Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: zMjWv99Bj71tFmY5XAmWqoZzyfki/uQp51J60xtnvX8=
Subject key identifier: 58:68:19:43:6E:9C:FB:54:6D:6C:60:1A:56:6D:93:EC:41:E0:59:01
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019F905A49858812637F2FCCB1FD785F35EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1711
Signing time: Thu 23 Jul 2026 19:01:03 +0000
Manifest this update: Thu 23 Jul 2026 19:01:03 +0000
Manifest next update: Fri 24 Jul 2026 19:01:03 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: ximJRu0sHQ1PeRKZ/F832ZTuBdG5UHsaye+sjAraGX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:49:85:88:12:63:7f:2f:cc:b1:fd:78:5f:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Jul 23 19:01:03 2026 GMT
Not After : Jul 24 19:01:03 2026 GMT
Subject: CN=586819436e9cfb546d6c601a566d93ec41e05901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:e7:f6:a1:db:e9:8f:9c:56:a3:67:8a:eb:
6f:ad:bd:78:7f:c9:bd:92:21:c2:ae:a8:8d:a3:79:
d4:42:6b:36:7f:9b:f6:68:63:b7:8f:d2:29:a8:71:
26:34:11:45:05:aa:57:db:e5:32:18:ce:42:3b:df:
42:b3:1a:d1:5a:45:77:1c:f4:12:c3:d3:d8:ee:9d:
09:95:dd:4a:3d:4c:ea:85:cf:9d:14:71:0c:f6:83:
61:b9:47:9c:9d:8d:ae:12:8d:43:75:7d:26:29:ce:
fc:c8:04:7e:5e:4e:45:f2:41:ae:49:d5:46:9a:65:
78:7e:7f:e9:7d:a2:4f:f2:07:dd:b9:a4:39:d8:d9:
58:92:30:83:f0:cf:b4:18:e9:96:28:21:66:a6:be:
cb:b5:96:d7:86:92:66:7c:77:0b:a3:e6:fb:97:92:
a8:87:91:eb:32:fb:59:3f:06:59:fc:09:24:a1:d9:
c1:7a:78:b4:85:32:96:88:c0:ee:0c:3b:91:0d:f3:
23:cc:19:b5:ca:62:19:ba:6e:08:62:19:ce:a6:a7:
96:04:39:73:07:91:b6:07:ee:85:b8:5f:92:a4:fb:
5a:f9:38:ac:d0:69:02:28:16:76:a2:ec:87:e6:74:
a6:cd:38:62:01:74:7d:a7:8e:68:cc:a9:54:2d:ed:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:19:43:6E:9C:FB:54:6D:6C:60:1A:56:6D:93:EC:41:E0:59:01
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:0b:14:d1:4a:6b:b1:83:64:64:51:15:ce:61:38:17:9d:
8b:bd:0a:1c:94:dd:78:4f:fa:85:dd:31:d2:f2:2c:25:98:3d:
3d:ec:ad:12:91:5d:f9:0d:77:a7:db:ed:a4:50:50:02:6a:31:
df:a5:e3:46:fb:54:8b:42:f5:bf:f2:ae:1d:38:20:c1:b2:d9:
c1:2e:00:dc:2a:bd:e8:c7:db:2e:2c:58:ea:92:86:dd:7e:cc:
f4:92:b2:31:5f:11:09:ac:25:45:0e:e6:32:b6:a8:78:63:35:
4c:f8:78:e8:60:5d:24:65:c7:ed:a6:a5:8b:93:4c:5e:e0:ce:
e6:f2:ff:1b:61:f1:bf:17:9e:8d:f3:85:8a:fd:dd:1e:9c:96:
cb:d7:9d:40:83:f5:b4:ac:0d:06:44:4a:22:dd:d1:93:c1:4a:
ed:54:52:b3:c5:ea:8e:90:f5:70:d1:0a:43:68:cb:0d:76:cf:
a0:cc:47:55:fb:9b:d6:72:fd:8a:61:f3:b9:8f:40:eb:5b:17:
7c:93:2f:0a:04:14:6d:ed:cc:99:44:1e:d5:b3:49:0d:e1:5e:
62:a4:5a:a4:d3:06:f3:f5:74:17:b8:be:6a:cd:dd:84:c8:43:
68:f8:cf:09:e6:a9:38:91:a4:fa:5f:57:61:02:9f:79:da:a6:
13:80:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:27 2026 by rpki-client