Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File: GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier: fUxbIIWf808Q07J119gAvIQPjaczK7E5jbZVWQ97Lek=
Subject key identifier: 03:AC:E9:7E:76:F3:0A:AD:F4:B6:95:13:A8:7B:24:AF:38:D5:D6:14
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 019FAA888963AFBC3A16C2C44D6570AFCEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number: 3B
Signing time: Tue 28 Jul 2026 21:01:42 +0000
Manifest this update: Tue 28 Jul 2026 21:01:42 +0000
Manifest next update: Wed 29 Jul 2026 21:01:42 +0000
Files and hashes: 1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: WAtP9/Ocuv8a1OI27p6Qb0sRqUYS5TvP9uF3RemzFdI=)
2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:89:63:af:bc:3a:16:c2:c4:4d:65:70:af:ce:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Jul 28 21:01:42 2026 GMT
Not After : Jul 29 21:01:42 2026 GMT
Subject: CN=03ace97e76f30aadf4b69513a87b24af38d5d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:8c:cf:b5:a2:1c:d7:fb:ef:95:2e:3e:11:
49:91:36:46:10:b4:83:4e:73:c8:c4:a6:0d:0e:cf:
ec:e2:77:68:3b:31:11:25:fe:95:77:cd:ab:c2:c4:
9c:4a:fe:6f:43:39:a8:e8:8c:9b:52:b6:5e:62:97:
05:14:72:25:ea:1d:1b:a5:a6:31:7d:c0:d4:73:95:
7d:2c:19:2b:a8:2c:15:37:36:90:76:e2:c1:9d:f6:
e4:76:92:f0:95:25:0c:dd:86:8f:1d:57:21:6c:4f:
0c:85:ac:1d:d6:a0:9f:03:94:89:d5:99:45:89:92:
f6:d1:07:1c:c6:02:bb:c0:5a:26:0a:25:fd:ef:12:
49:81:f0:33:3d:4a:e1:df:7f:94:08:6d:f8:74:39:
25:e3:a6:09:56:e4:d2:5c:af:9f:de:ee:ae:12:a4:
2a:ca:35:03:08:25:63:ea:f8:a5:16:dc:d7:d7:15:
08:6f:aa:dc:8c:54:5c:d6:4c:c7:67:87:cb:10:93:
06:00:1d:49:51:12:82:73:7d:0e:cc:a0:99:bd:06:
75:8f:d7:fd:0a:81:34:86:c5:ca:75:c2:27:7b:74:
dc:7c:55:c4:c9:63:d8:e0:30:bf:1e:0d:4d:bf:d0:
7b:bb:02:7a:37:51:29:81:b1:ec:14:cf:5b:fe:d7:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:E9:7E:76:F3:0A:AD:F4:B6:95:13:A8:7B:24:AF:38:D5:D6:14
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:5d:a7:06:b1:0c:c2:7a:f7:05:fc:df:2d:bc:b7:f3:68:
45:90:4c:42:26:66:b7:24:ab:b4:7e:c1:a6:71:b6:a6:15:80:
1f:81:0b:ac:a8:5f:ec:d8:97:1e:4a:83:db:6f:1e:73:c7:20:
69:aa:43:85:6d:91:1b:17:aa:0a:d3:4c:d0:bd:fd:08:13:03:
92:3f:6c:2a:23:49:7c:c2:be:57:34:f0:8e:8a:27:48:86:e6:
be:c3:0d:71:ad:67:cc:77:07:7b:22:53:45:75:a4:4e:fe:ec:
f2:bb:10:d3:b1:25:77:3e:1a:ba:9b:98:a5:0d:d6:f1:b5:b3:
43:95:8a:d8:e8:86:3b:e1:84:ca:26:1a:3b:20:29:5a:71:66:
70:78:29:d1:b9:4b:78:46:8a:74:bf:52:07:f4:b5:c5:44:e0:
74:30:62:e7:06:fc:ab:69:d6:bd:d6:c3:0d:4b:a4:5f:5b:78:
41:c6:2b:97:79:b4:a8:b6:ed:87:ff:32:ea:5f:9f:42:8f:9e:
8a:d0:ca:fa:8c:5a:15:e5:0e:b2:f4:ee:a8:aa:aa:9b:ef:0d:
7d:1a:b0:c5:b0:00:2d:be:fa:59:be:d4:2e:f7:5d:04:a1:f8:
b9:1b:32:cd:45:d2:53:9e:1e:b3:e6:36:8d:b6:9e:23:9a:42:
53:b7:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:04 2026 by rpki-client