Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
File: GOHT-t4KvYwPvRHViMZdKzQZzt8.mft (raw, json)
Hash identifier: FJlv/C5kgMUPmsL83S3wmW3TnEwLT8pKVknq/5mUxPg=
Subject key identifier: 65:4A:3E:7D:68:18:0C:78:5D:BE:BC:DC:BB:45:F0:4A:BE:1F:18:63
Authority key identifier: 18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
Certificate issuer: /CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Certificate serial: 01A119E2E98B7282EC403B30EAE0A0BD0653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
Manifest number: 41
Signing time: Thu 08 Oct 2026 05:01:03 +0000
Manifest this update: Thu 08 Oct 2026 05:01:03 +0000
Manifest next update: Fri 09 Oct 2026 05:01:03 +0000
Files and hashes: 1: 0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa (hash: 5OnTSgOmHXF9aC2oY1o80TpVqcSBGodjVSzKDjL92Ic=)
2: GOHT-t4KvYwPvRHViMZdKzQZzt8.crl (hash: juUXkRQroFXPJdt2YuoKTDwKE4FiDBSHZGJeWnsiU+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:e9:8b:72:82:ec:40:3b:30:ea:e0:a0:bd:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Validity
Not Before: Oct 8 05:01:03 2026 GMT
Not After : Oct 9 05:01:03 2026 GMT
Subject: CN=654a3e7d68180c785dbebcdcbb45f04abe1f1863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:8e:cd:17:c6:3c:ee:9e:b7:03:e0:1a:6f:
9e:b5:df:3d:f6:54:ae:d1:ee:87:e2:22:68:f6:ca:
0e:f1:e8:b8:0c:8c:f6:90:07:10:b9:cc:e1:47:25:
53:2f:4e:45:9b:b3:df:fc:82:b4:09:79:34:6a:5e:
d6:5c:6d:57:37:a2:60:d5:16:ef:ca:6b:0b:8c:9b:
99:c8:5e:99:25:40:b1:1f:9f:a3:fc:b9:c8:6c:22:
de:7a:17:dc:6a:42:84:7d:66:7a:42:e1:cd:24:c1:
2e:10:d8:d2:7c:4e:2d:d3:a2:8f:b1:9d:ed:5b:e6:
13:b3:48:0d:86:9a:6a:2e:95:a5:6c:2d:e3:4b:24:
d1:f8:c6:27:9e:e0:df:62:fc:f1:d3:57:22:94:61:
8e:55:2d:04:1b:30:3b:f3:f1:eb:cb:3b:57:e3:cf:
34:39:da:c7:ff:91:fb:dd:7d:5f:7b:38:08:a4:05:
f2:98:06:09:c4:25:8e:a2:45:d2:65:e6:8e:9a:16:
a6:f9:65:f5:01:c3:44:f8:4e:5c:62:a4:57:36:0a:
c1:2f:9b:9b:58:3e:45:08:44:f9:f2:47:47:02:51:
91:cd:ed:dc:8a:a9:1a:47:78:72:fe:92:40:f2:8d:
90:6a:6a:fe:a3:f8:57:07:01:3d:b2:8c:d7:e7:b7:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:3E:7D:68:18:0C:78:5D:BE:BC:DC:BB:45:F0:4A:BE:1F:18:63
X509v3 Authority Key Identifier:
keyid:18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:60:9b:03:ca:c8:4b:83:55:31:5d:15:c0:e0:b1:2b:3b:f2:
0b:b4:ce:bb:4e:a9:b1:25:db:93:0f:83:67:cc:d7:fc:82:de:
8d:8b:b3:5b:34:78:d9:94:aa:49:4a:cb:64:ac:f3:be:83:96:
88:ae:43:bb:03:c5:ab:fd:b7:9b:d0:05:7c:f4:b7:a9:00:85:
98:4b:a4:20:e1:43:34:f1:3a:f3:7e:c6:b1:4e:4f:8b:3f:0a:
72:e8:5c:b2:68:35:2a:05:e4:cc:2d:94:8c:2c:51:33:1f:ae:
85:6e:c3:95:ca:5f:d1:9b:35:94:ab:9e:c3:87:bd:d3:0a:1b:
17:03:94:29:35:96:ba:ca:79:5e:33:fd:89:10:35:bf:e4:39:
29:33:58:d6:4c:39:97:17:0c:75:a8:bf:a7:90:7f:af:58:35:
f5:24:a2:09:a5:fc:76:29:fc:db:be:33:97:d1:87:f4:d2:74:
3d:02:59:60:8b:49:eb:31:58:32:2d:03:08:a1:57:83:5b:39:
4b:32:44:25:9d:3b:8a:5b:cb:22:f7:e7:e8:5b:93:dd:75:c4:
c9:c4:d1:93:71:1a:da:57:f8:2f:92:e3:46:50:0b:19:ff:ac:
5d:09:dc:ae:e2:3f:72:71:77:95:90:8f:ce:83:bf:2d:bc:64:
75:c5:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:02:02 2026 by rpki-client