Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: pFkbAxuJzLdqRd2+mjU3PnwFJQh98jriNwPvVTMols4=
Subject key identifier: 02:16:01:F0:A7:58:AB:3C:AB:7F:84:72:99:F2:85:B0:21:3A:69:B2
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019F954A5FEAAECA025D1DC753C176A07E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 18:01:47 +0000
Manifest this update: Fri 24 Jul 2026 18:01:47 +0000
Manifest next update: Sat 25 Jul 2026 18:01:47 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: gVr0B3zTb1hqCgdt+/0SzLi1UHEY0KveI4qjxbCWd4s=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:5f:ea:ae:ca:02:5d:1d:c7:53:c1:76:a0:7e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Jul 24 18:01:47 2026 GMT
Not After : Jul 25 18:01:47 2026 GMT
Subject: CN=021601f0a758ab3cab7f847299f285b0213a69b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:a1:c5:00:fe:a8:e4:90:ce:0a:4a:3b:b8:
2c:70:14:d6:05:e4:cd:27:6b:e3:77:73:b8:a2:0c:
63:79:3b:4b:22:15:cc:35:6d:97:8a:67:3b:2d:87:
4f:78:de:4b:70:86:54:7e:a3:c4:43:66:ba:cc:7b:
1f:d5:27:4d:f8:3d:4d:65:77:58:47:9c:9b:8c:8f:
a2:b9:f1:cb:94:3d:fc:87:c6:b8:ec:11:09:69:06:
7e:81:e7:cd:37:4a:cb:88:2e:21:69:3a:dd:65:59:
7d:11:65:1a:e1:32:2c:22:0d:4a:5a:68:a2:db:05:
97:e3:96:73:c8:ff:59:b8:59:69:c9:32:bb:2f:20:
63:8d:5a:35:2b:16:14:32:2b:68:91:f2:8f:50:92:
49:0a:e1:36:29:36:a2:54:a7:52:1b:75:f2:cf:a9:
02:a3:10:0c:47:e0:94:3b:27:82:59:31:07:bb:b7:
24:bc:0a:35:63:a5:14:f3:4d:76:7f:87:1e:7f:9c:
f4:68:02:74:33:42:39:9a:d1:b0:ed:70:58:96:e2:
bd:4e:a9:fc:25:0e:cf:a4:41:27:62:49:b7:77:90:
a1:1a:bb:d1:e7:84:82:5d:53:52:51:45:45:f0:1d:
e4:9b:09:83:98:5e:22:95:f3:ae:2a:44:a8:55:a6:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:01:F0:A7:58:AB:3C:AB:7F:84:72:99:F2:85:B0:21:3A:69:B2
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:17:44:a4:c7:7b:7f:48:ac:a6:c1:07:20:58:92:02:41:
6a:15:cd:11:1b:f6:3c:38:34:90:39:e9:97:f2:51:5d:75:e7:
16:7e:be:7d:14:22:c5:c9:d7:2b:40:05:70:b2:3b:70:a5:5a:
ee:ea:86:2c:e6:3a:07:b2:be:0e:b7:84:ee:d0:79:0c:da:5a:
12:3b:57:28:08:e8:9b:47:0b:de:75:a3:a4:fe:75:84:49:16:
28:f6:61:ed:8b:a4:87:98:e2:85:9a:aa:cc:19:40:83:5d:a5:
3a:e0:a1:40:e4:55:2b:61:4d:46:4d:ec:6a:4d:04:fc:90:ba:
e9:c4:97:db:39:c2:5e:9e:f2:30:d4:86:86:1b:33:fe:ae:fe:
d7:6c:57:f2:95:c8:9c:79:da:39:a1:9b:a0:2a:92:ce:61:b1:
a3:4a:0b:af:39:a4:a4:f8:b1:b6:34:dc:4b:a5:3b:61:9d:f6:
13:9d:a8:58:01:d0:29:c6:c2:f2:c8:e3:90:4b:33:6e:82:62:
40:e5:36:e3:c9:80:c7:88:a5:d9:c2:d5:39:0b:c9:10:87:bf:
ed:14:30:72:d6:3a:4b:0a:9f:5a:f3:d0:78:27:26:6d:58:c3:
c8:da:7e:01:9c:e9:68:e0:af:f7:8f:0f:e8:4d:ed:62:19:1d:
fc:5d:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:24 2026 by rpki-client