Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 5xJIZFRgBv6OBStCxkwLGoeCdk8XgG4CR7AkwYCugh4=
Subject key identifier: 68:6A:86:53:69:49:EB:F5:8A:C7:E8:1B:20:D3:AE:F9:AD:71:A0:BB
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019D37F77963830B4649BADA988CD9A03176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: Iq+ZmdOVehjQNqwQsbSGXFZg01kk+uXQ1+jyMksFjFU=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:79:63:83:0b:46:49:ba:da:98:8c:d9:a0:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=686a86536949ebf58ac7e81b20d3aef9ad71a0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:ed:ed:4e:14:e1:81:74:57:f2:f5:31:26:
30:7d:0f:a1:d2:a0:a0:42:40:38:7c:93:10:b0:60:
fc:eb:d2:ff:72:6c:70:03:d6:07:6e:1b:c6:4d:ba:
8f:f3:4f:43:db:d5:18:93:93:c3:9d:cc:98:0d:80:
a0:c8:76:a0:7f:8b:93:7c:92:69:84:41:b4:92:a0:
eb:77:50:9a:a2:8a:2a:b4:1c:76:06:84:fa:da:57:
06:73:fe:39:7d:3f:72:48:30:4e:51:f3:76:82:0d:
c4:50:fe:45:58:d9:98:da:6e:c6:4b:6f:e3:01:f7:
65:65:ff:b2:21:53:26:44:8b:35:6d:60:a8:f2:3c:
a1:3c:72:bf:e9:fa:9b:93:d2:a4:c6:cd:06:a1:a3:
55:69:cb:17:ef:5f:28:f7:bf:d3:36:d0:04:96:27:
af:e5:d7:6b:26:cd:a4:94:fa:fd:86:71:3b:42:e0:
a7:15:95:87:29:10:1a:0e:29:ea:c7:1b:23:8a:e2:
f6:b8:b3:8f:4a:03:b4:9d:7d:f1:af:67:ad:ec:f9:
f2:1b:63:1a:88:d2:02:20:bd:49:b4:98:b3:52:3a:
a5:42:17:30:d7:0f:41:d5:69:f5:ea:e5:cc:f2:19:
12:37:5e:18:8f:64:4b:f6:8e:84:ca:a3:7f:b9:e5:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:86:53:69:49:EB:F5:8A:C7:E8:1B:20:D3:AE:F9:AD:71:A0:BB
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:bc:c7:70:6e:74:02:6c:d1:06:cc:49:70:b5:de:ac:d0:
1b:56:6c:ad:82:18:b5:6e:4e:f3:07:cd:6f:f1:78:91:b2:3b:
fe:ff:41:95:00:db:75:22:82:aa:b7:0f:c5:ce:94:d2:37:ab:
a0:94:4c:d7:37:4c:eb:f0:fa:4b:8b:2e:8e:c7:a1:a4:eb:0d:
73:8e:dd:dc:92:ae:65:7d:49:df:1e:59:a0:33:87:da:a4:7d:
f8:60:c9:dc:68:92:09:c3:95:26:a9:aa:0c:62:32:82:38:02:
45:7f:8d:c9:00:85:86:b4:6f:90:fd:44:98:0f:6b:d4:53:ed:
32:fc:f0:0b:36:54:5d:50:30:5c:8b:2c:24:7a:77:c9:04:45:
2f:ee:6e:15:96:55:d4:3a:43:14:e9:88:eb:3e:7f:fe:15:b3:
21:5f:9d:09:f4:07:0c:82:bb:37:42:68:07:4c:56:12:c0:60:
37:2b:7f:2c:10:2b:51:05:42:3b:38:c2:96:51:d6:4c:33:45:
6b:09:42:4e:6c:12:94:73:77:2d:3e:9e:f9:32:08:0e:70:1d:
d5:0f:cf:41:d3:79:57:e5:7e:96:51:88:f2:d9:78:82:8a:6c:
eb:7c:32:65:a1:da:88:97:15:57:2c:e8:93:5b:23:8b:60:d3:
3a:c4:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:40 2026 by rpki-client