Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: r4W4wGU+aZp5K3Aw00j8bygnml18vv+HmhhFpClepM0=
Subject key identifier: 2F:05:84:CA:73:BF:42:3D:79:FB:6D:FB:5D:A7:76:01:BD:7E:A9:DF
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 01A08C7AB75BFA13E93553E8B0D967810F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 18:00:47 +0000
Manifest this update: Thu 10 Sep 2026 18:00:47 +0000
Manifest next update: Fri 11 Sep 2026 18:00:47 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: CuUndl/12mGB37Z/vTvfrUPS9+qp8zWid5mak2yeahs=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:b7:5b:fa:13:e9:35:53:e8:b0:d9:67:81:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Sep 10 18:00:47 2026 GMT
Not After : Sep 11 18:00:47 2026 GMT
Subject: CN=2f0584ca73bf423d79fb6dfb5da77601bd7ea9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:e6:62:90:2e:c1:3d:54:9d:7a:24:ee:5f:
26:e1:07:48:be:a6:23:f6:5f:38:95:5a:91:06:c9:
17:22:48:09:1e:b2:c8:3b:76:40:33:fe:a4:37:ca:
a9:13:d3:d5:4c:2a:fd:a3:4d:70:37:15:55:19:b7:
bf:6c:0a:b2:83:26:99:8e:b2:bd:86:74:5b:dd:99:
f6:29:79:7d:c1:f9:c1:57:a2:27:05:0f:69:54:f4:
a3:0a:80:b1:a1:28:b1:9e:43:b8:10:38:1a:ff:04:
02:29:6a:e9:7c:13:b1:36:0b:f3:58:9e:91:50:75:
e6:4b:9b:e2:56:9a:87:8d:fc:82:04:ef:4b:9c:ac:
bf:f3:7c:88:65:e5:b6:de:7e:26:69:f3:ba:da:11:
3e:ae:38:09:24:6b:13:81:52:af:3d:fd:5a:55:7f:
d1:e4:5b:db:4b:0c:0e:26:75:98:95:86:99:76:c1:
86:87:3d:15:d2:20:6e:19:2d:8d:05:91:d3:89:5d:
86:30:4d:ca:db:e8:7e:76:e1:8f:8c:ce:b4:57:91:
b7:98:56:2a:4f:1a:94:2c:9f:02:6a:a9:7f:9c:6b:
bd:a9:79:65:82:13:94:25:d1:47:65:6f:6b:3f:09:
ca:c6:08:77:1b:0c:3d:aa:74:8c:d1:70:c7:f6:94:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:84:CA:73:BF:42:3D:79:FB:6D:FB:5D:A7:76:01:BD:7E:A9:DF
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:03:ce:2e:54:b5:63:23:57:fc:e8:21:b0:83:e2:6a:5f:37:
b9:a5:a7:03:5b:4e:76:5d:99:74:ab:35:71:8a:42:0a:b2:9c:
a7:6b:82:c0:cc:c5:ff:0e:17:12:d2:36:09:e6:8a:62:25:53:
7d:7f:60:9c:c5:81:01:c6:81:bc:c4:0c:d3:18:e2:de:13:1d:
63:eb:f1:72:2f:51:db:23:61:40:53:bd:a3:cd:73:fe:12:be:
0b:31:b5:96:cf:d6:b8:08:e5:24:a5:ac:1a:4c:17:1f:55:3b:
8d:b2:82:d0:fd:02:88:5b:1d:73:60:24:04:30:17:42:b3:25:
01:55:3a:4d:98:9b:ce:ac:7e:ce:c3:79:96:be:59:26:35:1c:
c2:f4:41:85:74:bc:4d:8b:92:b5:1a:03:12:58:a2:d3:30:4d:
33:7f:c4:77:47:fe:7a:40:c3:7c:8c:a6:45:cc:2f:4f:c4:ef:
d1:79:da:ce:49:f6:88:f3:63:81:8f:96:44:ea:c5:60:2f:e1:
10:07:33:c9:fc:08:ff:af:d0:c4:77:98:91:a8:4a:62:a3:b9:
d7:0c:aa:6b:14:c7:b8:d9:84:27:4a:7f:5f:e5:0d:b8:19:ad:
41:5a:06:7b:ba:6e:30:d3:3a:c2:34:57:e8:58:53:d2:fb:06:
e4:c9:41:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMerdb+hPpNVPosNlngQ9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjYwOTEwMTgwMDQ3WhcNMjYwOTExMTgwMDQ3WjAzMTEwLwYDVQQD
EygyZjA1ODRjYTczYmY0MjNkNzlmYjZkZmI1ZGE3NzYwMWJkN2VhOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gbmYpAuwT1UnXok7l8m4QdIvqYj
9l84lVqRBskXIkgJHrLIO3ZAM/6kN8qpE9PVTCr9o01wNxVVGbe/bAqygyaZjrK9
hnRb3Zn2KXl9wfnBV6InBQ9pVPSjCoCxoSixnkO4EDga/wQCKWrpfBOxNgvzWJ6R
UHXmS5viVpqHjfyCBO9LnKy/83yIZeW23n4mafO62hE+rjgJJGsTgVKvPf1aVX/R
5FvbSwwOJnWYlYaZdsGGhz0V0iBuGS2NBZHTiV2GME3K2+h+duGPjM60V5G3mFYq
TxqULJ8Caql/nGu9qXllghOUJdFHZW9rPwnKxgh3Gww9qnSM0XDH9pRhiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8FhMpzv0I9eftt+12ndgG9fqnfMB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQPOLlS1
YyNX/OghsIPial83uaWnA1tOdl2ZdKs1cYpCCrKcp2uCwMzF/w4XEtI2CeaKYiVT
fX9gnMWBAcaBvMQM0xji3hMdY+vxci9R2yNhQFO9o81z/hK+CzG1ls/WuAjlJKWs
GkwXH1U7jbKC0P0CiFsdc2AkBDAXQrMlAVU6TZibzqx+zsN5lr5ZJjUcwvRBhXS8
TYuStRoDElii0zBNM3/Ed0f+ekDDfIymRcwvT8Tv0Xnazkn2iPNjgY+WROrFYC/h
EAczyfwI/6/QxHeYkahKYqO51wyqaxTHuNmEJ0p/X+UNuBmtQVoGe7puMNM6wjRX
6FhT0vsG5MlBsw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:05 2026 by rpki-client