Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: c1p5oA9wGejgqM14xNjFexnweyeuyNhzjphsNrf7wD4=
Subject key identifier: 20:D5:0C:25:E3:4B:92:95:B2:4C:64:2A:55:44:5A:1D:D8:58:5E:94
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 01A03E601804ED43950234CF290B48A072FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1A24
Signing time: Wed 26 Aug 2026 14:01:20 +0000
Manifest this update: Wed 26 Aug 2026 14:01:20 +0000
Manifest next update: Thu 27 Aug 2026 14:01:20 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: ILfCc+NhrabDqvFNEhn9muuNqT/bersv2VKO6vDS4as=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:18:04:ed:43:95:02:34:cf:29:0b:48:a0:72:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Aug 26 14:01:20 2026 GMT
Not After : Aug 27 14:01:20 2026 GMT
Subject: CN=20d50c25e34b9295b24c642a55445a1dd8585e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:36:33:b3:b4:c2:10:7e:fa:3a:1e:9b:ad:
67:30:5a:03:ca:7c:ac:7f:7f:a4:c3:c3:e5:3c:78:
93:cd:ef:ae:6a:43:7e:d4:1e:fe:f0:43:8c:bc:89:
4c:d4:ff:af:f3:43:a0:86:2a:af:cb:8a:e9:5d:cb:
99:a1:c1:53:d9:46:ed:08:ba:c4:0e:c7:0d:3b:04:
b6:98:eb:57:f9:1e:e8:36:15:bd:03:8e:48:50:95:
c7:59:a4:97:5e:f4:b8:ac:2d:70:ed:00:0b:42:5e:
85:79:47:9b:03:68:65:8f:05:0a:ed:73:ce:f3:be:
bc:7d:2f:33:89:43:6b:84:c6:cf:d6:ef:46:41:21:
e5:1e:21:73:e2:f6:61:05:09:3b:80:f3:26:03:5b:
07:ec:d9:4e:42:7e:c2:33:fe:d7:c0:8e:4f:15:fc:
23:90:66:b9:a8:77:2b:e4:d5:4c:b5:31:67:24:5c:
67:2e:56:87:ce:4a:b1:fa:b2:fc:08:a4:48:f2:ef:
5f:a9:d3:0c:e4:52:bf:ca:81:b7:ce:03:63:74:6e:
47:a7:90:a0:08:76:b0:28:de:eb:7d:2d:6d:76:30:
89:9b:bc:c4:67:1a:1e:6a:21:7c:6a:c4:c1:71:96:
02:0f:48:51:23:92:e4:45:81:40:1a:30:87:9f:98:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:0C:25:E3:4B:92:95:B2:4C:64:2A:55:44:5A:1D:D8:58:5E:94
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:37:32:ce:c7:e7:f9:84:72:46:e1:38:d8:56:54:c6:7b:
d2:31:8b:86:e0:04:d3:3f:87:60:66:83:0a:9b:7d:c4:f8:8d:
9c:21:0b:a2:16:96:e0:e2:73:18:ed:9c:d0:30:53:9f:a5:4e:
76:fd:45:ec:2c:a6:b4:dc:68:0c:33:2a:69:1e:f6:4c:34:b5:
e2:50:d7:99:c8:a8:ef:fb:19:82:6a:21:c3:39:4e:b2:d9:1f:
02:ae:0b:96:ac:e7:a4:15:da:4b:23:12:e6:0c:dc:7b:3e:d7:
61:82:e9:a9:77:e8:12:07:b0:1d:06:72:c2:75:d6:e4:76:43:
26:14:6a:21:80:86:cd:b7:22:a6:7f:66:64:ae:9b:24:1d:6a:
3d:10:af:ae:fc:88:a7:bb:bd:2e:25:e0:f8:6a:44:a4:99:2b:
55:13:5f:6a:12:c1:6d:e5:a9:95:49:56:37:65:22:88:d5:2e:
3f:fb:6b:f9:df:79:dc:c4:e8:f8:88:a4:cf:c4:88:a1:b7:89:
b3:91:55:78:e4:f2:2d:84:1a:e6:f4:3c:b6:f8:c0:ec:00:cc:
a6:37:7e:b2:15:93:bf:4d:f8:57:85:aa:90:d6:1a:64:76:ce:
33:aa:fa:6e:fb:79:24:75:52:30:ec:6e:1b:c2:9f:2e:65:7a:
87:c9:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:38 2026 by rpki-client