Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: GUcwZnaO3tT35a4GbjWHH1XvjmHc5XR9QcBa63YsTdc=
Subject key identifier: E1:68:5C:3E:0B:8C:6B:CD:21:8A:51:60:98:A9:7C:1F:E6:69:1C:14
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019D1120724294772580E81E8944A6BDBE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 15C6
Signing time: Sat 21 Mar 2026 16:00:32 +0000
Manifest this update: Sat 21 Mar 2026 16:00:32 +0000
Manifest next update: Sun 22 Mar 2026 16:00:32 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: LzAqnl+Hia+5YWtJCTSDGhwDfz/LBP5Ml7nKU1xJq6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:20:72:42:94:77:25:80:e8:1e:89:44:a6:bd:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Mar 21 16:00:32 2026 GMT
Not After : Mar 22 16:00:32 2026 GMT
Subject: CN=e1685c3e0b8c6bcd218a516098a97c1fe6691c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:79:77:4b:bc:59:0e:66:39:1c:5e:92:56:
b3:30:5e:b2:e1:ad:0e:68:05:cd:a8:fe:a2:66:58:
7b:14:1c:7f:4c:25:68:85:2e:af:0f:15:46:86:8c:
2c:a4:34:1c:c5:ad:f9:b2:2f:27:52:5a:89:8d:45:
df:60:bf:89:dd:f5:c6:5c:e6:b1:f8:c5:13:16:69:
5c:f3:42:a5:47:9c:d5:9f:8a:64:3e:77:f7:30:82:
bd:57:a7:b3:fc:7c:97:c9:57:66:3d:8b:4b:9d:a6:
06:a4:07:30:10:67:4e:52:e5:16:0b:86:01:da:1b:
23:9f:4a:68:16:ff:01:e3:8b:9e:43:3a:09:a2:10:
bd:32:0b:ed:87:8a:b2:fc:30:21:20:bf:89:0a:87:
27:9c:53:cf:c2:6b:d5:81:80:6f:21:d4:89:c1:76:
01:83:cb:73:1a:cd:84:36:08:00:a5:db:cd:cd:31:
65:d2:53:ca:90:e5:9b:78:e5:c5:4c:18:02:fa:7c:
1a:07:01:18:a3:9f:7c:6f:d3:8d:06:65:f2:28:ee:
0a:9f:f3:23:b0:d9:98:02:79:5d:dd:bd:f8:03:bf:
91:b2:85:83:bd:57:9b:53:22:95:2a:b9:ba:ab:38:
a8:61:b2:88:e4:1f:84:34:12:83:4c:0d:36:5b:85:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:5C:3E:0B:8C:6B:CD:21:8A:51:60:98:A9:7C:1F:E6:69:1C:14
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fd:33:1c:6c:22:14:b4:1a:28:3a:eb:66:21:49:32:4a:14:
1e:7f:26:ee:00:7b:32:e1:95:a5:dc:a0:f5:92:c7:dd:3a:b6:
e0:70:de:36:8c:a2:1d:67:74:6d:ed:38:a4:50:9c:70:fb:31:
34:6d:1e:a7:cc:2d:00:74:61:f8:a4:17:72:56:52:4c:9e:0c:
ff:62:72:91:9d:bb:d4:34:2f:9a:d1:55:05:bd:93:bc:bb:76:
24:c6:7a:f7:7c:93:cc:d3:7c:76:b8:52:18:8a:47:78:81:0a:
7c:d1:0b:a7:2d:b5:c7:55:c6:30:24:6d:6e:bf:77:4c:b9:a7:
30:59:f3:f6:6a:80:5b:72:fb:95:49:da:92:23:21:98:6f:04:
aa:d4:9d:26:0e:37:31:51:ba:0d:fa:d2:f6:f0:35:c2:96:9f:
d1:3e:3f:9c:10:7e:7c:14:4f:9b:2e:b1:dd:35:d4:72:28:58:
76:18:45:58:95:53:9a:f3:f2:88:3f:69:f1:87:b1:de:a7:e8:
95:e6:23:b8:6d:91:68:07:62:1c:15:58:a9:f5:f7:35:34:bc:
ac:cb:41:bd:46:66:46:e6:ea:ff:c8:93:ad:63:d4:55:6f:d1:
8c:7d:57:ab:82:0a:0e:88:2a:d0:5b:aa:40:f5:56:1e:58:0f:
47:e7:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:37:29 2026 by rpki-client