Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: fq6g0xnWGfa5xBxoku4/4iQz8DpM0APQZWMDGnkDSQc=
Subject key identifier: 8F:B1:95:26:AA:76:FD:FD:68:48:E9:A7:18:CF:DD:07:AA:62:4E:25
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019DA41C814F3A33EF845D82B50EEB784EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 05:00:24 +0000
Manifest this update: Sun 19 Apr 2026 05:00:24 +0000
Manifest next update: Mon 20 Apr 2026 05:00:24 +0000
Files and hashes: 1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: beOnzDCkfOLjwRmRkveh1rdhNPpW3XQL0ej7IesM9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:81:4f:3a:33:ef:84:5d:82:b5:0e:eb:78:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Apr 19 05:00:24 2026 GMT
Not After : Apr 20 05:00:24 2026 GMT
Subject: CN=8fb19526aa76fdfd6848e9a718cfdd07aa624e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:4b:c6:f2:25:1b:dd:96:a6:b8:72:54:4d:
44:41:5f:d2:70:f8:ef:18:78:f3:3a:33:87:1b:06:
81:bc:d7:72:bb:22:93:d3:ff:41:4f:49:9b:19:46:
80:ba:d9:05:89:87:d8:f7:ac:84:b2:ee:d0:11:21:
69:45:d5:c1:ea:ea:4f:58:d3:60:18:b7:9c:92:35:
7f:e4:ed:e8:07:52:90:af:b8:5b:94:38:f2:5c:23:
03:42:05:8e:56:db:71:fb:07:90:2e:cd:87:29:2e:
a2:8d:c5:15:0a:97:61:d2:b8:9a:3e:0c:e9:2e:ee:
99:c5:c9:98:49:a7:9c:ea:ba:37:c5:23:e3:9b:37:
6a:18:d8:0d:d8:52:9e:c7:25:f3:6d:cb:fd:4c:32:
18:0b:eb:c8:cf:bb:9c:65:d7:a3:81:ea:76:b9:af:
11:f6:ef:73:bf:94:bb:8a:c2:a0:a4:54:58:b2:03:
0a:2d:1b:40:b8:67:64:07:b4:0e:76:84:64:f0:21:
cc:9c:4c:17:64:1a:fc:55:fb:c0:51:f3:3d:8f:2d:
b7:a1:29:e8:dc:63:a3:38:cb:6f:88:7d:cf:7b:dd:
74:85:7a:85:4b:37:c5:0a:2f:6e:ef:a4:4b:6b:15:
65:e5:9b:aa:29:a7:32:bd:0b:23:94:d2:17:55:87:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:95:26:AA:76:FD:FD:68:48:E9:A7:18:CF:DD:07:AA:62:4E:25
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8e:63:f2:04:dc:3a:15:82:69:47:5e:7c:20:57:6e:45:55:
95:cd:29:ab:55:9b:9a:3d:81:47:7c:b3:28:f5:21:09:5c:05:
32:b4:b4:c3:80:48:5a:15:87:03:89:93:71:1b:10:83:28:93:
1f:84:85:bc:e2:0f:ee:15:80:61:c5:1b:b0:20:68:8d:7b:a9:
be:bf:19:e8:64:82:d5:cf:00:9e:74:15:7d:83:94:a1:f9:72:
3f:8d:23:0b:04:8d:9c:19:72:e4:57:47:e7:f0:62:b6:f6:d7:
51:ee:14:7e:5b:06:14:af:d2:d4:23:52:6f:61:cd:00:c8:99:
cd:73:33:88:3a:29:13:c4:fd:8e:e7:94:44:2d:8a:5c:96:9f:
31:b9:39:bc:89:14:47:33:7a:04:a0:5f:72:cb:b9:e2:54:38:
c7:b4:f7:7d:9f:eb:dc:81:b0:37:50:1b:30:f3:2d:ea:e6:38:
77:8e:fe:c7:c9:31:35:2e:42:84:a1:50:41:1b:41:94:ba:d9:
6b:a2:bf:b3:84:19:7f:6c:8c:ed:8d:a9:a0:4e:59:2e:ab:1e:
c2:ac:1d:95:b1:a8:14:4e:22:b5:b3:8f:36:85:3f:1f:04:2d:
7d:b1:b0:e9:d7:e7:e3:29:1e:c0:9a:84:a8:23:fe:d9:ea:32:
47:29:a2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHIFPOjPvhF2CtQ7reE6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0
NjA0MjkwHhcNMjYwNDE5MDUwMDI0WhcNMjYwNDIwMDUwMDI0WjAzMTEwLwYDVQQD
Eyg4ZmIxOTUyNmFhNzZmZGZkNjg0OGU5YTcxOGNmZGQwN2FhNjI0ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRZLxvIlG92WprhyVE1EQV/ScPjv
GHjzOjOHGwaBvNdyuyKT0/9BT0mbGUaAutkFiYfY96yEsu7QESFpRdXB6upPWNNg
GLeckjV/5O3oB1KQr7hblDjyXCMDQgWOVttx+weQLs2HKS6ijcUVCpdh0riaPgzp
Lu6ZxcmYSaec6ro3xSPjmzdqGNgN2FKexyXzbcv9TDIYC+vIz7ucZdejgep2ua8R
9u9zv5S7isKgpFRYsgMKLRtAuGdkB7QOdoRk8CHMnEwXZBr8VfvAUfM9jy23oSno
3GOjOMtviH3Pe910hXqFSzfFCi9u76RLaxVl5ZuqKacyvQsjlNIXVYeZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+xlSaqdv39aEjppxjP3QeqYk4lMB8GA1UdIwQY
MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt
NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz
LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo5j8gTc
OhWCaUdefCBXbkVVlc0pq1Wbmj2BR3yzKPUhCVwFMrS0w4BIWhWHA4mTcRsQgyiT
H4SFvOIP7hWAYcUbsCBojXupvr8Z6GSC1c8AnnQVfYOUoflyP40jCwSNnBly5FdH
5/BitvbXUe4UflsGFK/S1CNSb2HNAMiZzXMziDopE8T9jueURC2KXJafMbk5vIkU
RzN6BKBfcsu54lQ4x7T3fZ/r3IGwN1AbMPMt6uY4d47+x8kxNS5ChKFQQRtBlLrZ
a6K/s4QZf2yM7Y2poE5ZLqsewqwdlbGoFE4itbOPNoU/HwQtfbGw6dfn4ykewJqE
qCP+2eoyRymiYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:22 2026 by rpki-client