Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: ggs8R24c568vdZrsASLTcbMFZahGGotbldzdRNiCV4s=
Subject key identifier: D3:E4:7D:32:27:00:58:97:9E:88:9B:14:8B:31:BB:69:B6:8E:8C:B4
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019D2772DB9ED6F4480944F399B0B82B93C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: Sfnu2lZqm9heQgFAEEZKUzxQYKinm1Dcoh5vB24+liU=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:db:9e:d6:f4:48:09:44:f3:99:b0:b8:2b:93:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=d3e47d32270058979e889b148b31bb69b68e8cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:8c:57:f5:a9:06:03:5c:ea:bf:17:e5:78:
58:57:16:03:82:08:ff:11:ad:e1:25:d1:57:90:05:
a8:72:32:d8:b0:6e:b2:c0:e7:7d:11:46:1c:76:2e:
b1:41:5e:c8:76:c8:23:f5:ef:31:b2:46:bd:f1:64:
76:87:8b:4c:90:fb:84:96:d3:2a:98:48:87:dd:c5:
3e:35:4f:42:65:43:16:16:5f:f2:4e:29:ea:f5:67:
c7:3d:e9:7b:f1:95:6c:00:d1:b5:73:b4:ab:a5:74:
46:8e:c0:26:9d:74:86:4f:8a:11:12:a1:d2:b0:17:
f0:4e:5e:22:e9:90:5c:22:5c:9e:76:79:10:d2:b5:
49:64:f1:8d:1d:a9:d2:e0:62:0a:12:78:11:59:9a:
df:3b:16:4d:ee:1a:2e:ef:72:f4:08:09:24:0b:e3:
9e:ca:b5:1b:a2:c3:d9:27:29:75:4b:16:b4:2a:0b:
5c:98:93:b9:ab:75:52:e0:7e:30:c0:e8:0c:ac:6b:
0a:36:f7:0e:66:88:c8:a0:e3:73:42:e2:91:ee:53:
e7:a4:42:98:75:23:5d:0f:c5:0b:17:32:7f:b2:99:
1b:b4:64:c4:73:26:73:45:16:b1:2e:12:8e:4f:0d:
df:d9:1e:91:49:1a:d5:00:4a:c5:1a:71:f3:e1:14:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:7D:32:27:00:58:97:9E:88:9B:14:8B:31:BB:69:B6:8E:8C:B4
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:16:16:e8:a8:bb:8b:55:a0:83:17:66:b0:bd:c6:ae:75:
25:ad:25:94:c3:69:34:4a:fa:2e:29:ff:f1:d8:d9:64:72:f8:
90:01:40:92:07:5a:80:c6:b9:fd:be:2e:5a:f5:d3:79:03:2c:
b4:bd:2c:25:d9:69:31:78:be:38:7b:ea:1f:59:21:e0:11:1a:
f9:70:8c:87:77:f8:80:62:d5:d7:af:7a:34:ed:90:cc:34:03:
51:eb:52:47:f8:93:cd:04:2e:aa:49:91:1b:da:a1:80:8c:3c:
75:32:af:f4:12:ca:d4:92:89:fa:86:87:81:49:cd:f4:76:e1:
49:ef:34:b9:0d:24:4d:e2:af:a1:99:87:28:a2:10:45:94:d4:
72:c2:a7:c0:1c:a6:5b:4a:7a:35:a9:ce:d1:ae:d1:97:c0:8d:
59:a3:b7:83:1e:ea:e7:5d:b2:71:3b:72:eb:ed:31:55:1f:41:
c6:d6:4d:35:13:b1:4e:0e:7b:e8:d3:8c:d2:3a:37:c2:64:cf:
56:62:fe:4b:d9:38:19:48:59:5d:b9:21:09:be:3f:b4:71:38:
81:29:03:af:5b:c0:87:bb:e0:40:58:5e:cd:bd:4b:a4:de:e5:
24:87:90:97:73:ae:0f:89:bd:a5:a6:8e:08:30:85:4b:0c:59:
50:b7:93:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nctue1vRICUTzmbC4K5PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjYwMzI2MDAwMjExWhcNMjYwMzI3MDAwMjExWjAzMTEwLwYDVQQD
EyhkM2U0N2QzMjI3MDA1ODk3OWU4ODliMTQ4YjMxYmI2OWI2OGU4Y2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBSMV/WpBgNc6r8X5XhYVxYDggj/
Ea3hJdFXkAWocjLYsG6ywOd9EUYcdi6xQV7Idsgj9e8xska98WR2h4tMkPuEltMq
mEiH3cU+NU9CZUMWFl/yTinq9WfHPel78ZVsANG1c7SrpXRGjsAmnXSGT4oREqHS
sBfwTl4i6ZBcIlyednkQ0rVJZPGNHanS4GIKEngRWZrfOxZN7hou73L0CAkkC+Oe
yrUbosPZJyl1Sxa0KgtcmJO5q3VS4H4wwOgMrGsKNvcOZojIoONzQuKR7lPnpEKY
dSNdD8ULFzJ/spkbtGTEcyZzRRaxLhKOTw3f2R6RSRrVAErFGnHz4RTJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPkfTInAFiXnoibFIsxu2m2joy0MB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMScWFuio
u4tVoIMXZrC9xq51Ja0llMNpNEr6Lin/8djZZHL4kAFAkgdagMa5/b4uWvXTeQMs
tL0sJdlpMXi+OHvqH1kh4BEa+XCMh3f4gGLV1696NO2QzDQDUetSR/iTzQQuqkmR
G9qhgIw8dTKv9BLK1JKJ+oaHgUnN9HbhSe80uQ0kTeKvoZmHKKIQRZTUcsKnwBym
W0p6NanO0a7Rl8CNWaO3gx7q512ycTty6+0xVR9BxtZNNROxTg576NOM0jo3wmTP
VmL+S9k4GUhZXbkhCb4/tHE4gSkDr1vAh7vgQFhezb1LpN7lJIeQl3OuD4m9paaO
CDCFSwxZULeTdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:34 2026 by rpki-client