Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: XFJP/CnirgcYfM/imDOYwjFvweLzXuB/qgOQZNY5q2I=
Subject key identifier: 66:D6:43:92:86:24:A4:1A:1F:0D:40:F0:27:4B:BE:92:61:81:D2:F2
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 019D39AE6C43F94DCA7F197B18AEC69BA458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: brD+Eg7bZy8muvhMoFzP1u2YSqZV+FurL06pZAweYw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6c:43:f9:4d:ca:7f:19:7b:18:ae:c6:9b:a4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=66d643928624a41a1f0d40f0274bbe926181d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:ab:98:f2:51:1e:46:1e:4c:2e:b1:4c:bc:
21:58:76:02:dd:ac:5e:78:6d:2c:36:a5:bc:98:98:
f5:db:1a:ce:d8:be:5d:cc:96:4a:2b:cc:57:13:b7:
a9:0b:ce:01:fb:47:5d:62:77:f8:0b:34:82:a6:ae:
43:df:84:af:63:14:3d:f9:26:80:19:65:27:18:b3:
87:a2:4b:17:90:d4:41:14:2f:da:fc:e4:db:42:df:
e5:c5:4f:33:02:fa:9c:d4:36:ba:b9:9b:2a:63:c4:
8a:2d:82:68:7f:c0:40:5c:8b:70:cf:d0:43:e9:31:
f4:d5:ff:9a:ef:4e:6c:6e:57:42:da:dd:43:7d:23:
06:0a:c2:fd:43:6e:54:b7:7a:bc:96:48:38:7d:65:
f0:3a:91:df:58:84:54:1a:1b:0f:50:cc:b1:a5:47:
06:e0:10:30:51:df:72:5a:e3:37:ad:c8:9e:f6:bc:
d8:42:f5:d3:29:96:e5:6a:9a:af:e3:5e:e7:0d:ff:
e9:d8:c8:83:f8:e3:60:be:5a:f3:80:4f:ce:82:95:
98:82:b4:24:ea:3e:65:4b:e5:c2:45:86:b5:0d:54:
7a:d5:67:97:81:b2:3d:ed:fb:b7:2f:ac:95:09:9b:
3c:cf:1b:05:d5:f1:38:e0:e2:e1:f3:5b:f8:a9:3e:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:43:92:86:24:A4:1A:1F:0D:40:F0:27:4B:BE:92:61:81:D2:F2
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:02:7a:88:a4:17:36:a6:de:a2:82:61:9a:4d:7a:83:de:
3b:bc:32:af:48:f7:cc:df:5f:a4:4d:5b:fe:23:9c:f4:ac:a3:
8b:95:f7:08:4a:5b:05:dc:a4:68:32:b4:24:18:d6:8e:c0:4f:
90:de:d1:ed:af:0d:fa:62:ed:c4:b1:10:e0:21:3e:bc:32:b1:
e4:e6:ca:11:fa:c4:53:36:97:f2:80:94:de:13:24:3f:76:78:
c6:3b:b6:dd:d4:99:c6:c0:d6:fd:75:3a:d6:7c:09:87:cb:38:
33:37:db:06:d2:d3:6a:f7:35:81:33:ea:40:a3:43:55:09:7b:
11:7a:9b:4e:93:dc:bb:83:ca:ee:3d:47:44:95:16:cd:ee:87:
ad:b0:d1:e1:41:58:ec:86:5a:16:c6:f9:7b:2a:3f:86:4e:db:
11:cf:50:e7:d7:8d:2c:a0:80:c4:c8:2a:ed:7e:8a:da:8b:c1:
c5:2d:88:ae:ac:88:b2:99:b8:62:72:70:e3:61:2a:3f:ac:ff:
d7:e3:65:a2:91:f0:e7:df:35:f0:fb:56:1a:ab:bd:39:9b:70:
99:02:2f:e0:08:f6:30:a6:72:b8:be:9e:81:4c:1c:e1:d5:6a:
91:5e:1a:fd:cd:8a:7a:22:00:80:78:ce:ae:b9:99:19:e8:b0:
6a:d4:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:59 2026 by rpki-client