Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: 9z1q4ono4lNXcpFW+yA7JowTMLzKzBlLiUAKpF2bYsY=
Subject key identifier: 6F:3A:F1:A7:29:57:D4:14:35:65:B9:88:5E:A4:A2:2E:FF:08:9E:1E
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019DA341503E2913CB99D58A9343851AFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 01:00:59 +0000
Manifest this update: Sun 19 Apr 2026 01:00:59 +0000
Manifest next update: Mon 20 Apr 2026 01:00:59 +0000
Files and hashes: 1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: syXUCoNVVAb/mN/rMghWw5Na9xMXxEXt/hitMM9pIsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:50:3e:29:13:cb:99:d5:8a:93:43:85:1a:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Apr 19 01:00:59 2026 GMT
Not After : Apr 20 01:00:59 2026 GMT
Subject: CN=6f3af1a72957d4143565b9885ea4a22eff089e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:1f:53:96:e2:03:1e:9d:ec:97:b2:ba:51:
db:72:48:75:f6:d8:7e:22:4c:c1:51:e0:e5:13:5a:
eb:be:9f:c5:59:28:28:5f:8a:de:f4:8d:45:a5:0f:
34:de:a6:37:c5:a7:4a:c9:ae:86:39:ef:6c:8a:00:
6e:63:a3:8a:66:74:b2:df:e4:e6:ea:40:e4:5f:08:
ac:2e:c0:54:9b:db:9c:c8:b0:3c:3a:0e:d9:cd:67:
f5:64:9a:04:63:34:53:31:a5:95:fd:94:e4:0a:61:
bc:17:e2:5c:a1:e3:5f:dd:89:19:57:90:4e:c7:bf:
d9:8c:cb:bc:00:07:0a:b0:16:cd:14:bc:83:38:94:
94:ec:13:47:f8:48:74:11:a9:e0:b4:6b:13:3d:4a:
fa:10:1b:7a:93:42:ba:88:48:e8:0f:72:59:03:3c:
c4:02:23:ca:39:39:2e:df:d2:40:6c:9d:78:cd:ca:
ee:dd:35:16:8a:c0:ed:8c:39:e6:2f:9d:c5:db:42:
7a:65:b9:5c:fd:5b:b3:42:87:47:28:92:41:11:17:
e8:6b:c7:c1:1b:ca:43:55:18:63:51:55:52:3e:e2:
58:52:ae:05:07:f6:85:e7:b6:57:4e:54:ec:8e:ad:
53:0b:05:08:f0:57:25:48:56:9f:65:ff:ca:0a:39:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:F1:A7:29:57:D4:14:35:65:B9:88:5E:A4:A2:2E:FF:08:9E:1E
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:bd:4e:8d:53:3d:b0:e1:43:ee:a2:94:15:65:fc:76:ab:
37:8a:0c:7c:38:81:3c:b6:11:bd:af:75:60:6e:89:5c:51:d4:
68:ab:32:f6:f5:87:da:7f:22:d2:c0:4d:75:b9:a0:d8:b2:b8:
0c:f3:94:46:9c:3f:3d:f6:87:24:e1:68:eb:3d:d9:0f:4f:7e:
6c:3a:47:f1:db:8d:3f:b6:74:fd:82:27:55:b3:5e:78:d3:10:
e5:86:0a:63:6e:fc:9b:8c:63:c7:d5:a8:4b:06:11:21:6f:b8:
85:e1:7f:c4:10:e3:e0:27:b8:d7:bd:9e:9e:03:25:38:5a:d4:
ed:bf:be:e2:2c:c1:5f:eb:dc:42:3f:cf:2b:60:72:fe:10:07:
70:f0:d9:64:f4:67:c3:0b:96:b0:d0:56:55:31:5d:c3:58:a3:
e6:ad:a1:ff:be:b5:3e:d7:d1:81:7a:76:ca:85:a8:49:e4:63:
87:3e:6c:38:15:ab:ec:74:48:09:44:60:9e:25:a2:a2:7c:5a:
fb:85:59:4b:76:aa:73:db:d9:d8:e6:13:53:12:54:7c:60:a6:
79:90:d4:e5:47:b1:0f:01:0d:b0:7b:90:76:12:76:bd:6f:b8:
9b:93:cf:15:be:53:11:8c:d3:f1:67:10:34:16:bb:32:2a:63:
1e:9b:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:00 2026 by rpki-client