Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: Gm6gkglXdYdJydLhA5zqr1jKcoohMS4kkG69Or5U7QQ=
Subject key identifier: 7C:E3:7F:CA:90:76:C6:73:17:66:C3:53:56:FE:51:02:E1:4C:27:6E
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019CABD95AE4BA9853D37912C9CE8E2C6AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: kZWUgTvn+5wGiVnEQdJZXI9DBC0AS+ww+Rkq9fo4kWQ=)
3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5a:e4:ba:98:53:d3:79:12:c9:ce:8e:2c:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=7ce37fca9076c6731766c35356fe5102e14c276e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:cb:ea:8f:e7:61:56:12:f7:b2:e4:62:0f:
44:7d:94:b7:70:03:9b:a5:31:b5:85:df:d5:b7:73:
47:58:8f:6d:a0:86:6d:5a:7b:9a:03:61:41:aa:b9:
0f:16:b3:86:82:ec:f2:67:b3:a4:c7:01:7b:3c:04:
c0:67:ea:29:5a:d0:71:3e:49:97:0e:7b:4c:7a:62:
46:66:bc:25:80:1b:6b:2f:42:6a:b7:6b:23:92:f6:
d7:c9:a4:6f:14:ca:33:57:0b:f5:26:76:6c:94:42:
fe:44:35:9c:f5:97:4b:f7:db:c4:d8:46:4b:84:be:
ea:ab:4a:d6:39:ee:97:26:2d:55:f3:65:ca:da:c5:
51:ee:4f:b1:86:38:0b:3b:40:b0:ab:f9:41:30:48:
c2:85:08:c6:60:09:0a:b4:b9:b5:d2:8b:d1:72:3b:
82:43:e0:b8:c7:01:32:74:ff:5a:c4:77:ec:1f:34:
50:f7:df:51:df:24:96:38:e1:ce:95:2b:ba:08:09:
d8:16:68:82:c3:f9:f4:a6:27:51:ec:41:16:9d:31:
03:2a:20:1b:57:b5:5b:b2:9d:7d:14:06:50:71:35:
88:fa:20:65:ec:15:c3:be:13:6b:bc:46:b4:8b:86:
70:aa:5a:1a:dd:65:e1:f3:25:7c:ac:74:aa:4d:d4:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:7F:CA:90:76:C6:73:17:66:C3:53:56:FE:51:02:E1:4C:27:6E
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e0:98:47:b5:47:3d:29:c1:c8:1b:5c:05:f3:f9:4f:0c:da:
9f:94:dc:6a:c4:bd:8e:e8:7b:2c:5c:48:40:06:cf:1b:b1:ef:
53:c0:a1:e2:a2:d2:32:b2:39:ed:55:78:eb:04:04:20:3d:4d:
66:81:16:b2:33:89:81:72:b6:17:fb:1d:1e:00:d2:ef:49:90:
2d:37:42:51:c5:4f:3d:81:cb:91:c3:6e:99:79:c1:6e:63:56:
b3:e7:40:ff:89:f6:e8:4e:da:24:8b:1f:bb:55:47:1f:04:f4:
82:61:f7:31:30:82:74:5e:ba:74:f3:cb:d0:f7:fe:f4:10:e2:
86:a6:29:c4:13:1c:1b:1e:c8:90:f8:0a:58:6e:2b:13:e1:60:
64:33:6a:ef:23:bb:25:b6:fd:26:5a:38:23:c2:51:8a:3d:0e:
e9:75:08:d8:e1:09:55:fd:4d:6c:cb:bd:fe:d9:41:1b:5d:4a:
f1:aa:30:24:2b:08:bb:89:3b:5e:af:c1:62:9b:f4:17:42:23:
3e:06:06:a3:58:43:65:87:a2:ce:43:77:03:0a:17:a4:b0:d0:
51:58:7c:35:0d:48:c9:35:79:fb:46:3f:bc:ab:04:ec:6f:a2:
3f:da:93:1b:6f:bf:4e:5f:4f:12:f0:2c:df:ac:c7:a3:84:11:
d5:ea:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:24 2026 by rpki-client