46:86:10:aa:d5:92:af:8b:a9:c9:e8:f6:a9:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:A6:77:57:F2:B1:FA:50:78:C3:D9:04:63:51:BB:25:63:9C:08
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:56:e9:0e:49:a8:90:8f:0b:06:c3:c5:8d:f3:04:7c:28:5a:
8c:5e:f7:49:b1:01:83:b8:93:35:8b:01:39:82:38:91:76:fd:
9f:23:f1:12:99:0d:8a:48:d4:48:19:e3:f3:dc:72:33:a7:f2:
a4:a0:0e:fc:a3:dd:8d:57:3a:28:cb:e8:db:a1:43:2f:0f:71:
52:14:32:8e:fb:e1:0f:0a:56:ee:f9:bf:5b:56:bf:ab:67:88:
d6:40:e0:b7:b4:55:a3:49:1f:bf:a6:6b:3b:d2:5a:94:47:03:
c3:91:ca:31:96:0e:3c:8c:14:d4:be:1c:1e:77:f5:99:e1:4d:
e2:73:05:f8:ab:7f:30:a2:c1:ec:e4:cd:88:01:da:fb:11:dd:
31:d3:e1:02:2a:35:e0:b0:af:53:16:2e:c2:a1:a4:83:ef:53:
8a:17:d8:2d:c1:6a:c8:f3:8e:d8:52:0a:f4:db:6a:b7:63:fa:
8f:11:d4:e9:98:1a:e8:54:bc:8d:e0:02:5f:ec:58:65:9f:65:
88:75:43:bd:bd:4f:f0:e1:8b:cc:01:14:2d:d7:f0:2c:2d:7b:
9c:10:49:de:e5:9a:43:8c:36:47:fa:63:c8:1b:cb:01:a5:ab:
fd:49:64:91:27:92:8b:f2:6b:7d:a7:d5:d4:5b:8c:f2:9e:97:
21:41:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:46 2026 by rpki-client