Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: QmfPq7nWqOt5P6G5h7cCqRIP+I3WqYE2Dpy+hIrRCe0=
Subject key identifier: 20:5C:30:73:A3:02:29:CA:77:4D:C3:AA:C2:D9:F3:B7:AC:A0:B8:DC
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019CAAC6BADB4C21510AD99774BAD6C375D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1591
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: TTL4t6cMB1G5ua9jqMSs9UfG4rK2RKVxzGCS/aUncok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ba:db:4c:21:51:0a:d9:97:74:ba:d6:c3:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=205c3073a30229ca774dc3aac2d9f3b7aca0b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:73:98:2a:c2:1d:d1:4e:2f:03:0a:7d:60:
6a:5f:0c:78:91:01:9f:70:49:33:20:64:81:73:f7:
af:62:81:6f:c5:40:b5:93:86:e7:8b:6b:d6:10:aa:
39:23:e7:13:84:c3:23:3d:f0:2b:1c:47:8e:7e:ca:
42:54:1e:0d:1d:55:4c:c8:ae:86:c1:25:99:9a:f0:
06:e5:39:25:b8:73:f4:1d:4d:2c:6c:60:29:3a:9f:
2b:0a:26:8b:8b:12:72:2b:72:28:2c:6f:7c:48:29:
93:05:c9:89:0e:6a:b4:bd:11:27:23:38:2a:46:f4:
32:80:f9:ad:6f:d6:db:3d:51:bf:ed:4d:57:bd:8a:
4d:62:25:49:fd:fe:2f:0b:35:90:75:3b:e9:66:f7:
d9:59:2b:9e:76:6c:0b:18:b4:5a:c9:28:34:b4:40:
40:5a:c0:ce:14:e3:04:a6:16:55:40:cf:9a:af:32:
b4:06:f6:09:60:b3:11:7e:43:cf:5a:25:df:24:66:
53:95:78:80:5a:56:45:10:86:b9:cd:3a:1f:aa:db:
7d:a7:9b:bd:71:91:c7:02:1e:fa:19:e7:bd:f2:68:
4f:0a:4c:9c:bd:81:55:21:f0:74:1d:9f:27:58:f8:
f4:21:db:5f:4a:96:d3:5c:7a:36:7b:31:a0:a0:6e:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:30:73:A3:02:29:CA:77:4D:C3:AA:C2:D9:F3:B7:AC:A0:B8:DC
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:02:f4:94:29:cd:7c:30:8a:31:d3:99:17:02:94:ac:60:
ce:27:d4:0d:18:1c:7a:3e:e2:78:eb:54:13:cb:02:64:f2:fd:
e8:0b:af:2c:49:16:b4:d6:8f:72:89:4b:8f:59:62:f9:28:a0:
40:94:15:35:ed:fc:92:3f:bf:63:d0:e5:32:58:d0:8d:6c:66:
bb:5f:26:46:79:1e:e6:59:46:a5:5f:0f:ee:c6:61:33:41:2e:
19:c8:ed:44:11:cc:06:97:79:fd:cb:a2:4f:b1:c3:4a:82:be:
6a:0c:25:37:2d:0c:e6:c8:b0:d7:2f:d7:66:8c:0b:50:1a:53:
44:d3:99:d0:27:3b:19:dd:cd:e8:5f:3f:92:d5:22:43:e4:d4:
31:de:b5:6f:56:ef:95:01:76:9a:04:f7:7a:c3:e5:ee:6e:59:
85:c1:45:90:66:ba:0b:e4:31:45:4a:76:78:81:9b:fc:43:d4:
0c:16:95:85:35:b8:55:d6:2f:da:9f:3e:66:02:37:dd:a5:0c:
5a:10:6a:b8:32:c6:7d:3f:c5:be:f6:b0:48:35:da:9e:1d:f2:
15:c3:66:0e:64:6d:21:9c:44:20:be:96:1f:5f:9f:c4:77:7e:
0a:72:3e:bc:e0:4e:0a:e3:39:3f:f9:d5:93:74:60:4e:08:f5:
e4:0b:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:07 2026 by rpki-client