Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: vVMV8Vt7wkHuIZJ2ntYKYNqXrQmG5+o7L8Zzu+05Pus=
Subject key identifier: A8:56:17:12:AB:2E:D5:ED:06:77:F3:1B:CB:6F:8E:B5:35:DE:16:52
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01A0CB23180B1824579E7DC612750610CB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 17B4
Signing time: Tue 22 Sep 2026 22:01:09 +0000
Manifest this update: Tue 22 Sep 2026 22:01:09 +0000
Manifest next update: Wed 23 Sep 2026 22:01:09 +0000
Files and hashes: 1: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (hash: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc=)
2: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (hash: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o=)
3: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 5TQH+ORudXiCxsb2W09DWdwfhXQJhaOaeAO0lKw23KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:18:0b:18:24:57:9e:7d:c6:12:75:06:10:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Sep 22 22:01:09 2026 GMT
Not After : Sep 23 22:01:09 2026 GMT
Subject: CN=a8561712ab2ed5ed0677f31bcb6f8eb535de1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:bb:08:f3:60:fd:e1:e1:17:67:5b:7b:ec:
f1:3a:7b:14:63:1d:0b:92:cd:dd:d5:2d:97:f9:13:
98:b8:24:a2:47:21:d4:eb:6d:f3:00:2d:6c:53:c4:
67:0e:fa:cb:c1:1c:ee:4b:4a:ed:15:6e:17:38:08:
ce:d4:45:c2:ab:e5:dc:49:ca:ff:1e:4e:30:68:25:
41:1f:42:be:2d:ca:97:a0:93:f7:62:1b:08:f9:e2:
c6:54:b3:fa:e2:74:fe:8b:b8:e0:5d:6b:4f:41:4c:
7a:57:1e:64:db:26:03:f9:a7:2f:78:dd:50:59:d7:
95:73:52:3d:75:11:c3:09:d8:35:90:1e:96:30:8f:
3d:d2:04:c8:b0:c1:19:bf:4f:ce:15:ca:57:08:0c:
49:56:5d:b0:12:70:89:68:8e:76:79:bb:d4:0c:60:
6c:0f:77:0e:16:ad:33:0e:81:fb:2c:53:22:bb:d3:
96:bc:c7:2c:11:bb:cf:07:77:e2:18:1e:da:cf:48:
e8:b1:f1:7e:1b:3f:77:83:c0:2c:2a:65:00:84:86:
bf:58:31:22:15:f5:81:37:e5:bb:2c:6b:64:9d:53:
85:d3:e8:68:87:90:ef:50:9c:5c:bd:6d:b0:34:32:
78:77:66:13:1a:05:a1:83:39:26:94:6d:48:96:3f:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:17:12:AB:2E:D5:ED:06:77:F3:1B:CB:6F:8E:B5:35:DE:16:52
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:7c:8b:12:8b:2f:bd:fc:bb:21:41:28:b1:72:0d:e7:3c:
35:3c:01:d4:a3:ec:72:a6:94:43:76:3f:25:0c:9e:c2:19:9c:
e3:5d:ff:3d:8a:51:75:07:8b:66:96:6f:0e:19:28:a7:65:2c:
5f:49:94:44:7c:40:31:7f:e1:d8:66:fd:8d:8b:63:b4:0f:4c:
21:4f:5c:74:32:65:e5:d6:50:65:41:db:52:d9:0e:ba:1c:58:
5b:4b:7a:aa:c6:04:ac:3b:82:38:43:91:01:8c:fc:f9:54:b4:
2b:e7:eb:4b:5e:47:ea:bd:2e:88:8f:99:5a:a7:b0:7b:26:1e:
aa:36:36:18:86:0b:27:6c:57:f9:61:e6:a8:d0:29:bf:1f:fe:
f3:a0:db:57:ab:af:f9:a9:1c:c2:d1:86:77:f8:6a:3c:13:24:
77:fc:61:d2:d7:0f:7e:32:5b:be:5d:d5:dd:04:58:ec:73:14:
58:36:f8:d9:3f:5b:15:df:46:c9:8d:ea:80:0a:82:7d:fb:a3:
ca:46:35:45:53:dd:5f:0e:23:40:47:71:3b:5e:56:22:c7:72:
dc:42:b1:23:d2:da:e3:80:0b:36:76:78:c9:62:e9:f9:6c:f0:
96:60:4b:ee:4e:93:14:dc:61:6f:f6:96:01:d4:e2:d9:79:58:
56:f6:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:48 2026 by rpki-client