Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: kZ7Ci86a1V6LeGT7swRR9MJTsd5D0b+ufWpV8/jOQdI=
Subject key identifier: 9F:81:11:EB:FE:B5:81:19:3D:E4:58:14:8F:81:99:AB:57:6B:C9:E6
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019D9B505DE998963F5F11923E0C2B6B2A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0D59
Signing time: Fri 17 Apr 2026 12:00:28 +0000
Manifest this update: Fri 17 Apr 2026 12:00:28 +0000
Manifest next update: Sat 18 Apr 2026 12:00:28 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: g8Ru8WvEbFLwTT/p1UHXq0bcdpZSzkO0eERfnhSi25s=)
2: nYFLnhmwmtgBFEoBH-xn4fAhz4Q.roa (hash: wB/xRE6h3geXqO4q4Rpv5x1ICmOWqRPL+trpbmTd4xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:5d:e9:98:96:3f:5f:11:92:3e:0c:2b:6b:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Apr 17 12:00:28 2026 GMT
Not After : Apr 18 12:00:28 2026 GMT
Subject: CN=9f8111ebfeb581193de458148f8199ab576bc9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:bb:22:ed:d6:a5:4e:54:f4:73:50:a2:15:
c5:e0:c5:fa:7d:ec:33:3b:b7:5a:51:84:d6:c9:83:
9b:27:f2:d7:4b:0d:68:04:9e:d6:39:44:c4:02:11:
51:03:33:43:16:4e:d8:57:7e:f3:c9:35:e3:f6:90:
66:fe:3a:b5:af:c6:c4:55:b9:55:ea:d8:4c:ef:74:
b1:21:34:3b:1b:1b:8f:b1:55:2b:51:08:1d:40:f8:
53:b5:df:d4:87:b4:6f:f0:62:94:5e:e4:93:72:14:
d3:6a:58:58:34:e9:42:7b:44:ce:bf:8d:91:29:6f:
ee:bf:38:93:99:06:1c:ff:72:2e:e9:7d:ef:7a:ea:
45:56:73:70:aa:aa:2f:04:d0:99:01:d0:91:1f:ff:
6e:f2:f2:8f:9d:4b:82:51:2d:3d:e8:d9:ed:68:e4:
27:d7:a2:dc:d7:87:c9:47:ce:f7:a8:95:11:89:85:
b3:94:27:56:9f:bd:85:4a:19:6d:39:05:62:de:24:
b8:5b:c8:00:2d:9b:56:f6:bd:82:53:ee:0e:e4:b4:
45:84:38:b6:6e:57:76:e0:ba:1b:75:59:93:b4:5a:
0c:d6:96:6a:28:78:7f:4f:ce:9c:a6:f7:5b:15:a3:
b3:eb:af:d9:fb:46:e2:4f:7d:e4:63:d1:09:62:01:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:81:11:EB:FE:B5:81:19:3D:E4:58:14:8F:81:99:AB:57:6B:C9:E6
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bd:80:04:5d:f1:82:f4:e6:8f:33:fb:d9:14:94:f3:13:d4:
15:f2:69:f6:77:34:08:64:75:88:f6:de:6c:9d:99:e9:da:af:
a0:ad:14:d1:eb:11:c5:48:a7:53:31:47:30:40:0d:34:8b:64:
23:fd:6c:7b:57:ed:ae:d1:7a:d0:69:fb:e0:3e:e3:f7:75:bc:
e0:9d:3d:c7:1e:2e:63:91:96:71:71:0c:bf:ea:30:16:9f:dc:
a6:f0:43:4d:7e:95:ea:e8:40:e5:86:20:ac:fe:10:5d:23:17:
c2:d1:b4:de:51:b4:68:a8:30:64:91:96:b7:fc:a7:50:35:75:
30:26:58:d4:b6:53:27:a5:18:11:3c:81:a3:7a:0c:1d:f9:a2:
e6:28:86:0a:92:a7:d9:5a:2a:f4:79:f1:b5:50:cb:29:17:55:
85:71:b9:fe:7b:05:58:3d:67:59:44:b4:90:e6:95:7d:59:98:
8f:e2:58:88:3e:6f:3c:ab:17:e7:f9:2b:e3:50:0b:fe:70:df:
cd:6f:a0:2c:95:64:3e:11:b4:91:1d:c6:a0:1d:2e:7d:bf:90:
20:a7:7c:0b:22:0c:a1:2d:5f:ae:0d:46:18:75:41:9f:21:56:
a2:60:49:b2:60:29:d7:20:83:c6:68:36:8c:b0:93:f0:5c:6c:
b6:c0:bd:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUF3pmJY/XxGSPgwrayo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi
YTBkYjQwHhcNMjYwNDE3MTIwMDI4WhcNMjYwNDE4MTIwMDI4WjAzMTEwLwYDVQQD
Eyg5ZjgxMTFlYmZlYjU4MTE5M2RlNDU4MTQ4ZjgxOTlhYjU3NmJjOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkm7Iu3WpU5U9HNQohXF4MX6fewz
O7daUYTWyYObJ/LXSw1oBJ7WOUTEAhFRAzNDFk7YV37zyTXj9pBm/jq1r8bEVblV
6thM73SxITQ7GxuPsVUrUQgdQPhTtd/Uh7Rv8GKUXuSTchTTalhYNOlCe0TOv42R
KW/uvziTmQYc/3Iu6X3veupFVnNwqqovBNCZAdCRH/9u8vKPnUuCUS096NntaOQn
16Lc14fJR873qJURiYWzlCdWn72FShltOQVi3iS4W8gALZtW9r2CU+4O5LRFhDi2
bld24LobdVmTtFoM1pZqKHh/T86cpvdbFaOz66/Z+0biT33kY9EJYgHoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+BEev+tYEZPeRYFI+BmatXa8nmMB8GA1UdIwQY
MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt
YzE0MDJkMjYxNDMyLzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy
LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP72ABF3x
gvTmjzP72RSU8xPUFfJp9nc0CGR1iPbebJ2Z6dqvoK0U0esRxUinUzFHMEANNItk
I/1se1ftrtF60Gn74D7j93W84J09xx4uY5GWcXEMv+owFp/cpvBDTX6V6uhA5YYg
rP4QXSMXwtG03lG0aKgwZJGWt/ynUDV1MCZY1LZTJ6UYETyBo3oMHfmi5iiGCpKn
2Voq9HnxtVDLKRdVhXG5/nsFWD1nWUS0kOaVfVmYj+JYiD5vPKsX5/kr41AL/nDf
zW+gLJVkPhG0kR3GoB0ufb+QIKd8CyIMoS1frg1GGHVBnyFWomBJsmAp1yCDxmg2
jLCT8FxstsC9IA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:41 2026 by rpki-client