Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: wlLefSPrxb/cud2AoQ/bBS2BMdzGMavMGniLEZZApB0=
Subject key identifier: DC:DB:F3:09:15:3D:30:04:7F:79:A4:AD:62:01:4D:61:F0:C6:5D:CE
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019DFACD7B7AC9D3F1921E2E341EA7138A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 163F
Signing time: Wed 06 May 2026 01:01:03 +0000
Manifest this update: Wed 06 May 2026 01:01:03 +0000
Manifest next update: Thu 07 May 2026 01:01:03 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: VD2mAQj7quR4iVwjTyqznvjul12+ZhTjMDd5QKyDwxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:cd:7b:7a:c9:d3:f1:92:1e:2e:34:1e:a7:13:8a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: May 6 01:01:03 2026 GMT
Not After : May 7 01:01:03 2026 GMT
Subject: CN=dcdbf309153d30047f79a4ad62014d61f0c65dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:7a:a5:64:e4:20:61:e3:2b:bf:43:c9:21:
4f:0c:5e:98:25:25:e7:d0:d3:a6:29:2f:7f:19:b2:
af:39:b9:fe:78:0c:3a:fb:bb:c1:c7:75:ac:af:73:
95:46:be:ff:b3:68:6b:d7:d9:75:56:2c:39:2d:4b:
9c:70:0f:33:6a:9b:a6:fe:42:52:89:51:2a:49:fa:
e0:70:ce:58:c4:51:eb:29:00:5b:2b:b3:f8:ca:6d:
ef:96:d3:d8:19:21:63:f8:3b:9b:4a:e2:22:64:ec:
1e:53:1e:51:b3:f7:d9:94:98:e9:65:9b:f5:cd:8e:
20:1f:99:4f:e7:4e:c7:9c:42:76:35:06:19:5a:b5:
44:95:1f:36:1d:23:65:93:78:d9:75:bc:45:c3:07:
b8:50:f3:70:bf:02:fe:10:6c:55:64:85:46:2d:89:
cf:0a:43:71:ca:f5:75:07:af:f1:5e:f7:ca:7d:26:
0c:c0:26:93:8c:b1:8e:69:6a:37:aa:bd:07:85:58:
4f:76:cd:1f:c3:26:9e:55:c9:8e:1e:bc:f2:ea:fe:
2c:11:6f:88:73:71:37:b9:0a:6f:b5:a9:45:97:9a:
68:bd:e3:6c:11:da:05:23:24:23:53:a5:8b:1b:63:
91:9f:9a:33:4b:e4:34:09:19:e2:28:81:bf:72:e7:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:F3:09:15:3D:30:04:7F:79:A4:AD:62:01:4D:61:F0:C6:5D:CE
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:28:88:cb:b4:df:bf:d4:6a:56:1d:07:c9:76:4e:91:82:68:
27:3b:b5:d0:c9:3d:37:e8:c0:f2:9c:f9:87:8a:0d:de:31:f0:
26:fa:cb:01:58:7e:c8:d6:81:12:ca:98:3b:c9:3e:1e:16:9d:
c2:a3:38:12:3a:60:0c:50:a4:74:be:d5:d1:f0:f6:7b:74:e4:
14:0b:cf:9d:28:96:30:fa:55:d6:d1:2b:ea:a2:64:72:fa:cd:
43:92:e5:5e:23:2e:99:d4:59:1f:8e:f2:7b:6a:4f:0b:88:bd:
07:b1:01:70:b9:7b:bb:9c:05:1f:3f:72:eb:b3:90:9a:36:68:
bd:50:fc:a3:b1:57:06:22:76:17:0a:5d:f6:65:30:c0:8c:8b:
f1:ac:d1:50:5a:c5:36:df:ba:d0:3f:b8:59:95:eb:3c:a1:98:
68:6a:4e:f1:01:a4:aa:4f:5e:82:30:c6:88:be:a2:e7:cd:43:
7d:bf:8f:7c:76:f7:81:24:c6:ff:fe:cb:b9:83:13:c0:97:2b:
8d:80:37:2e:a6:75:7a:2d:e4:af:1c:39:5b:d3:eb:b8:38:96:
68:37:0e:4f:70:43:0f:63:19:dc:05:78:cd:94:a6:7f:7a:5d:
e1:1a:4a:84:37:5e:49:67:9d:ee:2b:0d:c0:89:0d:c9:01:da:
6f:11:43:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ36zXt6ydPxkh4uNB6nE4psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0
YzM1YjQwHhcNMjYwNTA2MDEwMTAzWhcNMjYwNTA3MDEwMTAzWjAzMTEwLwYDVQQD
EyhkY2RiZjMwOTE1M2QzMDA0N2Y3OWE0YWQ2MjAxNGQ2MWYwYzY1ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk16pWTkIGHjK79DySFPDF6YJSXn
0NOmKS9/GbKvObn+eAw6+7vBx3Wsr3OVRr7/s2hr19l1Viw5LUuccA8zapum/kJS
iVEqSfrgcM5YxFHrKQBbK7P4ym3vltPYGSFj+DubSuIiZOweUx5Rs/fZlJjpZZv1
zY4gH5lP507HnEJ2NQYZWrVElR82HSNlk3jZdbxFwwe4UPNwvwL+EGxVZIVGLYnP
CkNxyvV1B6/xXvfKfSYMwCaTjLGOaWo3qr0HhVhPds0fwyaeVcmOHrzy6v4sEW+I
c3E3uQpvtalFl5poveNsEdoFIyQjU6WLG2ORn5ozS+Q0CRniKIG/cuePMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzb8wkVPTAEf3mkrWIBTWHwxl3OMB8GA1UdIwQY
MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt
ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm
LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSiIy7Tf
v9RqVh0HyXZOkYJoJzu10Mk9N+jA8pz5h4oN3jHwJvrLAVh+yNaBEsqYO8k+Hhad
wqM4EjpgDFCkdL7V0fD2e3TkFAvPnSiWMPpV1tEr6qJkcvrNQ5LlXiMumdRZH47y
e2pPC4i9B7EBcLl7u5wFHz9y67OQmjZovVD8o7FXBiJ2Fwpd9mUwwIyL8azRUFrF
Nt+60D+4WZXrPKGYaGpO8QGkqk9egjDGiL6i581Dfb+PfHb3gSTG//7LuYMTwJcr
jYA3LqZ1ei3krxw5W9PruDiWaDcOT3BDD2MZ3AV4zZSmf3pd4RpKhDdeSWed7isN
wIkNyQHabxFDMg==
-----END CERTIFICATE-----
Generated at Wed May 6 06:29:12 2026 by rpki-client