Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
File: GOHT-t4KvYwPvRHViMZdKzQZzt8.mft (raw, json)
Hash identifier: Z1zpqdvhTb62X9VZmVzh70FLXjkykq0eb0nP4dflA+o=
Subject key identifier: D9:A4:10:1E:91:4E:E2:85:7C:35:4C:4D:55:5C:86:75:78:42:34:73
Authority key identifier: 18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
Certificate issuer: /CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Certificate serial: 01A129562586B926711F0D939C47C456DFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
Manifest number: 49
Signing time: Sun 11 Oct 2026 05:01:13 +0000
Manifest this update: Sun 11 Oct 2026 05:01:13 +0000
Manifest next update: Mon 12 Oct 2026 05:01:13 +0000
Files and hashes: 1: 0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa (hash: 5OnTSgOmHXF9aC2oY1o80TpVqcSBGodjVSzKDjL92Ic=)
2: GOHT-t4KvYwPvRHViMZdKzQZzt8.crl (hash: pKThrRHQfqNaP4Y/Dpoe/Xd43N6q2HJsXXlxp2paX8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:25:86:b9:26:71:1f:0d:93:9c:47:c4:56:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Validity
Not Before: Oct 11 05:01:13 2026 GMT
Not After : Oct 12 05:01:13 2026 GMT
Subject: CN=d9a4101e914ee2857c354c4d555c867578423473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:e3:94:b3:93:8d:8e:d6:b3:90:5e:72:91:
cb:72:f5:2f:50:c2:68:c3:f6:29:f9:49:d4:d0:30:
28:6b:35:54:4d:b5:2d:a3:a7:ff:f1:73:6c:bc:df:
6d:77:d4:c0:16:2b:5c:9e:cc:2b:1e:9e:68:00:bc:
2b:ec:82:d5:62:04:8b:10:61:ec:9e:71:0f:68:d0:
88:83:91:6b:45:47:1d:3f:49:53:11:19:0c:fd:43:
ee:d6:a7:20:1c:93:bf:18:e4:bc:f1:21:ee:f2:b8:
0a:1b:d0:43:56:d4:4c:45:43:18:48:0a:4f:0b:50:
cd:25:a6:b0:39:ec:0a:f6:0f:1c:5d:52:7c:d8:ec:
12:af:8e:d2:d3:3e:5e:6a:bf:69:4d:33:93:b9:d3:
d1:5c:2c:8f:d4:fd:68:9f:b4:df:21:47:72:60:77:
26:a9:38:fd:51:6a:e6:47:c9:4c:45:57:d2:f3:c1:
10:ff:53:cc:8f:70:10:38:4b:9e:c3:43:a7:fc:c5:
09:9b:36:d6:21:f4:e2:6b:ba:6f:42:98:01:1e:7f:
90:fc:4d:12:17:3f:d6:7a:d0:69:70:6d:0b:3a:68:
f7:b3:1b:1d:01:9b:10:44:81:26:0e:c8:f6:54:51:
a9:0b:cf:21:ab:bc:48:0b:1e:05:7a:7e:60:2a:96:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A4:10:1E:91:4E:E2:85:7C:35:4C:4D:55:5C:86:75:78:42:34:73
X509v3 Authority Key Identifier:
keyid:18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:ba:d6:09:85:bd:56:28:ba:a3:6c:49:50:33:bc:0f:da:
42:3c:62:87:f6:da:a5:08:75:5d:04:c5:c1:a4:e6:de:bc:12:
92:0f:ba:92:21:6f:06:d9:b3:4a:04:44:5e:70:51:3f:33:12:
33:4e:ca:c7:e7:ea:89:aa:3f:88:42:13:ff:96:0d:e9:8c:15:
1e:4e:16:39:08:e9:6a:3b:df:0b:72:9e:99:0d:8c:ac:0b:a6:
dd:7e:8e:f5:2b:38:31:9d:07:31:4c:7d:c4:2f:44:0f:14:f0:
b2:a0:79:08:a2:4f:d9:59:e8:6e:f5:05:ab:ee:ea:97:97:cd:
16:e4:70:69:9f:1f:6e:05:a7:5a:e2:53:8d:6d:d5:b1:65:72:
c9:da:4a:6e:2d:ad:3d:fa:a3:75:81:7c:38:70:8f:a3:62:d6:
df:94:6d:6c:cd:c7:a9:d6:27:86:97:d2:46:8a:47:7d:de:e8:
26:54:61:03:42:97:86:d3:54:2b:e4:f2:cd:c7:eb:8c:e1:e4:
41:e2:3a:42:5d:81:0f:8f:67:73:e8:4e:e9:b2:2e:f3:c3:1c:
57:7f:bc:79:64:aa:ca:96:68:e2:a4:a9:c2:b7:de:7e:85:ff:
67:03:c1:b6:91:d2:ef:47:a5:62:6c:9b:9f:1b:f6:a6:a3:19:
cd:4e:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:54 2026 by rpki-client