Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: v62lkjIi7e64cWWc/edkjV1LK2YCRbd26oZUawm8F2g=
Subject key identifier: 95:9F:FD:C0:89:E3:5A:59:08:08:94:48:D5:6A:45:38:0B:8C:98:68
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019D38D379AFBCE10AD439B61C2D541D7042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: opg1RRjmW5jQ5ceCMt9xoYc4xS5BodavAQaBmo6+6j4=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:79:af:bc:e1:0a:d4:39:b6:1c:2d:54:1d:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=959ffdc089e35a5908089448d56a45380b8c9868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:dd:6e:de:c4:f3:4b:a7:cc:04:4f:03:d0:
41:9a:6e:14:4e:de:f4:f3:35:fa:96:ed:cb:02:0e:
9b:01:29:1e:b6:29:9a:04:d4:e3:0b:17:a4:d8:66:
94:13:2d:7f:82:68:cd:1d:3a:3f:89:74:a3:3a:ce:
5d:c4:8b:ae:20:d9:e4:fa:59:06:be:0c:8a:15:d8:
fc:58:a2:27:88:2c:1c:e6:cf:9b:90:cd:0d:72:1e:
00:5b:f2:09:3a:20:ad:cb:31:46:1c:04:f1:9d:fc:
4a:b6:7d:5b:77:39:99:c6:cb:00:d7:7b:45:b6:1a:
a7:0e:12:17:55:e6:fe:26:53:2c:ab:23:8e:7a:b2:
12:a5:47:fb:42:fc:bc:66:5c:ca:5d:58:da:d0:fc:
7c:e3:fd:5c:aa:16:52:9a:6a:9b:1b:3a:e3:d7:3c:
cb:c4:69:a5:a9:92:31:67:ea:40:b5:64:19:b0:19:
eb:f3:2c:65:3d:0a:8b:e1:2f:df:90:ee:17:1c:8a:
ad:a5:bc:cb:3c:d4:2a:57:5b:5e:aa:01:c5:3b:dd:
f2:18:25:24:45:82:1a:fe:35:d3:f2:6a:de:df:b2:
06:06:cf:9d:f2:27:b1:96:2e:9d:c6:30:ac:44:d2:
ee:e0:ea:c8:92:92:25:b4:16:64:70:20:f3:73:b0:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:FD:C0:89:E3:5A:59:08:08:94:48:D5:6A:45:38:0B:8C:98:68
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:e7:99:9e:58:9a:18:4c:ff:9f:b1:36:91:19:86:f0:de:
cc:28:07:c6:27:ec:48:52:83:17:d7:b2:e5:d0:62:3a:da:b7:
1f:ec:3a:10:6c:05:c6:14:df:41:47:08:7c:49:68:9f:6d:ba:
2a:0c:2f:bb:0e:b5:6b:f1:83:ae:45:75:13:d5:14:3c:a4:39:
b4:ad:69:8d:10:c8:3f:79:72:be:f6:82:c1:37:3e:59:ce:7f:
d8:89:76:98:06:9b:90:88:7f:bc:7c:2e:a3:84:91:2f:09:28:
8d:f2:ed:f5:b4:eb:cc:db:a4:98:f1:39:69:bb:a5:4f:9e:4c:
e6:12:5f:e4:a8:e6:2e:f7:c6:60:34:84:a3:b4:f2:84:af:ce:
4c:fd:58:3b:32:70:bb:cb:ce:3e:6c:32:40:48:69:04:6a:10:
1b:22:6c:2a:ed:4d:34:54:f6:79:b5:45:2f:19:6a:04:c9:a9:
e8:01:e0:2a:53:e7:b5:ff:80:7b:61:af:ad:32:ab:cc:2d:b8:
49:09:e9:4b:38:fe:bb:f7:79:19:7b:75:ff:15:9c:c4:d6:5a:
4b:a4:1f:e2:b3:23:66:ac:d5:f0:d9:9c:43:b6:39:32:af:53:
5d:fd:8d:69:bd:53:ee:05:cc:f6:f3:ff:d6:31:a2:41:97:39:
b8:6f:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:00 2026 by rpki-client