Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: xaOh1jikNBFnWrH1uAf6dOtAz0Xfy2onO/7atnu0Zog=
Subject key identifier: 41:EF:FC:8A:DB:13:CA:00:72:21:67:FE:89:E7:42:B0:BC:A7:DB:E9
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019CAA8F854D411E766E147E58D7E3573EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0465
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: MFZWQXOIgzQwTRee8LKHBxYPg/+1vfFLUHjxo/veXgA=)
2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=)
3: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:85:4d:41:1e:76:6e:14:7e:58:d7:e3:57:3e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=41effc8adb13ca00722167fe89e742b0bca7dbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:fd:ff:55:e0:cc:46:ad:2b:f0:d6:c3:60:
2f:52:ef:1f:49:0f:22:2b:5e:c4:69:df:62:8a:09:
57:80:47:d5:bf:fe:ac:c5:bd:15:8c:0a:d0:94:97:
d2:5c:f8:bb:b8:9b:09:fe:c8:f7:35:eb:28:d3:a9:
0b:3b:e1:27:58:51:0f:4c:c6:26:1f:d2:f5:fa:f6:
b6:31:9f:1a:0f:0b:3f:fe:cb:b7:f9:59:64:6d:71:
59:03:19:34:ab:0b:fb:77:6d:80:18:b1:d7:42:ec:
26:d1:6b:36:e3:09:ef:17:64:f4:ac:ae:a0:f3:25:
7e:0f:c9:20:d3:a1:4d:8b:7d:18:31:b5:81:64:45:
c3:81:12:9f:23:24:c1:c6:5f:39:31:2b:f2:9b:82:
da:bf:8c:fe:26:f8:d3:17:03:62:82:f1:cb:cd:13:
80:40:a8:bc:a8:05:34:42:ad:e3:4b:09:63:16:2f:
1f:2e:99:3f:d8:82:78:bd:29:9c:af:e5:4a:82:3c:
f0:db:f7:8e:7c:c8:3c:d6:76:8b:21:cc:e4:95:49:
94:c3:b8:34:cd:9e:89:f6:ca:b5:43:b8:b4:cd:63:
64:18:a2:98:2d:a5:32:b6:ee:6a:36:64:55:20:9b:
17:30:be:10:d3:47:e6:7e:7d:50:a9:f9:b7:58:7c:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:FC:8A:DB:13:CA:00:72:21:67:FE:89:E7:42:B0:BC:A7:DB:E9
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:05:e1:fe:d8:e2:ac:76:93:06:51:15:a7:73:14:b0:e7:
8a:29:b2:1e:01:21:fc:31:23:a1:a6:4b:a6:57:8f:98:be:81:
b8:84:10:4d:81:a5:5c:95:20:b1:23:73:28:54:ae:ff:e0:65:
e2:7e:c5:bd:a1:f5:02:06:26:7c:d9:47:c1:e1:7c:b7:3a:91:
12:29:28:be:06:47:79:a3:6f:61:7c:7b:33:8c:1c:ef:53:b0:
96:de:d5:09:26:fe:8a:46:85:a3:8a:5a:c1:f9:2f:75:a4:3c:
84:11:23:10:c1:a9:55:d2:11:33:d7:b1:35:45:21:6d:e7:a3:
72:74:63:30:90:fa:05:ef:aa:17:76:8e:9b:f0:d8:77:32:ee:
d7:e6:4c:38:d5:60:f3:2b:73:61:7a:b5:fd:c1:63:d6:cc:f0:
45:35:3b:2f:20:37:cf:66:cb:51:47:6b:a7:7e:d7:aa:5b:f4:
b4:fe:49:6f:75:88:82:32:97:83:45:01:16:81:e6:24:ac:bf:
d1:0f:d5:40:38:78:e8:6b:a8:52:9f:7e:93:bd:1f:0f:53:2d:
c1:9e:31:40:ed:f3:b1:6e:2b:83:e2:a7:69:24:b9:40:98:8d:
87:8b:b4:58:1a:4b:3e:e8:a9:b3:d8:35:95:c9:48:32:9b:a4:
64:2c:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:08 2026 by rpki-client