Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: S5SPEIUEcTHXNIKpdYxQcDHn/YhmDau7lZRZqY9s2z0=
Subject key identifier: AA:C2:0C:A2:45:61:F9:D3:37:C8:95:20:CC:DD:B4:F1:EF:40:4E:90
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019DD0BEF757094E83D750C6555686F59C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 04FE
Signing time: Mon 27 Apr 2026 21:01:09 +0000
Manifest this update: Mon 27 Apr 2026 21:01:09 +0000
Manifest next update: Tue 28 Apr 2026 21:01:09 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: 1WSkbLi9MG96iwHiL7Wg4USIbdHXSIAnS8YwYkmcCQ8=)
2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
3: K3ua2RrqGcbdB2SIo8hldBAl3_E.roa (hash: 3r2KWl0kTZ/mtXETApfCg3qAcK7g4mRubdUIUTx0FZU=)
4: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:f7:57:09:4e:83:d7:50:c6:55:56:86:f5:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Apr 27 21:01:09 2026 GMT
Not After : Apr 28 21:01:09 2026 GMT
Subject: CN=aac20ca24561f9d337c89520ccddb4f1ef404e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:32:f6:b9:da:f3:e1:91:fd:99:9b:7a:42:
cd:01:9c:ad:15:64:0d:b3:e7:2b:7b:31:b4:7c:cb:
69:ae:47:73:06:30:6e:01:01:ba:52:e5:05:49:79:
0d:18:67:2e:df:6c:04:79:c1:cc:b5:1b:54:c8:38:
85:ed:ff:73:d2:a0:5a:46:e5:3c:aa:47:da:8e:e8:
6b:18:c3:13:79:9d:c5:4a:41:67:42:e1:37:dd:84:
2f:aa:46:ca:cb:4c:e5:22:b5:80:bf:28:71:5b:87:
c6:a4:a0:c2:ff:0d:13:91:17:4d:fd:04:41:ca:58:
b3:50:01:7b:bf:a5:df:5a:f7:d0:89:7e:da:64:12:
a8:cf:fe:61:97:d4:29:6a:84:6c:12:f4:1d:e2:b3:
40:e3:02:b4:23:3e:89:12:2b:0a:fb:28:a2:d9:e8:
4d:e9:e1:ac:24:37:2e:a8:a0:af:34:4a:d8:ae:58:
0a:49:99:fd:ac:13:4c:7f:86:ee:a6:16:bf:ff:1a:
68:e1:95:2f:c5:9b:6a:f5:f9:d8:20:36:18:5d:45:
5c:7f:b8:b5:f7:31:10:bd:59:43:45:13:82:64:3f:
e2:4a:e3:0b:b9:fa:4f:93:70:7f:04:af:f2:a1:3d:
9b:a1:03:f9:dc:2b:f3:a6:59:f6:60:d1:9f:39:23:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:0C:A2:45:61:F9:D3:37:C8:95:20:CC:DD:B4:F1:EF:40:4E:90
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4d:32:58:0c:62:be:bd:8a:7e:04:d3:46:31:fb:34:b1:0c:
d4:cf:67:2f:42:73:ee:e6:f0:eb:56:05:e4:d2:51:69:f3:9a:
7b:ee:72:6f:38:d0:79:19:e0:6c:28:83:7d:a7:44:b1:38:17:
63:03:96:ca:00:27:1e:e4:80:7d:0c:72:a5:74:fe:4d:13:06:
72:91:38:95:19:4f:46:cf:c5:22:d8:7b:11:3c:97:d8:46:05:
06:05:3c:aa:0b:f8:52:ba:46:65:41:00:d0:fd:67:e3:ab:c8:
14:30:63:6c:1c:ee:da:7c:c5:a3:40:00:10:d6:47:be:5d:18:
04:95:59:91:f9:d4:ca:43:0c:1b:65:3c:3a:e2:47:45:e2:70:
8e:fc:22:a1:6f:dd:00:9c:8d:a5:38:b9:d2:e8:9f:cd:19:17:
ff:fc:e3:d5:5e:e0:4c:07:e1:d6:37:8c:49:9a:fd:a2:dc:37:
b6:8f:8f:23:83:21:d2:4b:34:57:a8:13:f5:0e:00:33:0b:61:
53:a1:bf:69:3a:fd:26:94:94:4b:d5:eb:15:1f:0a:03:75:9b:
f6:3d:d5:ea:56:2c:4a:53:48:29:f5:51:d8:bf:09:b3:ba:77:
1b:6f:59:b8:6b:9b:4a:17:94:7c:b3:15:36:99:89:c8:f9:f0:
83:48:f4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QvvdXCU6D11DGVVaG9ZycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh
MjQzZTkwHhcNMjYwNDI3MjEwMTA5WhcNMjYwNDI4MjEwMTA5WjAzMTEwLwYDVQQD
EyhhYWMyMGNhMjQ1NjFmOWQzMzdjODk1MjBjY2RkYjRmMWVmNDA0ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdMy9rna8+GR/ZmbekLNAZytFWQN
s+crezG0fMtprkdzBjBuAQG6UuUFSXkNGGcu32wEecHMtRtUyDiF7f9z0qBaRuU8
qkfajuhrGMMTeZ3FSkFnQuE33YQvqkbKy0zlIrWAvyhxW4fGpKDC/w0TkRdN/QRB
ylizUAF7v6XfWvfQiX7aZBKoz/5hl9QpaoRsEvQd4rNA4wK0Iz6JEisK+yii2ehN
6eGsJDcuqKCvNErYrlgKSZn9rBNMf4bupha//xpo4ZUvxZtq9fnYIDYYXUVcf7i1
9zEQvVlDRROCZD/iSuMLufpPk3B/BK/yoT2boQP53Cvzpln2YNGfOSPLQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrCDKJFYfnTN8iVIMzdtPHvQE6QMB8GA1UdIwQY
MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt
ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi
LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqk0yWAxi
vr2KfgTTRjH7NLEM1M9nL0Jz7ubw61YF5NJRafOae+5ybzjQeRngbCiDfadEsTgX
YwOWygAnHuSAfQxypXT+TRMGcpE4lRlPRs/FIth7ETyX2EYFBgU8qgv4UrpGZUEA
0P1n46vIFDBjbBzu2nzFo0AAENZHvl0YBJVZkfnUykMMG2U8OuJHReJwjvwioW/d
AJyNpTi50uifzRkX//zj1V7gTAfh1jeMSZr9otw3to+PI4Mh0ks0V6gT9Q4AMwth
U6G/aTr9JpSUS9XrFR8KA3Wb9j3V6lYsSlNIKfVR2L8Js7p3G29ZuGubSheUfLMV
NpmJyPnwg0j0HQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:09 2026 by rpki-client