Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: Kt9d8tNXBcEt350sDYi96HLyGLDNKz258f22DZeVgN0=
Subject key identifier: 6D:F5:41:65:20:CE:1C:34:02:CA:B3:5E:78:79:C1:1A:2C:97:BF:63
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 019D9999A5F6C663F949BF1F380BCF16EA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: i9qE3+bLOWk80cCYahZFp9LOPjm0WVYSEWMqurJ6Swg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a5:f6:c6:63:f9:49:bf:1f:38:0b:cf:16:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=6df5416520ce1c3402cab35e7879c11a2c97bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:f8:e2:6d:7a:d8:91:38:c4:21:ef:3a:09:
13:a4:f1:ff:61:63:f8:50:51:80:12:ee:d8:29:79:
79:d8:c1:81:ce:e1:03:d4:d8:3b:1f:e0:43:14:40:
64:7e:b0:24:d9:2d:e4:01:d9:bc:83:49:55:6e:24:
e8:05:85:85:99:5b:e5:c9:8c:39:66:f7:b4:dc:93:
ae:08:2d:56:d4:b6:1b:1a:6e:10:b6:2b:cd:74:5d:
33:27:28:83:b7:0d:04:81:17:b7:34:3e:31:13:5a:
1e:23:80:38:4a:cf:0a:c2:c7:62:1e:3a:07:e8:d6:
e9:74:7b:b7:dd:aa:d1:3e:aa:af:bf:d6:fc:dc:7e:
57:dc:a5:fa:26:45:04:1c:12:df:80:f9:cc:a2:17:
f6:2f:cd:ee:32:1e:00:66:20:dc:51:8e:7e:87:92:
71:a7:fc:dd:60:37:af:1d:9b:1b:60:ec:98:c3:57:
70:b7:40:82:f0:86:e1:60:b0:36:43:39:92:af:7e:
c5:2f:6d:2d:e5:0c:ac:ec:5e:94:b1:40:a5:88:2d:
ce:ce:4c:68:e3:87:2f:0d:c3:6e:f3:d0:38:f1:66:
96:04:b9:fe:40:d5:e5:10:00:39:98:09:4f:cc:88:
bc:28:76:be:24:8e:18:7b:78:49:86:e9:d2:84:ce:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:41:65:20:CE:1C:34:02:CA:B3:5E:78:79:C1:1A:2C:97:BF:63
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bb:c8:be:4c:bb:cd:79:b0:50:7f:7d:1a:ac:91:70:80:52:
9f:95:5b:d5:3b:b0:1b:c9:c4:59:35:10:bf:1f:20:6f:24:36:
9e:58:f9:66:68:7d:35:d6:08:c2:75:96:1b:a9:21:1e:d4:f8:
2c:a6:2c:1c:33:40:81:81:7b:be:e1:0d:c9:a0:97:f5:c1:bc:
a2:11:a6:ff:d5:f5:24:6d:7a:42:a5:fc:84:ed:ce:93:16:51:
f3:0f:b6:2f:0f:a2:ad:89:6c:19:87:60:ec:59:fc:4a:9f:ac:
dd:95:da:91:ab:87:18:be:70:08:af:22:ba:56:cd:d4:ba:bd:
a0:00:68:ba:f7:1c:1a:f2:3d:70:f7:46:69:d1:c3:f3:07:15:
71:44:7b:60:75:c1:1a:ae:66:a3:9b:71:85:6f:49:b1:f8:9c:
c4:63:69:c1:5d:83:ca:b6:a0:69:0d:f6:e2:6c:fb:51:07:3e:
57:e0:ff:82:95:3d:6b:66:34:78:22:c6:29:d1:8c:28:eb:ea:
a3:1e:5d:b3:25:b7:c9:2d:44:0d:dc:59:35:55:52:bc:c5:28:
a2:15:b0:1b:ec:5f:16:bf:03:ae:6f:e7:dc:c1:6e:7b:10:94:
d6:e4:6e:93:a5:b0:bf:ee:62:cd:d9:7f:55:cf:61:38:26:69:
46:e2:04:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmaX2xmP5Sb8fOAvPFuoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky
NDBkYTUwHhcNMjYwNDE3MDQwMTE2WhcNMjYwNDE4MDQwMTE2WjAzMTEwLwYDVQQD
Eyg2ZGY1NDE2NTIwY2UxYzM0MDJjYWIzNWU3ODc5YzExYTJjOTdiZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23j44m162JE4xCHvOgkTpPH/YWP4
UFGAEu7YKXl52MGBzuED1Ng7H+BDFEBkfrAk2S3kAdm8g0lVbiToBYWFmVvlyYw5
Zve03JOuCC1W1LYbGm4QtivNdF0zJyiDtw0EgRe3ND4xE1oeI4A4Ss8KwsdiHjoH
6NbpdHu33arRPqqvv9b83H5X3KX6JkUEHBLfgPnMohf2L83uMh4AZiDcUY5+h5Jx
p/zdYDevHZsbYOyYw1dwt0CC8IbhYLA2QzmSr37FL20t5Qys7F6UsUCliC3Ozkxo
44cvDcNu89A48WaWBLn+QNXlEAA5mAlPzIi8KHa+JI4Ye3hJhunShM5vfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG31QWUgzhw0AsqzXnh5wRosl79jMB8GA1UdIwQY
MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt
Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh
LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbvIvky7
zXmwUH99GqyRcIBSn5Vb1TuwG8nEWTUQvx8gbyQ2nlj5Zmh9NdYIwnWWG6khHtT4
LKYsHDNAgYF7vuENyaCX9cG8ohGm/9X1JG16QqX8hO3OkxZR8w+2Lw+irYlsGYdg
7Fn8Sp+s3ZXakauHGL5wCK8iulbN1Lq9oABouvccGvI9cPdGadHD8wcVcUR7YHXB
Gq5mo5txhW9JsficxGNpwV2DyragaQ324mz7UQc+V+D/gpU9a2Y0eCLGKdGMKOvq
ox5dsyW3yS1EDdxZNVVSvMUoohWwG+xfFr8Drm/n3MFuexCU1uRuk6Wwv+5izdl/
Vc9hOCZpRuIEdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:10 2026 by rpki-client