Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: /SMcvIBZmSN+JN5NtOFAO6xhd52o+ATVoobnsreECtU=
Subject key identifier: 09:62:E5:03:FB:05:97:77:B4:88:E5:F7:20:49:D3:58:35:00:9B:03
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 019CAC102C88EC120B3E713797A111F76190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: RehvKUeBIVXfmXc21YgcXOkGW4yGd3LqDABz34BsWfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2c:88:ec:12:0b:3e:71:37:97:a1:11:f7:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=0962e503fb059777b488e5f72049d35835009b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:99:6c:34:33:aa:c0:25:7f:fa:16:12:da:
33:ec:30:33:58:df:4a:31:df:a8:98:ed:98:5a:5c:
6b:91:67:7f:a3:9f:9d:36:5b:72:9a:01:38:58:cb:
4f:93:b5:1c:2d:43:81:2b:01:06:3c:03:24:ae:ee:
2a:fa:82:66:a1:3d:f9:17:9b:70:bd:ab:1c:a5:98:
f5:da:09:6f:b7:4e:13:c6:18:ec:85:8c:4e:59:2c:
08:be:74:8e:12:5b:c4:a2:94:cc:0e:31:71:1e:dd:
b9:a9:ae:bb:ed:f2:a2:f9:43:21:4c:7f:74:b9:a7:
7e:55:7d:d5:65:a1:8c:30:f4:44:3c:3b:1b:81:b2:
d2:d1:6d:3b:2b:79:e2:fa:d2:8a:88:8e:b0:d7:9a:
66:11:aa:1b:e1:40:a4:97:3f:49:65:a5:05:e5:05:
e7:cc:c1:fc:1d:29:41:ab:cd:ed:7a:03:09:65:f4:
77:63:41:30:bd:c4:2b:95:86:34:ef:ed:60:b7:61:
66:88:4e:d8:9a:da:5f:65:be:a2:77:e0:ad:73:06:
b7:77:b3:43:10:ba:65:01:68:19:d0:c4:a8:9e:07:
66:65:8c:d1:69:b5:a4:89:1e:18:b3:85:33:3f:f2:
6c:b8:3d:4b:8b:a7:80:3a:eb:bc:20:00:a4:72:5b:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:62:E5:03:FB:05:97:77:B4:88:E5:F7:20:49:D3:58:35:00:9B:03
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:16:04:af:59:2d:33:7a:ee:b5:f2:01:2a:4c:2d:a4:34:
63:ac:1e:7f:8e:7f:e1:c6:b1:29:cf:da:8a:dd:2f:9c:5e:3d:
ec:f8:05:35:0d:31:e3:c5:c2:e7:0f:6d:f5:91:88:f8:35:30:
31:52:9a:e7:36:e4:63:c3:35:37:68:44:b8:dc:a2:cc:e1:93:
59:4a:cf:11:71:ce:10:db:fb:bd:48:70:eb:e4:7b:5c:6c:44:
a7:46:a5:ac:c4:da:b4:78:c8:57:3a:db:43:b9:9b:98:0b:35:
ec:de:2c:2a:5a:4b:d0:18:88:00:25:86:15:83:5d:7d:49:10:
77:9d:4b:af:6c:9d:20:b2:41:3b:7f:13:e6:ad:1b:01:c3:75:
c6:01:92:4d:7d:03:72:ca:ae:a7:77:b3:1b:fb:3b:83:30:4f:
a8:8c:bd:97:d2:17:76:11:44:27:f5:24:22:ea:00:c0:bd:97:
ae:2a:b4:77:b6:35:39:27:80:4e:d9:b2:92:b9:59:8c:77:35:
42:49:85:8f:24:f7:72:ef:0d:6c:e0:80:49:d2:23:df:3b:f6:
ae:2f:a5:9b:48:2d:01:59:d7:98:21:be:ff:00:42:dc:cb:a8:
ea:b8:ad:ea:f9:5c:3d:42:be:5e:10:80:52:8a:20:8e:53:e9:
5c:0e:42:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECyI7BILPnE3l6ER92GQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky
NDBkYTUwHhcNMjYwMzAyMDEwMTA2WhcNMjYwMzAzMDEwMTA2WjAzMTEwLwYDVQQD
EygwOTYyZTUwM2ZiMDU5Nzc3YjQ4OGU1ZjcyMDQ5ZDM1ODM1MDA5YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRKZbDQzqsAlf/oWEtoz7DAzWN9K
Md+omO2YWlxrkWd/o5+dNltymgE4WMtPk7UcLUOBKwEGPAMkru4q+oJmoT35F5tw
vascpZj12glvt04TxhjshYxOWSwIvnSOElvEopTMDjFxHt25qa677fKi+UMhTH90
uad+VX3VZaGMMPREPDsbgbLS0W07K3ni+tKKiI6w15pmEaob4UCklz9JZaUF5QXn
zMH8HSlBq83tegMJZfR3Y0EwvcQrlYY07+1gt2FmiE7YmtpfZb6id+Ctcwa3d7ND
ELplAWgZ0MSongdmZYzRabWkiR4Ys4UzP/JsuD1Li6eAOuu8IACkclvIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAli5QP7BZd3tIjl9yBJ01g1AJsDMB8GA1UdIwQY
MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt
Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh
LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQAWBK9Z
LTN67rXyASpMLaQ0Y6wef45/4caxKc/ait0vnF497PgFNQ0x48XC5w9t9ZGI+DUw
MVKa5zbkY8M1N2hEuNyizOGTWUrPEXHOENv7vUhw6+R7XGxEp0alrMTatHjIVzrb
Q7mbmAs17N4sKlpL0BiIACWGFYNdfUkQd51Lr2ydILJBO38T5q0bAcN1xgGSTX0D
csqup3ezG/s7gzBPqIy9l9IXdhFEJ/UkIuoAwL2Xriq0d7Y1OSeATtmykrlZjHc1
QkmFjyT3cu8NbOCASdIj3zv2ri+lm0gtAVnXmCG+/wBC3Muo6rit6vlcPUK+XhCA
UoogjlPpXA5CVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:48 2026 by rpki-client