Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: sc4lpIDcl4MDItagkF2TEN3DvBf/djQ3mt4Bk25EbJA=
Subject key identifier: 94:27:A0:E3:0B:31:13:9B:43:EA:A6:DD:D7:07:E8:63:66:FB:22:CD
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 019CABA22717BE390BF9863862A13CAAE305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 1499
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: uhhcNlSxOONAup0cw+vDKGN62grdLEY/4RfI8x9DqAM=)
2: O2yqyVYgMd1D21b33Ew-cuZUWKs.roa (hash: mXmtbWNjV9pCi5BRUwRDhllYcEQ3x1WSO9bUZGlzGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:27:17:be:39:0b:f9:86:38:62:a1:3c:aa:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=9427a0e30b31139b43eaa6ddd707e86366fb22cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:90:ea:0e:b0:76:e2:f8:73:e2:1b:e6:7e:
aa:e0:d8:42:f1:a5:5f:7e:f0:bc:5e:d2:87:a5:ff:
5a:fa:9b:3c:cf:f4:89:06:68:d0:23:b2:84:a1:f9:
6e:0e:8b:d0:9e:f9:2f:ac:94:17:d0:9c:86:12:07:
86:56:7b:81:ab:3d:0a:d2:fe:67:41:c0:75:c3:ef:
e8:54:84:14:8e:f9:f6:4f:ab:f7:09:6e:76:59:9e:
73:9d:0f:50:8b:df:65:11:ab:5c:a2:ce:a5:4c:b5:
0c:54:bc:df:c7:9f:22:51:21:30:49:6c:9f:20:e4:
d2:66:6c:ce:e0:cd:39:e8:e6:43:0e:91:aa:5c:e3:
28:e5:2f:ee:40:f5:fb:65:64:8a:cf:ca:22:dc:48:
2d:56:75:b7:1e:b1:85:2b:6d:bf:bf:ac:55:90:fd:
f9:d3:46:12:91:0e:e7:82:1d:22:e4:3e:bd:26:ba:
97:8b:cb:13:5d:47:23:80:38:51:e2:52:41:1e:29:
2c:99:d7:bc:0d:1f:76:86:2b:ae:70:d4:1d:d9:a8:
69:90:3c:8b:cb:5f:5a:c5:42:82:f8:03:56:1c:0a:
05:5a:11:3b:1c:ee:80:2e:cb:fb:50:df:74:e0:01:
02:ee:fc:17:b6:d7:d1:4f:c0:17:84:8c:d6:9e:25:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:A0:E3:0B:31:13:9B:43:EA:A6:DD:D7:07:E8:63:66:FB:22:CD
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e5:34:b0:df:c9:29:8a:1e:31:9a:5a:88:2b:ef:5e:98:8b:
2f:a2:5b:1b:43:1e:2c:bd:d0:34:39:bb:65:95:bf:eb:fe:25:
28:6a:da:76:e9:f7:f5:b3:06:d9:33:d7:9b:f1:be:c0:cb:cf:
c3:95:13:a1:04:5a:b2:b0:52:9d:7d:4a:a4:1b:2a:60:32:6d:
f2:37:9c:96:6b:f9:f0:4c:4e:cf:f0:da:e8:47:f9:fd:a4:a2:
03:5a:9f:22:e6:0b:9e:81:02:3b:a2:ca:82:a3:91:a0:2f:c2:
29:54:e4:81:fe:70:53:80:18:20:0b:f0:f8:78:14:c1:66:e4:
59:88:7a:70:ba:88:96:3b:ef:f9:e1:98:9b:3f:fd:09:af:a2:
0b:75:d2:ac:7b:83:9b:6d:b3:35:8d:f6:57:26:4e:a8:60:8e:
be:81:e3:77:c5:64:8a:7b:c1:6f:aa:eb:e0:6c:b9:ac:bc:cf:
d3:7c:b7:ee:3b:02:e3:2b:52:5f:72:19:e7:68:e0:7a:35:d2:
01:b4:12:22:bb:f7:32:dc:13:99:48:36:83:97:10:ad:16:9c:
a4:9c:a3:66:be:f4:e3:3d:d9:29:52:32:5c:22:a6:27:5f:fb:
06:be:80:02:a5:5f:22:b1:8a:5c:9f:82:0c:b6:fd:f7:eb:04:
e9:d4:79:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroicXvjkL+YY4YqE8quMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODhmNDI5ZWRjODZhYTg3YmIzYTE3NzE3Y2VhNzFjNzA4
NzNhZjIwHhcNMjYwMzAxMjMwMDU2WhcNMjYwMzAyMjMwMDU2WjAzMTEwLwYDVQQD
Eyg5NDI3YTBlMzBiMzExMzliNDNlYWE2ZGRkNzA3ZTg2MzY2ZmIyMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly6Q6g6wduL4c+Ib5n6q4NhC8aVf
fvC8XtKHpf9a+ps8z/SJBmjQI7KEofluDovQnvkvrJQX0JyGEgeGVnuBqz0K0v5n
QcB1w+/oVIQUjvn2T6v3CW52WZ5znQ9Qi99lEatcos6lTLUMVLzfx58iUSEwSWyf
IOTSZmzO4M056OZDDpGqXOMo5S/uQPX7ZWSKz8oi3EgtVnW3HrGFK22/v6xVkP35
00YSkQ7ngh0i5D69JrqXi8sTXUcjgDhR4lJBHiksmde8DR92hiuucNQd2ahpkDyL
y19axUKC+ANWHAoFWhE7HO6ALsv7UN904AEC7vwXttfRT8AXhIzWniUrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQnoOMLMRObQ+qm3dcH6GNm+yLNMB8GA1UdIwQY
MBaAFBqI9CntyGqoe7OhdxfOpxxwhzryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEt
MDZkNDk4ZjYyMGEzLzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEtMDZkNDk4ZjYyMGEz
LzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOU0sN/J
KYoeMZpaiCvvXpiLL6JbG0MeLL3QNDm7ZZW/6/4lKGradun39bMG2TPXm/G+wMvP
w5UToQRasrBSnX1KpBsqYDJt8jeclmv58ExOz/Da6Ef5/aSiA1qfIuYLnoECO6LK
gqORoC/CKVTkgf5wU4AYIAvw+HgUwWbkWYh6cLqIljvv+eGYmz/9Ca+iC3XSrHuD
m22zNY32VyZOqGCOvoHjd8VkinvBb6rr4Gy5rLzP03y37jsC4ytSX3IZ52jgejXS
AbQSIrv3MtwTmUg2g5cQrRacpJyjZr704z3ZKVIyXCKmJ1/7Br6AAqVfIrGKXJ+C
DLb99+sE6dR5Vw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:21 2026 by rpki-client