Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: xiBNrbe8m9WHTMASb6N+xEr3NJzt1yXcy3j3jEe3wx8=
Subject key identifier: 86:BF:67:68:24:5F:03:EA:9C:32:D6:1F:09:4B:BD:1B:6A:4C:D4:BF
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 019CADC7AE332EFC058C6484A0E7091B0B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 16E2
Signing time: Mon 02 Mar 2026 09:01:10 +0000
Manifest this update: Mon 02 Mar 2026 09:01:10 +0000
Manifest next update: Tue 03 Mar 2026 09:01:10 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: P7GYPBLUItWcNKZJV5rQT2zA0Cmm44lwtSkc3qJGHto=)
2: JkUDr7vH6bEJKoPEB2K_5RQGMfQ.roa (hash: kYn3aZZS3X4+BpeBTLyeB9Sj2A8UIze/R0SxrdLQR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ae:33:2e:fc:05:8c:64:84:a0:e7:09:1b:0b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Mar 2 09:01:10 2026 GMT
Not After : Mar 3 09:01:10 2026 GMT
Subject: CN=86bf6768245f03ea9c32d61f094bbd1b6a4cd4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:29:80:25:91:8a:be:b5:35:7e:49:01:cc:
f5:b1:f5:f5:c5:d8:6f:5a:28:ea:c1:71:32:a1:96:
ce:92:ee:8d:70:8d:7e:1b:9c:96:1e:e2:f8:a7:5d:
e8:9a:bf:e3:17:f4:6b:52:85:73:0c:34:31:16:42:
d8:c3:e4:64:ab:4e:98:76:aa:18:f7:fe:5c:a2:a3:
fe:0e:f7:00:42:52:35:95:16:22:64:2c:79:e5:d6:
1a:48:58:35:8e:ce:a8:1a:5e:5a:c5:88:ab:46:c2:
6d:e8:ab:7d:ed:da:07:3d:46:54:ee:4d:27:a8:ae:
ae:68:3b:23:37:41:a1:40:ea:4e:a2:24:2b:73:ae:
1e:c8:7a:08:2a:9c:ed:e2:3f:b0:af:aa:6f:03:78:
18:a7:30:9e:75:f6:12:5c:61:75:bd:66:a7:9d:c0:
ff:34:43:e7:e3:b5:58:66:b2:8a:57:4c:c6:2e:98:
91:bc:dd:e5:f5:94:43:62:d6:ad:b8:5d:a9:bc:f0:
f4:fa:e6:a4:c1:41:05:6e:a3:46:07:d9:58:e1:91:
a2:2f:3e:0d:ca:f8:10:1e:6e:55:81:7b:13:b7:21:
34:93:ee:d7:65:c2:a3:85:8f:d9:43:b1:1c:5b:76:
0d:cd:df:0e:b4:0f:c8:1b:37:cd:bd:27:17:a0:82:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BF:67:68:24:5F:03:EA:9C:32:D6:1F:09:4B:BD:1B:6A:4C:D4:BF
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:bb:ba:5f:4c:6a:0b:56:49:57:49:66:39:5a:01:e0:63:
57:dd:25:f3:24:a4:50:a5:b1:9d:ec:e1:b7:1a:b9:11:5a:dc:
fb:ad:63:29:5f:f7:4d:1b:59:09:5e:b0:67:ae:9a:41:39:37:
c4:25:d8:ab:5a:c0:22:5b:ba:9d:ea:a4:5c:de:14:0b:b8:15:
c1:83:11:70:06:ae:9d:01:59:25:88:82:ad:16:90:fb:85:34:
4e:63:ad:1e:b3:13:77:25:ee:4e:11:27:32:a9:56:76:bd:6a:
a6:48:59:a8:b7:3f:68:b6:c6:5a:7d:e2:5a:2e:75:3a:68:cd:
d6:81:16:12:c9:0a:da:1b:95:99:f8:8d:3a:9e:f9:7e:33:eb:
bd:fe:bc:48:3e:93:44:ff:d9:38:15:1e:37:28:86:32:36:fe:
7d:c1:1c:77:07:7c:26:75:bd:13:5d:ab:dd:90:9e:70:73:70:
18:43:60:b3:ae:9a:3b:35:cf:8c:e8:c9:50:6c:da:d5:cb:f5:
b8:9b:e5:ff:15:6d:54:46:42:fe:98:81:36:cf:e3:82:e0:a7:
8d:77:5a:75:4a:a0:51:3f:8f:e2:65:55:ee:c3:a6:3a:94:05:
38:98:cc:40:f7:54:36:ec:5c:b6:f1:ed:28:29:19:6e:38:fc:
a2:68:39:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx64zLvwFjGSEoOcJGwuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODhhZjkzODQ1YmQyNTM4NjQ1MmRiZGZhYTAyMTZlMTNj
YWY4YzcwHhcNMjYwMzAyMDkwMTEwWhcNMjYwMzAzMDkwMTEwWjAzMTEwLwYDVQQD
Eyg4NmJmNjc2ODI0NWYwM2VhOWMzMmQ2MWYwOTRiYmQxYjZhNGNkNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss8pgCWRir61NX5JAcz1sfX1xdhv
WijqwXEyoZbOku6NcI1+G5yWHuL4p13omr/jF/RrUoVzDDQxFkLYw+Rkq06YdqoY
9/5coqP+DvcAQlI1lRYiZCx55dYaSFg1js6oGl5axYirRsJt6Kt97doHPUZU7k0n
qK6uaDsjN0GhQOpOoiQrc64eyHoIKpzt4j+wr6pvA3gYpzCedfYSXGF1vWanncD/
NEPn47VYZrKKV0zGLpiRvN3l9ZRDYtatuF2pvPD0+uakwUEFbqNGB9lY4ZGiLz4N
yvgQHm5VgXsTtyE0k+7XZcKjhY/ZQ7EcW3YNzd8OtA/IGzfNvScXoIIwnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa/Z2gkXwPqnDLWHwlLvRtqTNS/MB8GA1UdIwQY
MBaAFBqIr5OEW9JThkUtvfqgIW4TyvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUt
NWY5ZjBhYzBmYWU3LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUtNWY5ZjBhYzBmYWU3
LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlG7ul9M
agtWSVdJZjlaAeBjV90l8ySkUKWxnezhtxq5EVrc+61jKV/3TRtZCV6wZ66aQTk3
xCXYq1rAIlu6neqkXN4UC7gVwYMRcAaunQFZJYiCrRaQ+4U0TmOtHrMTdyXuThEn
MqlWdr1qpkhZqLc/aLbGWn3iWi51OmjN1oEWEskK2huVmfiNOp75fjPrvf68SD6T
RP/ZOBUeNyiGMjb+fcEcdwd8JnW9E12r3ZCecHNwGENgs66aOzXPjOjJUGza1cv1
uJvl/xVtVEZC/piBNs/jguCnjXdadUqgUT+P4mVV7sOmOpQFOJjMQPdUNuxctvHt
KCkZbjj8omg5WA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:14 2026 by rpki-client