Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: KeOenARLD0KfdfBOqqrZhC/AavSTJIhJxRyZlT0A7QQ=
Subject key identifier: 21:98:6D:6F:55:82:19:19:C7:9B:99:83:99:5C:3F:F6:C7:3F:04:8C
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019D284E577ACF6EE46773FAA67D3E66AB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 15D2
Signing time: Thu 26 Mar 2026 04:01:56 +0000
Manifest this update: Thu 26 Mar 2026 04:01:56 +0000
Manifest next update: Fri 27 Mar 2026 04:01:56 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 3JeMDnnGiSvFoNZQ4C0mSoVamjzv2PuP04I8idyhvms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:57:7a:cf:6e:e4:67:73:fa:a6:7d:3e:66:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Mar 26 04:01:56 2026 GMT
Not After : Mar 27 04:01:56 2026 GMT
Subject: CN=21986d6f55821919c79b9983995c3ff6c73f048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:37:f0:d2:a8:5c:c9:bc:d4:8a:77:8e:3e:
75:64:43:8f:fb:e9:7a:dc:d0:7c:7d:a5:6a:90:fb:
3b:e8:f6:c8:de:bf:07:9e:da:d0:f0:34:5a:26:6f:
f4:37:5c:36:d5:d6:c9:a5:8e:d5:c0:b4:9d:fe:d1:
9c:32:5f:dd:97:fa:e2:35:39:72:e4:74:c0:79:4b:
8e:02:f7:c1:0e:a4:0a:cd:55:97:ef:8b:b0:7b:02:
9d:60:08:e2:47:a1:41:f1:34:6b:39:9c:73:b1:71:
88:10:83:b9:3e:3e:67:0d:56:ad:fa:73:4f:bd:ae:
7d:94:31:5f:18:a0:89:26:37:4f:b0:3b:d2:38:a1:
48:12:f7:45:c6:f0:99:45:c8:5e:6e:82:1b:0b:52:
fe:f5:3a:83:62:ec:c7:c1:b0:dc:8b:3b:48:6b:24:
b2:ac:ec:09:ae:46:64:ea:76:4a:91:18:e1:bf:39:
c0:a0:65:65:61:e9:9a:eb:ac:79:9b:32:a4:60:15:
ee:5d:fb:f6:69:ba:5d:4b:ee:b5:6c:76:7e:4f:53:
d2:c5:0f:bb:6a:4a:d0:94:76:e9:83:fe:37:e1:1c:
83:19:31:f0:30:98:71:0a:2b:3c:16:cb:7d:f6:ff:
bd:2e:18:bb:f3:f5:d9:c9:ca:da:60:ec:19:68:8b:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:6D:6F:55:82:19:19:C7:9B:99:83:99:5C:3F:F6:C7:3F:04:8C
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3f:c2:6b:19:c3:e2:d2:e4:ea:2f:48:2b:e6:28:2a:40:23:
3f:a1:f3:24:9e:15:40:df:11:8b:ab:35:47:3b:6f:cd:bf:40:
41:a2:18:f2:af:18:81:98:1e:d6:4d:02:c8:8d:ec:b3:0e:27:
46:0b:6c:ca:3c:d9:ad:fc:32:0b:eb:37:98:6f:1e:82:02:91:
bf:b4:c9:e8:cf:05:7e:e3:f8:60:85:d1:54:5b:11:75:b9:ad:
84:9a:9a:ba:04:f7:99:34:0e:02:c3:58:c3:cc:fd:e0:2b:db:
d8:d5:0d:1c:01:ff:2d:b6:c5:f5:74:15:a6:d1:5f:56:44:f4:
04:50:c0:e0:f4:6b:28:21:e8:63:f6:5a:37:62:83:d7:46:40:
f4:0e:f0:5a:e2:71:bd:0a:4f:a1:6f:61:e8:79:6c:81:07:07:
d8:24:b0:e2:f1:a2:17:eb:60:2b:cb:c2:88:8b:b7:d9:a8:d0:
ec:24:23:2e:71:b2:d4:58:29:72:ec:11:62:52:c2:79:58:0f:
a9:83:5c:41:9b:00:52:41:1e:5a:17:a0:91:27:62:4a:1c:7c:
75:5f:bb:f9:94:81:a7:cd:f2:36:40:10:bb:f4:66:a8:4b:90:
c6:15:49:7f:d7:ea:a7:52:24:c7:f9:54:0c:8a:18:7f:38:5c:
7c:a2:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:20 2026 by rpki-client