Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: iGP1RZFSdFHXtV4eYGtOWFsKMBqsA2DODHTWnWKfujk=
Subject key identifier: 62:71:B0:DF:45:E1:F8:2D:87:D3:8A:16:EC:1E:67:2E:C1:90:F0:8B
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 01A10FCDA5DFACC40DC601563203FBE057DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 06:01:37 +0000
Manifest this update: Tue 06 Oct 2026 06:01:37 +0000
Manifest next update: Wed 07 Oct 2026 06:01:37 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: jmC74OXuxJVvmAfw1N8/hX38Y9bJyC/wBQ5pnxqH4bI=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cd:a5:df:ac:c4:0d:c6:01:56:32:03:fb:e0:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Oct 6 06:01:37 2026 GMT
Not After : Oct 7 06:01:37 2026 GMT
Subject: CN=6271b0df45e1f82d87d38a16ec1e672ec190f08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:3e:9e:c8:fc:4b:74:ad:5f:a3:be:61:53:
ba:96:9c:2d:ff:48:a0:3e:8b:c2:a4:71:72:9c:d1:
a6:26:ca:81:3a:c3:77:86:7e:f5:1d:a7:79:2f:b6:
74:c2:1f:88:d9:4c:5e:a8:bd:bd:d7:00:a6:99:64:
f6:63:46:38:a6:51:9d:f9:49:45:06:69:d6:ca:a2:
61:fc:d2:d1:f0:fa:ca:18:dc:92:18:f2:96:a1:a9:
65:29:28:b3:0b:e5:01:74:6e:b1:7b:06:90:f1:86:
a9:09:0d:e8:27:57:f3:a8:1c:77:48:c1:ed:2e:bc:
36:b6:43:44:4b:90:df:7f:1a:c9:6d:00:b3:89:c4:
5f:61:c3:78:cd:50:a3:8d:4e:13:5a:cb:6d:d8:87:
c0:c5:0b:af:d4:3c:3e:84:60:36:22:75:ce:0f:dc:
c7:7d:63:60:d4:a1:f8:1b:e7:6a:e7:4f:c0:c7:40:
71:d0:f1:8d:42:9c:19:8e:7f:0e:f8:06:30:5e:99:
87:64:25:54:2a:e8:f0:d9:d5:ff:ec:cb:de:14:2c:
b3:70:e1:09:b7:9c:3b:33:96:f6:ae:bd:f5:c3:73:
e1:13:fe:b2:ee:55:9c:c5:65:49:a8:29:78:be:75:
7b:e4:63:ba:2c:ad:56:f1:bb:58:18:03:f2:24:80:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:B0:DF:45:E1:F8:2D:87:D3:8A:16:EC:1E:67:2E:C1:90:F0:8B
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:32:b2:83:e0:c7:de:8a:45:9c:54:d2:58:b5:10:52:2d:ca:
0b:28:37:66:c5:e8:a9:a6:ee:b0:d0:bf:a4:a5:a7:52:9b:04:
05:24:4e:35:e3:3d:81:33:18:b6:ae:b8:93:73:08:63:f0:34:
ad:5d:06:7a:6c:cb:a5:dd:76:4c:72:10:5f:ed:ca:cf:c3:36:
bf:5e:01:29:8b:d7:d2:fc:dc:84:60:51:50:3b:36:db:e0:f2:
9f:c9:b2:e2:e1:e8:c3:6e:ee:97:49:d1:1e:fe:b6:b4:3f:be:
94:cf:28:b4:5d:58:34:ae:e7:af:b4:29:c8:4b:31:cd:e8:9d:
79:f3:ce:50:9b:4a:e7:d9:80:f8:b7:b6:f0:eb:5f:80:1f:b4:
53:98:5e:17:ce:53:48:9b:65:c0:7e:c1:9b:81:d2:7a:a6:ec:
b6:4e:ca:8a:57:48:44:f1:2f:5e:0c:8f:9a:9b:3e:54:9b:e3:
93:c5:1f:09:e3:af:63:7e:07:ef:be:b5:02:f7:c9:52:00:0a:
66:c8:27:45:b5:7c:92:fb:38:2a:a9:81:6c:ac:bd:64:cb:58:
be:2e:41:bb:3a:62:77:5c:47:4d:57:d9:09:71:ca:44:69:d9:
4d:c7:d3:fa:e9:54:44:46:fe:a5:20:e4:3f:97:ef:32:4f:2d:
1e:a3:90:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPzaXfrMQNxgFWMgP74FfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjYxMDA2MDYwMTM3WhcNMjYxMDA3MDYwMTM3WjAzMTEwLwYDVQQD
Eyg2MjcxYjBkZjQ1ZTFmODJkODdkMzhhMTZlYzFlNjcyZWMxOTBmMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TU+nsj8S3StX6O+YVO6lpwt/0ig
PovCpHFynNGmJsqBOsN3hn71Had5L7Z0wh+I2UxeqL291wCmmWT2Y0Y4plGd+UlF
BmnWyqJh/NLR8PrKGNySGPKWoallKSizC+UBdG6xewaQ8YapCQ3oJ1fzqBx3SMHt
Lrw2tkNES5DffxrJbQCzicRfYcN4zVCjjU4TWstt2IfAxQuv1Dw+hGA2InXOD9zH
fWNg1KH4G+dq50/Ax0Bx0PGNQpwZjn8O+AYwXpmHZCVUKujw2dX/7MveFCyzcOEJ
t5w7M5b2rr31w3PhE/6y7lWcxWVJqCl4vnV75GO6LK1W8btYGAPyJIC3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJxsN9F4fgth9OKFuweZy7BkPCLMB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjKyg+DH
3opFnFTSWLUQUi3KCyg3ZsXoqabusNC/pKWnUpsEBSRONeM9gTMYtq64k3MIY/A0
rV0GemzLpd12THIQX+3Kz8M2v14BKYvX0vzchGBRUDs22+Dyn8my4uHow27ul0nR
Hv62tD++lM8otF1YNK7nr7QpyEsxzeidefPOUJtK59mA+Le28OtfgB+0U5heF85T
SJtlwH7Bm4HSeqbstk7KildIRPEvXgyPmps+VJvjk8UfCeOvY34H7761AvfJUgAK
ZsgnRbV8kvs4KqmBbKy9ZMtYvi5Buzpid1xHTVfZCXHKRGnZTcfT+ulUREb+pSDk
P5fvMk8tHqOQww==
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:39:19 2026 by rpki-client