Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: VV3dKYpT2DSEkHqp1vQE1kxy/y0aRD5MNzT1YtzvZ3o=
Subject key identifier: 24:79:DC:7D:76:27:D9:B7:1A:99:A2:EC:AB:04:8A:D5:57:D4:7E:34
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 019D270403CEDAA434D1DA1EA6640F754B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 0872
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: q6aa+zXNh/yeIA6CBkdJT7voZKmwUjLKFK/WJxcC04g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:03:ce:da:a4:34:d1:da:1e:a6:64:0f:75:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=2479dc7d7627d9b71a99a2ecab048ad557d47e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:b0:64:d3:42:20:5a:8e:e5:56:e9:60:80:
e8:ba:5a:22:cd:79:35:5f:9e:97:5e:d0:83:cc:f4:
ea:2a:73:29:78:52:37:76:c7:91:95:fa:21:3d:45:
23:ce:28:74:14:ab:5b:3f:8e:e5:b9:0e:b9:9a:15:
14:b8:fa:66:41:8e:44:ec:44:a5:16:a8:02:4a:03:
81:f9:6a:69:92:ca:71:ac:d3:69:f4:52:4f:ad:91:
6f:33:42:43:5e:9b:8b:fc:48:5e:b9:b9:c6:2c:e5:
d3:fb:30:66:d3:2f:d5:e0:11:23:8c:44:b8:be:66:
0a:d1:1a:34:e4:0f:2b:94:99:ca:31:5c:b3:50:4e:
b9:d8:be:06:cc:5e:6e:05:8c:f5:38:50:a2:37:58:
e1:0b:30:4a:b6:13:24:1b:1b:a4:47:3b:60:f6:b6:
b9:9f:87:df:32:fd:5c:fb:c3:54:3b:54:15:9d:1d:
4c:38:60:48:34:43:80:d3:5e:46:7b:fd:0c:91:80:
8f:65:00:bf:46:9e:93:a0:a8:83:14:70:06:bd:93:
dc:b3:e1:67:b5:91:ef:69:bf:bc:4d:c6:ae:5d:45:
73:33:13:20:97:02:a0:78:20:85:9c:7c:1f:47:da:
25:15:51:42:94:8e:2d:b4:91:9f:f1:83:07:da:d8:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:DC:7D:76:27:D9:B7:1A:99:A2:EC:AB:04:8A:D5:57:D4:7E:34
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e8:d4:a9:16:c7:a7:48:45:08:51:ae:8d:0d:b4:f2:70:05:
ae:3a:da:ae:6a:2a:58:af:04:c3:25:ea:72:8f:8f:72:a7:8e:
f3:98:90:ab:7c:53:2e:fe:ef:8d:6a:18:17:e5:d9:b8:a6:0a:
b2:97:e6:2a:2f:73:07:c6:03:b0:e7:74:d4:27:3d:24:23:74:
2f:b1:1b:d0:02:9d:8f:0c:ba:e1:e1:2b:ab:23:b2:eb:a7:ff:
cc:00:18:8c:99:1a:e9:87:19:31:ed:b1:d5:65:af:8b:5d:9f:
17:2f:b8:23:16:59:82:75:38:d8:31:e1:15:b6:da:6e:e1:bc:
f5:ca:12:bf:1e:f6:d9:28:76:5e:fc:bc:3c:d3:ed:f2:cc:03:
03:11:9b:f1:03:fd:0f:40:70:57:a6:81:fd:da:0d:c3:5d:e4:
3a:65:cc:3a:7e:36:43:a6:7f:1e:8b:28:61:2c:59:e6:75:88:
7d:1c:45:50:6a:60:2e:dd:7d:f4:52:ad:89:5a:ba:08:9a:79:
3f:77:42:39:8a:cc:a9:eb:06:d6:4d:40:6d:36:07:da:05:ba:
28:22:29:ad:6c:f9:d3:43:b4:5b:2f:aa:53:b4:84:56:94:be:
e3:ff:da:d9:38:32:d6:b8:3d:c6:c3:dc:50:d4:e9:8e:b0:47:
83:77:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:42 2026 by rpki-client