Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: efP3dr62qSc70o5tYjmWToRlOpsu1xHIDAT+LQJY2dQ=
Subject key identifier: B4:B3:65:1D:22:8C:AF:A4:EA:58:01:DC:04:64:B2:D1:4B:36:C1:80
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01A0D2DEB31E0EEFE253A0C8D6DE2D4D525A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 17B8
Signing time: Thu 24 Sep 2026 10:03:25 +0000
Manifest this update: Thu 24 Sep 2026 10:03:25 +0000
Manifest next update: Fri 25 Sep 2026 10:03:25 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: uD8RGMLc9PqOLwUlNoER4p+FklFqy34ZQGt+Ta1jiOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:b3:1e:0e:ef:e2:53:a0:c8:d6:de:2d:4d:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Sep 24 10:03:25 2026 GMT
Not After : Sep 25 10:03:25 2026 GMT
Subject: CN=b4b3651d228cafa4ea5801dc0464b2d14b36c180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ce:79:06:f8:e8:3c:bc:9b:54:07:52:cb:c5:
d7:e9:2f:f1:99:33:89:28:4e:71:17:c5:cd:de:e9:
84:9d:45:81:b1:8d:f0:93:89:4f:84:f6:3a:15:bb:
c1:e4:08:c3:87:63:04:77:72:9c:4d:5b:9b:26:ef:
f4:78:c7:a4:42:38:02:43:56:71:09:18:4d:88:97:
93:bc:0e:41:0d:ae:13:bd:d9:81:18:61:aa:1c:1b:
95:0a:8d:9c:73:53:c1:6d:11:24:bb:e1:4c:d2:6d:
71:00:9b:00:a5:ee:6c:a1:87:24:ad:43:79:c9:35:
a7:4a:07:72:c8:f3:86:f8:d7:e7:b4:d1:89:88:23:
eb:c4:db:58:9b:e0:9a:f6:cf:bb:93:9a:65:6a:b8:
20:02:c1:7a:36:ba:d3:89:b8:ec:4a:27:fe:63:a8:
55:ab:5e:2d:91:ec:67:4d:1a:e6:11:02:d8:9d:ef:
44:9e:dc:39:3d:23:3d:97:d3:bd:e4:e4:e5:37:69:
5b:39:18:7d:d1:84:06:18:eb:2f:e6:48:81:96:53:
14:6b:68:e0:62:4d:a7:2b:42:f9:e7:41:80:4a:5a:
fd:27:27:5b:f9:cb:a7:57:df:7a:1d:b7:ac:84:df:
8e:73:7a:35:e2:a2:9a:f3:88:41:eb:46:8b:06:6e:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:65:1D:22:8C:AF:A4:EA:58:01:DC:04:64:B2:D1:4B:36:C1:80
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:2e:d8:62:5c:75:2a:4a:90:c1:03:e0:37:b6:ae:78:f4:
2c:11:84:d5:4d:90:7a:b0:ea:63:db:5a:fb:4c:0c:03:32:ce:
94:19:5d:5a:65:9e:ba:b0:0c:01:4a:ab:ac:e8:ce:6e:b6:38:
39:c2:1a:16:59:d5:8e:99:ea:f6:f4:99:7a:31:40:f1:cb:1c:
8b:df:43:a5:00:e1:fb:4f:cd:a6:1d:c1:3b:ce:8f:d7:ab:4b:
61:d3:d3:af:fc:18:8b:54:d8:81:cd:a2:73:fa:69:60:fd:4a:
1d:a1:c1:51:52:f5:c8:70:f2:25:3f:2d:79:21:76:b3:0e:17:
3f:b0:97:d5:81:74:fd:b7:c9:6c:37:31:30:c8:24:4b:bc:c9:
bc:d2:c9:fa:4d:21:b2:4b:6d:9c:74:bb:6b:8f:3c:01:90:ee:
8d:9e:5a:22:95:6f:4e:31:11:0f:f6:a7:8f:c6:8a:f8:c0:ed:
b9:46:60:c7:ca:8e:4f:f7:81:5c:9f:70:fe:02:5f:ee:7b:1b:
65:d9:61:9a:97:28:03:51:50:3c:82:00:50:80:1b:1e:51:87:
ea:f4:14:8f:11:10:59:57:aa:c7:f4:c7:f5:6a:4b:a9:1f:00:
00:88:87:d2:b8:50:5c:76:4a:98:d7:c4:48:6a:93:67:7b:35:
f5:50:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:34 2026 by rpki-client