Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: sYt/WrqaNgfm7n+gogYcqdDg58xccKOjWnVxAAkKGck=
Subject key identifier: 40:38:45:F5:57:92:12:0E:4E:F2:E3:CE:53:C5:C2:E2:28:C7:C7:CD
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 01A12730A4CBFDD49D9C913DDEEB2EBAD593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 19:01:01 +0000
Manifest this update: Sat 10 Oct 2026 19:01:01 +0000
Manifest next update: Sun 11 Oct 2026 19:01:01 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: hONlOlD2MUfv8lDwa+oP/KCaUK0TL/0Togp3DZ5lNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:a4:cb:fd:d4:9d:9c:91:3d:de:eb:2e:ba:d5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Oct 10 19:01:01 2026 GMT
Not After : Oct 11 19:01:01 2026 GMT
Subject: CN=403845f55792120e4ef2e3ce53c5c2e228c7c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:1f:84:8a:1a:1c:6b:db:f7:3f:b8:95:39:
32:56:95:37:18:55:4d:82:8e:dc:e6:9d:7d:fb:61:
7d:9b:9f:c2:8b:6f:83:3b:72:cc:b9:26:ca:6c:b4:
8f:68:b3:b6:5f:9a:e9:4e:66:fe:60:6e:84:41:50:
6b:75:a3:e3:ab:99:ad:74:b7:7f:a0:7d:e4:1d:fc:
73:05:a9:bc:58:2d:f7:d7:8a:10:93:9f:ec:aa:c8:
41:e4:75:06:8b:7d:c5:2c:79:b8:5d:ff:1f:37:e0:
2b:32:a9:3a:7a:16:55:a6:b9:5c:e7:3b:d4:62:55:
19:6f:22:8a:98:d1:47:2a:bd:89:dc:bf:e4:4d:46:
f1:86:25:5c:de:d6:0d:18:3d:ef:8c:08:93:2f:08:
07:15:d6:76:4c:af:a6:60:86:a6:ca:28:32:dd:ec:
8d:d1:70:36:09:83:18:4f:80:95:33:58:6a:a7:f1:
65:11:6c:49:06:91:02:a8:a3:cd:3f:fa:33:af:6c:
95:61:a6:d9:b3:d3:ac:b5:6e:86:27:b4:47:3f:3f:
c4:81:b8:2d:34:d6:b4:be:25:fc:f0:0d:66:1d:24:
0a:14:19:c0:de:7f:8d:8a:c8:46:45:d3:72:2c:2e:
4c:61:b0:76:23:57:73:85:b3:0a:d6:9d:22:47:4c:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:45:F5:57:92:12:0E:4E:F2:E3:CE:53:C5:C2:E2:28:C7:C7:CD
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:14:08:6f:2a:85:ed:3a:f9:6e:dd:fc:dd:c5:c9:d9:9b:
0e:e5:e0:18:5d:c1:32:9d:55:40:3b:95:5c:af:df:e0:8d:b8:
99:a4:d5:53:58:24:86:7a:9d:94:c7:ae:d0:e8:a1:f5:26:16:
86:4a:df:15:26:64:8e:0f:f3:0d:4e:db:0b:b1:1f:5c:d0:c5:
ca:54:3f:2e:f5:c6:a6:ef:47:d6:8b:b2:10:13:b5:fe:ad:2b:
5b:e8:04:28:40:97:d1:0b:5e:12:4d:23:16:72:59:05:91:27:
ae:20:50:66:0a:be:ae:cc:f1:54:b3:57:cb:c9:9e:89:9d:0e:
b9:85:ca:64:a4:4a:b6:32:50:47:06:0e:74:97:80:54:ee:17:
86:6b:a1:2f:9e:f4:bd:8b:09:31:4c:c6:48:e3:4f:61:c4:e9:
83:bb:03:af:29:8e:48:86:f3:c5:03:0d:34:16:b8:19:af:b8:
8f:d7:10:ab:57:fe:b4:c2:5e:72:86:c7:9d:79:e1:1e:a2:3d:
75:62:a2:3e:8e:21:60:c0:7f:81:28:d3:12:58:08:cf:6e:ad:
d6:18:54:c9:a6:0d:e8:28:e2:ec:76:05:d6:ff:4a:ee:7f:65:
fe:4b:df:3f:0c:18:a3:62:2f:6b:ef:6d:01:f9:07:fb:97:ae:
21:53:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:37 2026 by rpki-client