Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: Rzzmu1Izav76MXVUBI18l48TQZLwMQhuIVN5OjwrxUo=
Subject key identifier: B3:4E:F9:F1:FC:E4:F8:D4:18:B4:8E:DB:7D:69:E7:18:AA:16:18:16
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019D38D2A0D66726CAF12B25733515891A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0D26
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: vNE6x7MyeFAVOQUZ7WSwfmK7GPkuVaSiUliDMLO1mHU=)
2: nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa (hash: wB/xRE6h3geXqO4q4Rpv5x1ICmOWqRPL+trpbmTd4xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a0:d6:67:26:ca:f1:2b:25:73:35:15:89:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=b34ef9f1fce4f8d418b48edb7d69e718aa161816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:a7:93:d7:01:47:ca:09:10:39:94:5e:90:
c6:96:b8:6d:fa:4c:bb:32:b6:56:75:d5:f1:4e:91:
e5:34:31:6d:99:d6:5f:09:c3:dc:0b:0d:2d:f6:b6:
c6:15:08:f6:bd:6b:f6:19:2b:4e:94:10:79:d1:20:
fd:2d:05:95:da:50:fd:9a:6e:57:f6:97:b2:2b:90:
7c:2e:1d:a9:39:d7:d2:c5:b1:bd:dd:9b:80:66:bb:
69:01:5b:cb:4b:ec:d5:21:26:ba:46:ce:91:e8:de:
a6:e8:21:cd:1b:c6:41:99:09:8a:16:54:f5:75:bf:
bd:2b:f8:20:2b:69:da:65:16:10:3a:4f:06:53:c3:
f3:fd:0e:7d:d6:41:08:5e:76:84:e3:4c:ca:b6:6b:
7f:dc:cc:a1:16:27:b3:7b:60:bb:fc:aa:8b:30:72:
35:57:a8:b0:05:8e:cc:de:1b:6a:05:9a:b6:e8:26:
8c:11:5a:ad:31:43:a6:56:8f:36:6b:ab:a0:3d:18:
9a:14:77:c5:96:07:96:17:8b:8e:2d:58:7c:54:b2:
b4:71:96:de:f2:01:03:3e:92:02:20:f9:32:3c:c3:
b0:f0:28:fa:e2:97:b7:19:93:b9:db:94:a6:c7:6b:
12:61:ea:1d:ce:3c:c4:9a:14:a7:ff:39:d3:6e:30:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:F9:F1:FC:E4:F8:D4:18:B4:8E:DB:7D:69:E7:18:AA:16:18:16
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:65:60:f2:ac:ca:8a:89:9d:df:8f:80:5b:35:87:46:94:
57:29:1b:97:0f:76:c8:ae:df:43:a7:a3:8c:d7:a8:5d:e5:34:
60:7b:fe:ea:6b:d3:6b:45:f4:07:de:44:34:db:7f:76:f5:7c:
d3:da:97:07:46:23:c7:ee:c9:dd:f8:3e:f3:e1:2f:24:35:24:
a0:b2:f0:0e:c4:cd:2a:0d:1c:83:23:ab:4c:e4:6e:2a:63:96:
15:17:d3:8a:43:50:ff:c2:a8:bf:bc:04:bd:69:15:ec:ac:39:
be:3b:87:c3:b9:2d:1e:3e:dd:92:8f:f7:71:d2:df:7c:cd:54:
e5:2e:be:4f:82:e7:70:1c:e4:94:d6:87:14:92:3c:26:a5:a5:
24:0a:a5:53:bc:e2:30:f8:98:52:36:35:dd:9e:73:97:53:45:
64:62:6a:02:ae:41:c5:a0:38:6e:2c:4c:38:ec:6a:43:cc:e0:
7c:27:aa:29:53:8c:f4:f2:b2:c9:c0:9c:2c:13:31:bc:73:4a:
7f:bf:6e:39:e7:ad:05:6e:ba:f2:7c:f2:b5:3d:94:ed:de:63:
a0:45:eb:6b:ad:9e:d0:31:d1:65:ff:2c:93:32:f5:17:44:35:
e4:b0:ba:99:31:25:3b:5b:89:46:f9:a7:62:11:b3:86:f6:95:
a2:ff:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:52 2026 by rpki-client