Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: uLSm1RU2GEJV2ldvzmXy3ludTYCtltdwIIvf7lqaCnE=
Subject key identifier: 80:99:D3:29:A5:0D:70:1E:5B:60:EA:39:83:36:31:08:F5:57:1C:71
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019CE47F1121282DCBA4E238DFFB5824AF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0483
Signing time: Fri 13 Mar 2026 00:00:58 +0000
Manifest this update: Fri 13 Mar 2026 00:00:58 +0000
Manifest next update: Sat 14 Mar 2026 00:00:58 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: vsVKLzVZrDCFh0UTgW2Td3XS6NdIVW7X97ZLtQt7FpE=)
2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
3: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:11:21:28:2d:cb:a4:e2:38:df:fb:58:24:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Mar 13 00:00:58 2026 GMT
Not After : Mar 14 00:00:58 2026 GMT
Subject: CN=8099d329a50d701e5b60ea3983363108f5571c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:6f:0e:d9:9a:21:d9:32:0a:ea:a5:47:16:
6b:de:90:76:2e:a3:f1:c1:09:f1:8c:09:01:d9:8b:
05:92:b7:68:0d:b5:ed:ea:6e:2d:c6:0e:9d:a4:a1:
98:b6:d1:65:83:6d:7b:c4:3d:52:17:e4:e9:fe:8c:
12:a7:af:4b:21:a9:58:84:80:eb:86:35:df:75:ab:
83:af:db:d5:e2:7a:a0:51:8a:2f:62:f6:1b:c7:45:
ae:ab:02:30:3f:af:74:17:95:66:c9:b1:f2:55:08:
00:5f:f5:24:8f:76:64:09:84:b0:4f:97:9d:a8:f9:
1b:1c:78:f1:d6:bf:a2:56:7f:c3:df:e6:98:8c:9a:
5c:99:1a:92:03:20:8a:71:63:e4:a8:26:d2:75:4e:
70:5a:15:b2:db:6c:46:91:fb:54:74:a8:24:a3:56:
c0:8d:7f:e4:fa:af:00:e7:c3:9e:ed:90:d0:f0:cd:
3a:f7:b9:74:6d:66:e7:d5:6e:74:1d:92:89:8c:c3:
bb:03:9a:3e:7e:d2:53:49:b0:4f:d2:9f:ad:6e:4f:
a5:fa:5b:e1:9d:78:8c:32:02:d8:08:f2:cd:85:fd:
9e:cb:fb:b6:20:4c:fb:e7:cd:5b:a5:d3:c1:77:6b:
40:1c:84:ac:6c:7e:f7:97:e9:d1:df:e4:10:f1:3d:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:D3:29:A5:0D:70:1E:5B:60:EA:39:83:36:31:08:F5:57:1C:71
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d1:f6:9e:8a:21:06:ce:9b:55:7f:e5:58:85:fa:15:bc:97:
63:81:ce:18:f8:47:49:98:6f:88:87:ce:d6:d8:2e:a8:e2:cc:
a8:5c:97:a9:ef:a7:ed:76:cb:81:d4:19:4f:ae:ff:2c:d1:fb:
63:ff:19:86:1e:3a:6f:cb:8b:07:95:c3:43:df:ab:db:3a:27:
51:45:c9:e8:a4:08:f5:65:c4:84:a8:0e:1a:00:72:f4:88:51:
34:fa:5d:af:42:98:41:19:dc:88:02:40:79:26:a2:60:27:df:
f3:35:85:b9:0c:8a:0f:a6:86:34:90:fe:c9:92:8c:41:15:cb:
0a:6a:6a:ce:b5:2b:a8:ad:d4:06:d2:86:39:c0:47:7a:bb:33:
63:15:91:04:70:4d:65:80:11:d8:a6:0a:d6:91:a1:75:b9:13:
b3:e9:ce:b3:98:04:4d:8d:85:cf:40:d3:ff:ff:65:b6:1c:8b:
1f:76:48:96:fc:07:e8:b1:69:49:4e:97:51:74:cb:b6:c0:ee:
93:bf:24:59:e5:1f:5c:d7:eb:95:55:8f:f5:da:37:da:2b:aa:
35:c5:5b:7a:92:ad:c0:49:31:f2:fd:60:f8:e5:fd:7c:e0:5c:
06:fc:34:ae:f5:f3:d2:cc:6e:4b:9d:bb:f1:71:78:3b:06:43:
0a:09:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:35 2026 by rpki-client