Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: sSvKEvTGaE8CitPjm6SqmUrZvxXhXxgVighV59PjZro=
Subject key identifier: A9:C7:B6:3E:58:D6:41:FB:36:4F:18:88:71:C9:D1:61:C1:BF:CC:DA
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019F111BC6A05B3206F22AF11CFE1B043B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 02:01:00 +0000
Manifest this update: Mon 29 Jun 2026 02:01:00 +0000
Manifest next update: Tue 30 Jun 2026 02:01:00 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: hSt1q852ptruN6QFVHu6W/KUQVMS6vDO9t1/5MsqMgg=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:c6:a0:5b:32:06:f2:2a:f1:1c:fe:1b:04:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jun 29 02:01:00 2026 GMT
Not After : Jun 30 02:01:00 2026 GMT
Subject: CN=a9c7b63e58d641fb364f188871c9d161c1bfccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:49:f1:a2:d0:a4:e7:e9:58:b5:60:25:c1:
bf:14:01:09:39:6f:f5:a3:55:2f:42:61:9b:b2:46:
e8:42:67:1a:7d:55:d1:51:6e:8d:bb:26:96:30:16:
b6:a4:3d:cc:1d:db:16:a8:c5:3f:80:d7:67:68:47:
fe:3f:9e:f3:2f:ca:0f:67:3e:d3:c0:20:d7:61:e9:
06:cb:73:af:52:48:2e:ca:f2:bc:25:fc:e7:19:6a:
e4:f3:8e:02:6d:7e:0d:6c:49:7a:0e:05:2c:d6:97:
6d:f6:c2:b2:46:19:15:2e:65:0b:c4:33:d8:0b:e4:
3c:83:0a:4e:c5:26:56:c7:9b:fe:09:79:bf:27:d8:
17:9a:fc:1a:1b:de:6a:9c:b8:6f:d6:c2:bd:cb:ff:
39:8e:92:3d:c2:c3:45:ef:23:e7:5b:61:2a:a5:18:
0a:cd:37:28:6b:31:47:41:52:2d:7f:74:9b:ef:42:
8a:e4:37:9b:44:7b:d5:0c:4e:c6:05:64:fb:bc:ea:
55:48:aa:e1:a3:13:ab:a9:ec:10:db:c0:89:79:32:
36:c4:9a:61:75:19:6b:81:2b:c4:36:49:c1:2d:0d:
ac:79:30:4d:31:a2:08:23:b9:38:1e:5c:c9:37:21:
81:97:74:2c:37:f5:89:0c:8b:75:ad:bc:47:9a:ad:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:B6:3E:58:D6:41:FB:36:4F:18:88:71:C9:D1:61:C1:BF:CC:DA
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:90:64:a3:5e:21:6b:22:9f:1f:0c:68:07:0c:f5:61:65:6c:
09:84:74:ec:af:f3:1d:27:02:d7:b3:bb:3a:f8:66:a9:bc:8b:
b9:e3:95:a9:e8:66:6b:82:f2:35:b0:6e:39:0d:f9:f2:32:63:
ba:9e:e5:ea:57:06:60:51:3d:1b:2b:9f:0e:a9:c3:3a:0c:e6:
7c:1a:ab:6a:5d:ad:54:8b:e2:ce:24:31:f7:39:4b:4c:28:23:
da:d4:a3:95:79:09:ad:5d:16:c8:c0:bc:59:d5:96:34:44:13:
7d:f4:73:3d:d5:7f:fa:47:f3:72:0f:6d:da:4c:c4:cd:e3:c5:
89:50:95:b3:8e:30:f1:77:ea:76:00:d3:8f:ca:eb:b9:4c:5c:
51:40:30:05:38:9f:1f:0e:10:79:6e:65:12:5b:6b:db:16:42:
f4:8f:f4:4f:95:72:a6:09:60:e1:96:6d:99:47:1e:76:f9:a7:
8f:8e:a0:7f:4e:4e:fc:25:c9:a3:5e:62:ad:08:8d:7b:d4:e7:
3c:61:38:4c:ca:04:4b:1a:1a:cc:63:9b:88:f1:95:c8:87:24:
ea:59:e8:ae:75:26:81:48:3d:49:28:e4:c6:df:17:56:09:2c:
ae:1d:19:59:c5:57:60:7d:f0:86:d7:25:e0:8a:dd:54:e7:12:
f5:5f:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:00 2026 by rpki-client