Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: 7ifVJRCMNkA+KkDnyLfvPD8K6L28UiFRcJQ9BY6J1bY=
Subject key identifier: 78:C1:38:4A:58:48:62:54:4F:80:2B:78:4C:82:49:FA:E7:F8:88:BD
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 019D3866537EFEBE3111EE0EB6DD9F42DC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 087B
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: qHFePX/hi1AYbpGtfc+qVNFply+SjEOhGgrCdTCqGQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:53:7e:fe:be:31:11:ee:0e:b6:dd:9f:42:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=78c1384a584862544f802b784c8249fae7f888bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:70:b6:07:2f:3e:77:7c:63:74:c7:d5:07:
9e:26:51:d5:5a:8c:27:16:6f:ab:52:0b:f8:23:d3:
21:cc:6c:5e:16:bb:9f:a3:19:06:a3:aa:39:c9:a0:
88:b0:64:bd:a5:95:14:9b:6c:b6:56:6a:39:1e:c4:
37:3b:7a:30:d4:34:01:1d:fb:80:67:f9:7c:3a:4e:
6c:53:26:ec:75:51:51:7c:76:92:dd:5a:f0:f3:c5:
65:19:7f:cd:5d:39:2b:90:bf:3c:8a:95:6f:f7:a5:
01:db:85:6d:67:d7:2e:e9:e5:a7:a2:00:c4:ae:37:
0f:ae:64:cd:e4:cd:f9:01:d7:a8:64:44:8f:f7:27:
e6:4e:0b:91:bd:4d:f8:88:c0:cc:b3:02:47:0a:f2:
b4:6c:ec:96:24:fd:36:b8:8b:b6:8e:ef:55:e0:a8:
cf:80:18:25:ff:5f:94:40:1f:65:b0:e5:ec:e2:40:
04:b2:5f:fc:50:74:d1:08:4e:b4:52:a6:52:f2:8b:
e8:30:8f:07:8c:8a:ae:49:bc:9e:60:4c:e2:88:bc:
54:99:8f:e6:4b:8c:67:1a:67:3b:6a:2e:5a:22:40:
31:0f:2c:a4:92:03:55:73:3d:df:55:35:c6:05:54:
66:c7:a8:68:a5:2e:e1:7c:b6:c8:4d:55:93:ad:29:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:38:4A:58:48:62:54:4F:80:2B:78:4C:82:49:FA:E7:F8:88:BD
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:38:38:66:47:87:67:a6:37:5a:66:92:86:73:81:b5:1d:
d7:c7:66:10:8f:b5:54:21:5b:a0:fc:ea:07:fe:70:23:86:5b:
f5:c9:7b:32:b8:1a:0c:36:2d:4e:f4:de:ac:4b:9a:69:43:ac:
19:3d:f4:1e:a0:a3:06:4b:40:ee:4f:2d:8d:d9:e9:5f:b0:d3:
9a:18:4b:0b:f2:f5:c8:a1:70:ae:15:c3:7f:5e:c4:83:c5:77:
d3:2f:e0:7f:43:ae:c0:02:68:82:39:70:46:a4:b3:a1:77:57:
0b:96:08:90:ab:92:65:0e:f7:b4:74:46:2a:b1:24:ff:fc:ec:
c5:49:59:e5:ea:7f:a7:2e:d6:f2:e1:1c:05:63:6b:ff:98:f3:
77:84:71:46:08:c5:ea:cc:51:80:31:aa:2a:23:1b:16:34:e3:
93:d2:f7:d5:a0:85:7b:b0:e2:8d:32:16:62:89:83:01:e6:7e:
e2:cc:8d:9a:fa:87:04:26:15:59:44:47:2e:6b:73:ae:3d:6c:
c4:fd:11:35:b7:03:cb:98:8e:f4:66:68:de:10:16:2a:da:77:
a8:ae:0d:09:87:d3:17:58:a6:7a:19:f0:f4:b2:11:2d:b4:78:
fe:10:a1:99:08:88:b8:e8:ff:9a:53:3a:d0:cc:3b:1d:9f:6a:
97:2c:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:08 2026 by rpki-client