Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: S6DFBAaJSSQqTgXzpwmUKWd2myNd3ZU+4JdAQo/WtvM=
Subject key identifier: F3:25:C9:10:04:56:85:8F:5E:F1:29:51:2A:ED:9D:45:20:A6:81:92
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019D9886C5E537692000E89CFB80244A25D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: v4k0QGHi5sAtg8HKzGZYApQsbtWrhYFyPl98+5+EoCQ=)
3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c5:e5:37:69:20:00:e8:9c:fb:80:24:4a:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=f325c9100456858f5ef129512aed9d4520a68192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:cf:bf:a6:8b:11:43:6e:1a:4f:f4:e2:90:
65:11:6c:85:92:45:b0:09:6c:00:56:f2:de:07:d4:
8f:3c:46:63:19:87:50:84:92:06:f2:c5:8c:33:04:
d7:d6:c5:58:4d:08:d0:93:69:94:d4:bd:b7:0a:78:
40:de:76:02:3b:c9:e5:69:ac:ef:f9:52:a1:e8:04:
23:a6:c5:21:4c:80:30:8c:22:12:9a:f8:f7:ef:a7:
f3:f5:28:c6:23:07:93:c3:96:90:68:2c:94:e0:05:
c0:28:d4:c9:9d:66:ce:1d:b1:7e:ef:8b:7f:cd:23:
b7:8b:e5:62:a3:6c:2f:39:21:ec:78:2e:0e:1d:80:
37:d9:76:e4:0f:8d:8b:7c:82:df:7c:10:6b:cc:7a:
0d:90:26:38:59:1a:23:1d:ff:85:bd:4c:5f:8b:2a:
4c:5a:9d:ce:6f:00:e0:17:2f:33:0c:88:28:9c:0f:
91:67:78:fd:44:73:8d:a4:bc:3c:08:04:f6:c8:12:
6e:a5:2c:7c:2b:cc:11:94:2b:94:0d:84:47:10:f4:
49:f5:6d:d6:c9:c7:c6:21:63:7c:32:29:ba:bb:48:
50:17:9a:ff:b7:9d:c8:ce:fc:90:aa:e0:b9:85:71:
d1:22:b9:1e:70:10:fd:6b:3d:20:7e:f6:7e:52:9e:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:C9:10:04:56:85:8F:5E:F1:29:51:2A:ED:9D:45:20:A6:81:92
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:86:07:93:94:0d:94:b7:d9:ce:e7:99:63:cd:39:07:7f:ad:
7d:22:2f:87:42:87:c4:2f:4f:8d:29:40:27:28:b0:a3:82:0d:
19:25:01:a8:05:aa:6e:fb:38:b3:3e:9c:7a:16:71:7a:ef:34:
c9:65:56:7b:66:e0:57:72:e5:d5:70:b1:42:ec:92:97:ba:2a:
5e:b7:23:32:66:53:99:7d:fe:9c:9b:84:3e:40:cc:dd:b6:88:
28:a2:53:96:3d:9f:84:09:3d:b2:ba:cc:4d:2e:af:ce:79:db:
84:bf:21:9d:1c:10:16:55:57:d6:32:37:fb:cc:68:ce:ff:03:
8a:61:0d:88:68:c4:ae:0a:aa:a4:49:01:6f:75:03:11:fd:9e:
9a:63:5b:b0:4c:4c:2e:f8:2f:5e:c1:fc:42:a8:77:2e:e0:99:
3d:0a:db:26:19:ce:84:fe:e7:c1:d7:35:b5:d1:89:a2:b9:f7:
00:f9:8a:88:87:f3:2d:66:b2:8a:e1:8e:cb:50:17:c4:58:82:
c7:50:d3:6c:b3:f8:f5:c4:d9:50:90:11:a4:d7:6c:5d:23:4d:
f6:7a:93:85:67:49:ec:7b:39:63:c3:45:33:48:8f:da:08:a2:
ca:f8:1f:5d:a2:6b:65:ec:c9:da:16:55:fe:9f:72:67:48:5b:
ba:9a:09:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhsXlN2kgAOic+4AkSiXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk
NGZjNmEwHhcNMjYwNDE2MjMwMTAyWhcNMjYwNDE3MjMwMTAyWjAzMTEwLwYDVQQD
EyhmMzI1YzkxMDA0NTY4NThmNWVmMTI5NTEyYWVkOWQ0NTIwYTY4MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pLPv6aLEUNuGk/04pBlEWyFkkWw
CWwAVvLeB9SPPEZjGYdQhJIG8sWMMwTX1sVYTQjQk2mU1L23CnhA3nYCO8nlaazv
+VKh6AQjpsUhTIAwjCISmvj376fz9SjGIweTw5aQaCyU4AXAKNTJnWbOHbF+74t/
zSO3i+Vio2wvOSHseC4OHYA32XbkD42LfILffBBrzHoNkCY4WRojHf+FvUxfiypM
Wp3ObwDgFy8zDIgonA+RZ3j9RHONpLw8CAT2yBJupSx8K8wRlCuUDYRHEPRJ9W3W
ycfGIWN8Mim6u0hQF5r/t53IzvyQquC5hXHRIrkecBD9az0gfvZ+Up5xvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMlyRAEVoWPXvEpUSrtnUUgpoGSMB8GA1UdIwQY
MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt
NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi
LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4YHk5QN
lLfZzueZY805B3+tfSIvh0KHxC9PjSlAJyiwo4INGSUBqAWqbvs4sz6cehZxeu80
yWVWe2bgV3Ll1XCxQuySl7oqXrcjMmZTmX3+nJuEPkDM3baIKKJTlj2fhAk9srrM
TS6vznnbhL8hnRwQFlVX1jI3+8xozv8DimENiGjErgqqpEkBb3UDEf2emmNbsExM
LvgvXsH8Qqh3LuCZPQrbJhnOhP7nwdc1tdGJorn3APmKiIfzLWayiuGOy1AXxFiC
x1DTbLP49cTZUJARpNdsXSNN9nqThWdJ7Hs5Y8NFM0iP2giiyvgfXaJrZezJ2hZV
/p9yZ0hbupoJoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:44 2026 by rpki-client