Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: CUiAET0FFbIPtRhQjEeUi2sfyGgjFhRBzUP41xcaROI=
Subject key identifier: E4:3D:CD:40:FC:1C:61:A1:03:BC:18:0D:1F:97:4F:67:DB:C9:15:B8
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01A0B9C0E41D567FA12F8A9ECAFCAF1AD264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 17AB
Signing time: Sat 19 Sep 2026 13:00:21 +0000
Manifest this update: Sat 19 Sep 2026 13:00:21 +0000
Manifest next update: Sun 20 Sep 2026 13:00:21 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 9lMQaVG7bXIZ4rnYR5vXwWwr4dJq8STRarikCR7osgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:c0:e4:1d:56:7f:a1:2f:8a:9e:ca:fc:af:1a:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Sep 19 13:00:21 2026 GMT
Not After : Sep 20 13:00:21 2026 GMT
Subject: CN=e43dcd40fc1c61a103bc180d1f974f67dbc915b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:09:4c:76:63:d5:51:5a:a4:64:03:fb:7c:
46:32:55:7c:56:25:99:24:94:72:7f:26:58:f9:02:
a9:18:c6:06:4e:9b:d1:da:a2:1a:c1:93:42:40:47:
d3:79:86:17:f3:9f:87:b0:80:16:e3:7e:68:bd:7b:
5d:ee:a5:6e:82:92:a0:f0:b0:06:28:f2:eb:b1:cc:
17:18:50:29:51:b4:c4:9b:29:18:73:50:44:10:7b:
91:de:6f:94:99:f0:25:f1:d8:8f:5e:fb:25:8e:f1:
86:0a:ca:d5:ee:73:b9:75:65:92:b8:f2:60:35:de:
bb:1b:9a:2c:9a:cc:1a:72:70:ac:31:8b:74:5a:1d:
39:a5:1f:8a:a4:3d:f3:98:00:55:0c:16:95:40:3e:
c9:51:bf:84:c4:40:3a:0d:cc:1e:9a:b7:73:7a:b5:
70:00:11:7b:f2:a9:28:e5:76:3e:7b:e4:6f:2b:6f:
fb:ef:e0:1e:4d:fa:b7:ae:94:3e:93:af:59:ad:22:
bf:0e:da:11:c4:f7:a8:f1:7d:15:8d:d5:0f:1d:4f:
32:e7:1a:c9:79:56:ac:d5:51:b4:14:a5:73:df:58:
87:36:3d:bf:09:b3:07:cc:46:27:3d:d7:7c:b1:e5:
4b:77:ee:60:d4:bc:d7:d1:2e:a4:e7:9f:49:7d:f7:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:CD:40:FC:1C:61:A1:03:BC:18:0D:1F:97:4F:67:DB:C9:15:B8
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:73:29:50:88:1e:91:ca:c5:76:99:52:4d:cb:df:3c:1c:
9f:bd:97:6b:07:a2:6c:79:78:43:27:91:06:b5:ce:60:b5:e1:
84:c5:a8:e4:28:e4:57:8f:24:cf:0c:b1:0d:ad:73:2f:81:81:
af:29:3c:66:45:98:c2:ce:bc:35:b4:14:e8:e7:49:74:e9:a9:
c8:e3:d2:b1:c0:9c:e4:97:81:5d:32:2b:48:fd:fe:84:4f:82:
82:53:d0:0e:8d:96:69:2a:c5:d6:c9:4d:0a:61:38:20:03:9d:
ea:3e:67:20:57:3a:ae:12:57:d6:9d:7f:d3:9d:67:96:93:5d:
05:44:70:70:52:16:bd:42:71:fc:2e:8a:3c:ab:4d:2d:b3:28:
35:e6:62:be:72:6a:56:6f:cf:b5:37:34:c8:f6:f3:d0:08:da:
7f:71:35:c7:68:40:59:02:bb:78:f7:ef:ed:25:c2:7b:73:42:
c2:b3:b1:d3:0e:1d:c9:d2:5e:1f:d4:38:d6:1b:64:b7:94:39:
8e:89:48:a0:2d:56:3b:6f:a7:08:a0:52:cf:a3:27:40:60:ed:
ff:43:f9:c3:64:16:fc:83:38:cb:87:33:a1:78:00:d2:9e:5f:
e6:d9:e0:e4:23:81:c3:fa:a5:aa:d7:51:09:c1:e1:da:92:48:
be:37:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 20:58:53 2026 by rpki-client