Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
File: GOHT-t4KvYwPvRHViMZdKzQZzt8.mft (raw, json)
Hash identifier: hHUM+DPUsXPBIcvNKDxCIwdbxkG9ifd+3f0Z7j921sA=
Subject key identifier: 8D:32:87:3B:A9:48:21:78:90:E1:7A:A0:AA:9B:FF:92:FA:99:E7:FB
Authority key identifier: 18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
Certificate issuer: /CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Certificate serial: 01A172B8688F85BAEF442AFBA2251480F684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
Manifest number: 6F
Signing time: Sun 25 Oct 2026 11:00:50 +0000
Manifest this update: Sun 25 Oct 2026 11:00:50 +0000
Manifest next update: Mon 26 Oct 2026 11:00:50 +0000
Files and hashes: 1: 0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa (hash: 5OnTSgOmHXF9aC2oY1o80TpVqcSBGodjVSzKDjL92Ic=)
2: GOHT-t4KvYwPvRHViMZdKzQZzt8.crl (hash: a856iaBIEKUoIbreKBdnRTMsGjkjmWIpikE7hDEJ51s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:68:8f:85:ba:ef:44:2a:fb:a2:25:14:80:f6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Validity
Not Before: Oct 25 11:00:50 2026 GMT
Not After : Oct 26 11:00:50 2026 GMT
Subject: CN=8d32873ba948217890e17aa0aa9bff92fa99e7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ef:19:4f:6c:48:d8:d2:97:2f:4f:80:4c:d9:
73:38:16:64:2c:cd:95:d8:ec:73:d6:31:4d:65:34:
e2:42:36:70:b1:6e:30:32:06:d8:be:37:5f:90:b4:
9d:06:ad:e5:ef:db:a8:a6:9f:85:af:45:af:dd:43:
cf:ef:a5:a5:6c:eb:75:96:f8:82:79:2a:78:f4:0a:
f8:04:40:fe:45:30:5c:de:f7:a9:ef:97:9a:a5:e4:
b4:53:b9:3a:d4:ce:ec:a2:db:52:20:6d:d7:86:86:
55:58:6e:eb:75:68:cb:d4:15:4b:99:71:c6:24:90:
7a:50:86:bb:97:ee:bc:00:b7:56:c7:c4:f4:2c:eb:
96:16:99:6c:17:00:76:4b:88:3a:e2:f5:1c:bf:5c:
47:4e:da:12:c6:82:75:6e:f4:b3:35:09:87:90:59:
5e:39:eb:b6:2e:f3:72:c5:c6:ca:e0:8e:c6:ca:1b:
c0:8c:b1:4c:c6:e9:ba:0e:f3:c4:4d:c1:af:ac:1d:
d4:8c:5a:89:f1:ab:94:cc:96:2e:a9:21:d5:44:42:
85:d4:a8:85:15:ce:89:77:ea:83:ba:70:fc:46:4e:
d7:1f:de:91:14:8a:72:22:97:3d:00:0c:4c:1a:a0:
c6:42:3a:0c:e9:06:ec:e9:3b:02:2c:71:ce:55:08:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:87:3B:A9:48:21:78:90:E1:7A:A0:AA:9B:FF:92:FA:99:E7:FB
X509v3 Authority Key Identifier:
keyid:18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:17:05:4d:c2:25:51:c5:ce:1c:8a:81:52:db:5d:09:fb:
ab:77:54:d8:bd:18:77:46:ee:9a:03:2d:27:66:b9:46:4f:d1:
b0:c2:7a:cd:aa:ad:5e:07:e9:a3:51:f1:10:db:d7:ec:52:11:
cb:c9:72:24:2a:38:02:38:ee:a2:76:27:db:d1:91:4d:69:12:
66:18:1f:51:1b:42:c2:f7:cc:f2:20:18:6a:a9:86:95:b0:9f:
fc:2f:db:76:34:0f:d6:aa:e9:dc:da:46:2a:70:19:6f:6e:0c:
33:0e:cb:c4:1d:3e:ce:dd:5d:9d:f7:cb:41:6c:b6:2a:79:96:
cf:06:c7:06:58:76:ce:1d:c3:cd:39:94:e8:42:54:4c:ff:e9:
9d:65:78:6f:49:10:9b:aa:5e:50:89:af:1e:a3:85:48:0e:1c:
0a:32:26:91:5e:1a:c1:3e:24:f5:33:ce:f6:1e:a8:ad:2f:77:
db:ed:12:eb:5a:5a:13:4d:bd:be:5e:3c:40:4e:5c:f5:d3:86:
1a:dc:99:58:77:c8:35:6b:b5:5e:73:45:d2:c9:c3:7a:cd:bb:
48:b6:de:eb:ce:bd:e8:47:9c:39:29:ad:58:46:e2:05:d7:15:
68:0e:41:48:04:a9:d9:13:f1:b5:98:4d:30:cb:d6:28:e8:ea:
58:47:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:27 2026 by rpki-client