Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: O+Rrk7Gh+E/yoy04wj6V0DtggV+8Ond5pnZe2C+wWAg=
Subject key identifier: 8D:C0:C0:64:A9:60:FD:62:BC:D7:04:C5:32:98:9C:11:B7:68:57:3F
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01A1C25405324849697DA23B0DC1C234C366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1834
Signing time: Mon 09 Nov 2026 22:00:48 +0000
Manifest this update: Mon 09 Nov 2026 22:00:48 +0000
Manifest next update: Tue 10 Nov 2026 22:00:48 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 7RR582QC1a5t5a3yeuJr34G8hWsdfwwag5MNne+4mmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:54:05:32:48:49:69:7d:a2:3b:0d:c1:c2:34:c3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Nov 9 22:00:48 2026 GMT
Not After : Nov 10 22:00:48 2026 GMT
Subject: CN=8dc0c064a960fd62bcd704c532989c11b768573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:98:f1:0b:46:d3:2e:c4:97:8f:f9:66:d5:
da:0a:c0:1d:c0:48:80:5e:8d:80:aa:ed:6f:92:da:
db:6b:cb:9d:0f:d1:b2:9e:09:a5:77:e3:ee:4e:28:
9e:39:c1:93:8f:20:d6:c3:91:b3:7b:14:5a:eb:80:
db:bc:a8:64:65:ba:e4:89:dd:55:c2:9c:31:35:4f:
a7:cd:51:53:a7:6f:77:d2:ab:34:ca:c8:15:af:b9:
8f:12:f7:91:21:0f:4b:1d:3d:e5:e5:8b:60:10:a0:
b5:ef:94:1f:10:ec:4c:b1:8d:6c:32:67:71:b8:a9:
4a:02:c2:c8:0f:62:44:0b:30:65:42:67:8b:e1:c4:
e6:28:fa:71:3c:ea:68:4b:15:28:d0:3c:87:94:ec:
72:a8:c9:ff:ed:c3:f8:e4:60:e7:e1:4b:2f:b2:d1:
87:b8:b1:7a:87:f9:63:aa:6b:c9:9b:34:b4:05:e3:
e7:99:19:19:fd:c9:21:a3:87:99:ba:a4:5e:5a:cd:
76:5a:85:04:f9:cf:45:84:2f:04:63:a0:79:2f:2d:
2a:2c:6c:9b:fb:a9:66:fa:40:32:75:0b:0d:dc:fd:
3c:0c:5e:70:10:48:ed:a1:a9:bb:fb:86:a0:24:1c:
19:89:7b:6e:82:d0:5f:16:6b:48:25:e7:93:67:9c:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:C0:64:A9:60:FD:62:BC:D7:04:C5:32:98:9C:11:B7:68:57:3F
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:89:1a:93:f4:19:0d:05:2c:70:1f:e1:ff:b3:64:bd:0a:
e2:09:1b:b2:15:da:d6:90:77:21:61:87:30:6f:b5:ef:af:b1:
b6:8f:b0:40:74:10:d1:e6:0e:66:ba:3b:37:57:6e:8c:6c:0d:
7e:d4:ba:ef:8c:f8:1b:34:d2:b9:d7:c6:64:88:33:bf:d4:e9:
5b:9e:1b:0a:63:de:aa:ad:16:2b:35:1c:a3:ff:48:d6:46:5f:
9f:fc:57:43:38:bb:75:7e:f1:69:52:31:6d:fc:ba:c6:ef:3b:
9e:66:a1:88:90:3f:96:60:1d:51:43:d5:f9:1a:36:3c:b3:2d:
ed:cc:31:75:4c:9d:61:a0:a9:12:a8:b3:01:99:3f:88:fd:c3:
f5:80:b2:21:63:6f:da:8d:06:cc:84:53:83:e4:47:70:51:6d:
54:a1:5b:cf:61:d5:f6:ab:e6:31:ef:59:83:c6:55:01:a5:2a:
39:1f:8c:70:9d:86:bd:67:a0:70:e4:a7:aa:ed:3f:9e:46:b0:
5e:e8:01:65:71:b5:64:a5:8a:a8:1e:a8:16:70:4f:1f:0c:c7:
0d:f9:b2:d2:99:35:27:ba:c1:62:ef:eb:5f:3f:fd:ea:71:0e:
02:f6:32:ac:37:08:a6:03:dc:17:48:4f:97:bc:4a:1c:b6:52:
bf:08:da:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHCVAUySElpfaI7DcHCNMNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0
YzM1YjQwHhcNMjYxMTA5MjIwMDQ4WhcNMjYxMTEwMjIwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZGMwYzA2NGE5NjBmZDYyYmNkNzA0YzUzMjk4OWMxMWI3Njg1NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBmY8QtG0y7El4/5ZtXaCsAdwEiA
Xo2Aqu1vktrba8udD9Gyngmld+PuTiieOcGTjyDWw5GzexRa64DbvKhkZbrkid1V
wpwxNU+nzVFTp2930qs0ysgVr7mPEveRIQ9LHT3l5YtgEKC175QfEOxMsY1sMmdx
uKlKAsLID2JECzBlQmeL4cTmKPpxPOpoSxUo0DyHlOxyqMn/7cP45GDn4UsvstGH
uLF6h/ljqmvJmzS0BePnmRkZ/ckho4eZuqReWs12WoUE+c9FhC8EY6B5Ly0qLGyb
+6lm+kAydQsN3P08DF5wEEjtoam7+4agJBwZiXtugtBfFmtIJeeTZ5wQ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3AwGSpYP1ivNcExTKYnBG3aFc/MB8GA1UdIwQY
MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt
ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm
LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfiJGpP0
GQ0FLHAf4f+zZL0K4gkbshXa1pB3IWGHMG+176+xto+wQHQQ0eYOZro7N1dujGwN
ftS674z4GzTSudfGZIgzv9TpW54bCmPeqq0WKzUco/9I1kZfn/xXQzi7dX7xaVIx
bfy6xu87nmahiJA/lmAdUUPV+Ro2PLMt7cwxdUydYaCpEqizAZk/iP3D9YCyIWNv
2o0GzIRTg+RHcFFtVKFbz2HV9qvmMe9Zg8ZVAaUqOR+McJ2GvWegcOSnqu0/nkaw
XugBZXG1ZKWKqB6oFnBPHwzHDfmy0pk1J7rBYu/rXz/96nEOAvYyrDcIpgPcF0hP
l7xKHLZSvwjaqA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 06:55:04 2026 by rpki-client