Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: oUo9fQWlXZV/yxgPreGkigUDjpkQaRggwQ0xLagxHYY=
Subject key identifier: D4:43:B5:94:70:08:7E:BB:97:43:50:84:71:51:B4:5C:10:E2:39:8D
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 01A181BED16A09563488598C8F42CE71EFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 09:02:08 +0000
Manifest this update: Wed 28 Oct 2026 09:02:08 +0000
Manifest next update: Thu 29 Oct 2026 09:02:08 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: hA9tHpOgxAlaLZ9OH/UrPMpwoA8z4iIyA1M+1kCebwc=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:d1:6a:09:56:34:88:59:8c:8f:42:ce:71:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Oct 28 09:02:08 2026 GMT
Not After : Oct 29 09:02:08 2026 GMT
Subject: CN=d443b59470087ebb974350847151b45c10e2398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:dc:a1:c2:85:71:21:41:b1:71:41:01:fc:
22:c5:cb:3b:41:15:1e:b2:46:89:b7:99:e4:58:22:
f0:c7:b3:f5:ed:d4:57:ad:1a:4c:70:34:98:6e:6d:
0b:cd:3c:67:67:7f:74:21:3d:d1:5a:b0:65:f5:aa:
4f:bb:b0:25:9d:19:53:99:35:28:46:9d:6b:a8:2c:
96:b0:d3:95:a8:a4:c2:13:08:98:07:4a:22:88:10:
20:7f:93:be:f7:22:83:14:e7:d6:f4:10:44:4c:3d:
11:29:53:50:d1:6e:ed:3f:76:12:b7:f5:84:0b:cc:
32:38:84:37:ad:a8:54:6e:ad:71:fb:01:90:95:7e:
e7:bb:f4:0b:f3:ab:40:05:7b:00:96:fd:71:d1:e8:
c2:05:1b:b4:13:4d:35:ad:47:6e:32:b4:24:dc:49:
29:f1:65:70:ad:0c:66:79:c1:cd:9f:6a:1e:65:a0:
24:b0:a4:88:ff:9b:bb:51:f9:57:fc:8c:d1:5c:2f:
79:a6:90:31:e3:7b:c6:e4:31:28:18:7e:e0:bd:3f:
35:c0:8a:39:27:5b:8f:cf:51:a6:29:80:f4:cf:65:
61:63:b9:cc:65:fa:f0:d8:e0:42:ad:e5:4a:65:a8:
5e:db:e0:35:7f:e6:57:48:bd:d6:d2:e6:2f:05:bc:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:B5:94:70:08:7E:BB:97:43:50:84:71:51:B4:5C:10:E2:39:8D
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:e9:a2:b4:e1:a5:23:ee:84:63:e2:f6:c0:45:11:a3:33:
cc:91:ae:5d:ed:24:7b:8d:bf:a3:95:6c:2e:51:c9:19:29:7e:
f3:5b:f7:a4:ec:c8:f0:2f:46:3e:70:37:af:71:ba:6e:2e:0d:
69:1b:13:02:f5:8c:1b:35:28:ee:2c:34:c5:cf:c7:7b:fc:aa:
ec:de:cf:67:ed:8f:3b:56:ca:93:b4:04:ea:81:dd:71:10:61:
ec:46:56:9e:0c:c0:38:2e:1d:5d:fb:6c:9f:c7:c9:0a:1c:f0:
76:0d:71:51:24:a9:f8:4a:e5:03:39:bb:40:3e:91:f5:49:e2:
d5:e8:d6:9e:f5:c6:58:40:c5:b3:ca:aa:8a:58:5a:40:80:16:
41:ff:b5:d0:c7:f8:c4:e6:ed:a8:17:37:be:4b:e1:59:1b:04:
0d:de:26:65:1f:45:83:3c:0b:bc:1a:fa:48:e2:11:17:e1:07:
64:0e:d4:a8:b7:0d:37:6c:3b:fc:15:b6:8e:0f:f5:77:22:bc:
9f:41:51:4d:1f:ea:e2:23:37:a5:d4:ef:b4:65:f0:9c:19:0d:
a5:f7:5d:7d:e4:2a:fc:ca:fc:d4:2f:83:91:3b:fd:55:97:61:
fc:86:61:0c:06:d3:14:ab:63:f6:58:61:1d:be:ff:75:42:11:
34:df:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:34 2026 by rpki-client