Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: Tb6dBRqUU2Zxbuem3QEHQ/2nRjvuq4XvXjLIEUK25mY=
Subject key identifier: F2:4E:66:BB:0D:73:BC:EF:07:65:BE:52:10:EA:DF:E6:E8:63:56:A8
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019EE479ED12D9C044E17639D17268B2EC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 16B8
Signing time: Sat 20 Jun 2026 10:00:56 +0000
Manifest this update: Sat 20 Jun 2026 10:00:56 +0000
Manifest next update: Sun 21 Jun 2026 10:00:56 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 00DEeIiJ2Ng23/lwyp1uCVIJpBtsiB9DP0Yhrl/V0Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:79:ed:12:d9:c0:44:e1:76:39:d1:72:68:b2:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Jun 20 10:00:56 2026 GMT
Not After : Jun 21 10:00:56 2026 GMT
Subject: CN=f24e66bb0d73bcef0765be5210eadfe6e86356a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:e7:14:89:bc:f1:b5:0c:f9:df:c4:be:b8:
24:2d:10:28:c2:e2:40:ce:0a:40:74:f7:43:b0:03:
e7:c7:07:c5:54:c1:6e:8b:b6:43:4b:24:52:2b:fb:
c1:57:ef:33:39:0d:1f:ec:ec:d9:d8:b0:59:58:10:
c1:a9:87:93:b8:68:3f:78:68:80:c2:c5:e7:2a:48:
2c:55:b0:60:84:96:09:c4:01:71:88:51:bd:fa:ae:
bc:53:b2:a9:46:31:f5:37:c0:8a:fa:7b:45:d2:b6:
2f:cf:b0:b6:d0:09:d1:88:a4:33:c1:a1:f1:da:b4:
c4:cb:88:ef:d8:4b:14:b5:79:a9:da:33:2d:88:5c:
4b:80:59:bd:fc:51:96:92:99:d3:b9:da:e9:9a:9c:
ab:77:7a:0e:69:b7:65:f7:33:e1:df:e6:55:75:fb:
c5:78:ff:f0:a2:26:5d:d9:76:36:26:fc:f0:4c:2b:
85:0b:ef:1e:b1:b9:ff:aa:25:58:a7:d4:9a:6e:fe:
6e:f7:2c:f5:97:8d:3a:0a:aa:e7:15:35:f3:f3:40:
d6:96:6e:30:99:ad:11:f5:af:ab:72:14:24:65:ae:
c3:ba:f3:97:49:98:12:3e:75:57:52:37:74:1b:fe:
35:95:4e:f6:4b:ee:97:fc:c9:8c:7b:59:50:b7:f1:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:66:BB:0D:73:BC:EF:07:65:BE:52:10:EA:DF:E6:E8:63:56:A8
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7e:0b:72:0b:90:52:a5:53:6c:ad:20:1d:ba:7e:4d:6d:99:
bd:46:bf:4b:92:b1:e0:67:61:5e:2b:b3:e2:0c:2c:c3:cd:e4:
95:27:42:5b:7c:44:88:c9:90:33:14:70:77:fd:82:0b:e5:6b:
f0:36:00:26:ac:3a:7b:f7:a7:cb:5b:01:e4:58:57:4b:19:68:
4d:96:40:36:c5:44:db:f6:6a:2d:bc:d2:ef:8f:7b:2b:ee:bd:
96:39:3e:b4:2c:9e:fe:f2:90:35:8d:a1:eb:79:fb:4e:43:5a:
9a:4c:70:63:70:76:a5:4c:9a:0e:4a:0c:b0:f7:81:e2:bd:00:
f9:e9:88:0c:2f:2c:8b:c8:83:8f:a9:4b:c4:1e:17:da:0d:29:
5a:83:d9:2b:19:e8:b8:91:23:af:38:f4:28:a4:c7:6c:27:18:
1f:04:ed:7e:9d:82:98:94:c0:40:23:0b:ae:e8:4b:02:a7:af:
df:b7:4b:6f:fa:d4:94:2b:c1:08:07:ea:9f:83:17:6e:6c:ec:
27:93:b6:7f:5f:1c:fb:94:2b:9e:27:b4:2b:af:c7:ee:5b:63:
0b:02:ca:7c:d4:48:39:6b:0b:97:ac:07:eb:1e:61:83:b1:d7:
4e:e6:76:d8:2d:46:03:05:51:53:f7:ac:3d:be:56:16:95:83:
da:21:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 20:13:59 2026 by rpki-client