Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File: GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier: Pda0u13lz4TK0TrH1FP/Y/tPzxZeVVjSM4Lo4m6xZCI=
Subject key identifier: 2D:1B:30:3D:F8:46:50:B5:E5:97:D8:F7:FB:27:DC:2D:14:B1:EC:D7
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 01A0E5F5E4BA05A1B2A080D97B2EB060C0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number: DF
Signing time: Mon 28 Sep 2026 03:01:32 +0000
Manifest this update: Mon 28 Sep 2026 03:01:32 +0000
Manifest next update: Tue 29 Sep 2026 03:01:32 +0000
Files and hashes: 1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: 45HqauvsiN1zr8A3WlZhSJe7NdKcgHdA7zuyUdYVwLg=)
2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
4: iULSu1XOMW528tmeTQYP8c_wAb8.roa (hash: RURInJ6+YkolxYt5T8//7OYPXS8SUDD30iDV+JQ/+4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:e4:ba:05:a1:b2:a0:80:d9:7b:2e:b0:60:c0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Sep 28 03:01:32 2026 GMT
Not After : Sep 29 03:01:32 2026 GMT
Subject: CN=2d1b303df84650b5e597d8f7fb27dc2d14b1ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:a8:35:e8:b3:a2:4d:41:af:a6:78:c6:1f:
12:d4:d5:b1:12:d2:68:4e:87:7c:b5:a6:61:d4:1d:
7f:62:90:4a:75:d5:b9:47:fd:cb:e2:a4:b9:83:e6:
d3:72:cd:b6:34:59:76:26:fc:2a:ba:51:18:b3:29:
95:af:5a:c1:b5:58:ab:e7:ef:81:1c:19:01:88:e7:
9a:7b:af:8c:74:00:65:c7:72:bc:e3:84:5a:fc:ec:
3a:1e:d8:16:d3:29:94:9c:68:6b:01:94:93:7b:19:
2b:8f:e1:df:6e:00:6b:67:fe:4a:d9:f7:bf:43:4a:
78:fb:41:05:02:1f:c6:d5:b5:36:47:84:66:be:b8:
d2:dc:e2:c4:48:e6:ff:5f:39:fd:0f:14:7e:05:f8:
4c:5a:4f:9b:e8:0e:4b:07:cc:e3:40:7b:65:68:e3:
76:11:61:d3:26:1e:f0:34:c4:52:88:a0:48:e4:4a:
3c:36:19:c1:b9:e6:45:d6:e9:16:67:87:47:e1:d8:
90:8c:39:6e:08:13:75:2a:3b:db:c3:d8:3d:2f:31:
45:83:a3:23:22:ca:cf:b7:9c:cf:f3:fe:d8:64:d7:
34:dd:2a:dd:f0:c1:8e:7b:7a:ad:9b:79:10:56:93:
07:31:65:6c:74:c6:af:b1:bc:91:92:d0:85:c6:b8:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:30:3D:F8:46:50:B5:E5:97:D8:F7:FB:27:DC:2D:14:B1:EC:D7
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:ca:74:88:1b:30:c4:29:1c:41:fb:1f:05:49:a2:28:0f:
23:e4:1f:af:ff:32:4d:01:59:e0:58:b6:0e:cf:73:68:84:28:
61:45:ab:27:76:ee:d9:7c:a5:a1:88:15:bf:d9:af:1b:fb:28:
18:30:9b:69:a3:b2:41:4b:a6:e3:17:3f:7d:b5:9b:33:0c:cc:
11:e3:ed:b1:8f:10:ab:fe:b5:45:d5:11:6d:6a:9b:6e:c7:8d:
38:77:81:a8:e5:45:6e:93:a7:27:b7:e3:c2:e5:b2:1f:71:b1:
82:7d:8e:d3:c2:6e:f3:3f:17:13:67:34:d9:d7:d1:d7:61:1d:
42:e1:df:a6:6f:8a:f2:43:7b:b0:b5:08:4a:a0:1e:72:6a:45:
28:5f:fa:95:2d:ef:31:50:78:3d:4a:fb:46:e7:31:14:2f:23:
c5:83:b8:a3:45:84:6e:b2:02:21:81:2c:2c:28:0f:10:31:c5:
33:f7:c4:40:05:26:d3:f0:6c:f4:04:8e:5c:72:a6:e1:3d:57:
3e:fe:2a:82:f0:73:b7:ec:eb:da:91:1a:83:a6:ef:da:d0:6c:
af:5e:ad:d4:d7:0d:d2:78:01:33:96:29:0a:17:7a:fa:49:e4:
15:29:1e:22:f7:ea:e0:50:b0:a3:2a:a0:7a:8c:ae:31:e6:bb:
23:18:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:26:10 2026 by rpki-client