Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: c10V9OPNlaoa8Z3p9uyuPbPVmIxEuzzEZUefSMifBRc=
Subject key identifier: 34:39:9E:DF:2D:83:CB:65:18:4A:C8:5E:67:61:C0:00:F7:9B:4A:69
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019D25830E5EE4D99D716F890F9A3C323DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0D1C
Signing time: Wed 25 Mar 2026 15:00:38 +0000
Manifest this update: Wed 25 Mar 2026 15:00:38 +0000
Manifest next update: Thu 26 Mar 2026 15:00:38 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: rZyGsyjVsd9y2JqV0ATTCd0E1qYQplwgRMlSxvWQqXQ=)
2: nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa (hash: wB/xRE6h3geXqO4q4Rpv5x1ICmOWqRPL+trpbmTd4xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:0e:5e:e4:d9:9d:71:6f:89:0f:9a:3c:32:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Mar 25 15:00:38 2026 GMT
Not After : Mar 26 15:00:38 2026 GMT
Subject: CN=34399edf2d83cb65184ac85e6761c000f79b4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:e3:8f:a0:ca:91:4a:e1:9d:10:87:fe:42:
13:77:6d:bc:1a:27:8a:1d:47:09:ac:0b:a1:7c:1f:
58:30:38:a6:aa:f3:1d:d2:bf:52:4f:f5:62:84:7e:
ad:3a:c2:53:80:85:00:f2:db:67:e4:be:6a:08:2c:
47:49:eb:0f:a8:6c:a8:1e:93:65:ba:4c:2f:41:24:
9c:f5:6d:e1:5c:e7:d6:b7:5d:22:c0:97:1b:fa:16:
45:3e:7a:20:23:a1:6e:e6:27:1e:8d:3f:68:85:fd:
09:82:28:70:48:8e:aa:5d:32:88:98:6b:68:4e:55:
cd:83:08:35:6d:a0:30:2a:0c:aa:56:03:f7:8d:7b:
30:30:ca:f6:82:50:98:69:a0:8f:43:84:24:04:36:
c2:ce:9c:77:b6:7f:ab:91:42:fe:36:83:51:52:2c:
aa:f5:55:35:e9:b9:cc:9e:ab:05:07:f4:3e:d6:3c:
63:7c:22:54:8f:d0:08:1f:bf:3f:9e:37:e9:bb:34:
b6:ec:44:07:09:fb:36:c2:41:e5:dd:13:19:84:3c:
00:e3:57:1a:04:24:fc:a4:60:fd:01:79:a1:bb:34:
5f:9a:7a:65:ba:3f:67:1e:c6:c7:9a:5a:04:4c:88:
8b:8b:9f:4a:56:c9:99:88:cf:4d:38:dd:e2:d6:4d:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:9E:DF:2D:83:CB:65:18:4A:C8:5E:67:61:C0:00:F7:9B:4A:69
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:27:b5:cb:71:7a:39:48:97:f0:3f:20:1c:99:56:f3:6d:80:
65:0e:d6:9e:f7:b7:36:b0:9d:a9:54:11:47:4e:23:6d:92:d7:
bb:86:90:b0:9e:1d:59:b5:38:98:6a:be:8a:e2:93:d7:67:d3:
d9:3b:33:e9:d6:b9:6a:44:f9:b9:22:17:49:f8:83:fc:78:c4:
63:9e:e3:48:bf:ee:a8:31:27:53:98:6c:8d:6b:6f:96:6d:5c:
f1:32:c9:2f:64:f4:2e:f1:b0:82:29:2b:f7:85:cf:55:c7:f0:
ad:e1:ee:cb:2c:e9:19:c7:e8:60:fb:40:82:22:34:e5:c0:19:
99:48:0c:77:b9:8d:65:5a:de:c7:0c:a0:9e:77:89:88:38:4f:
2b:25:0c:de:95:9d:6d:aa:c1:01:9e:d0:a9:97:c8:4a:78:02:
fe:41:d3:06:f2:0c:16:36:84:2a:aa:8d:fe:2a:a6:fd:a8:36:
4b:15:e1:3c:37:97:fa:d9:d5:c2:16:56:4e:59:22:c8:5f:9e:
42:7c:52:9f:4d:48:d4:9a:69:33:1a:22:22:11:3f:62:9b:9f:
a4:0e:a6:1e:e4:75:b2:8e:01:c5:e0:b4:de:ad:84:c6:7d:3f:
8f:4f:19:55:e6:ad:51:94:7b:8c:a2:06:c9:22:6e:06:ae:92:
1f:5e:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:39 2026 by rpki-client