Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: QD+hbERc2lxlFHhHtLoZwReWwM/pYT2ku9YrZcjpiCI=
Subject key identifier: C3:8E:70:C4:FE:BC:76:9F:E8:25:F5:F7:A0:66:65:F8:A0:68:36:93
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019D96CEC62B8FEA888630E51DFB2BE0B64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 15:00:26 +0000
Manifest this update: Thu 16 Apr 2026 15:00:26 +0000
Manifest next update: Fri 17 Apr 2026 15:00:26 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: w+fSvQ2ivSkkPzlFkuC/kd+PmZ5RtGVU8TcfRK/48kA=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:ce:c6:2b:8f:ea:88:86:30:e5:1d:fb:2b:e0:b6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Apr 16 15:00:26 2026 GMT
Not After : Apr 17 15:00:26 2026 GMT
Subject: CN=c38e70c4febc769fe825f5f7a06665f8a0683693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:3c:b9:33:78:3d:f8:9b:92:3f:f6:2e:50:
a6:5d:e2:46:ba:a9:e6:5f:75:96:17:4a:2c:22:95:
a9:49:b5:7f:c1:db:73:c3:dc:3b:c7:31:d2:b2:f8:
49:82:8d:99:09:70:99:0b:88:76:95:5e:f7:94:6a:
d2:8d:50:d0:92:0e:8d:8f:27:d2:c9:c4:c6:f8:7e:
56:1f:09:ba:bd:48:8f:50:8d:3f:61:6c:27:72:2f:
4d:17:4d:4c:f3:80:5f:15:2a:84:fd:45:28:04:b5:
9e:25:35:e8:37:52:85:32:05:e9:0f:e1:d4:d7:f7:
7b:64:85:ac:ca:fe:8a:2d:06:55:df:7b:d4:fb:8f:
ea:b1:a0:20:7d:df:bf:85:0f:4f:ce:3a:03:fe:8f:
99:72:eb:3e:84:2f:6a:d4:87:c4:1e:9d:63:ce:a4:
0d:b4:5e:1e:a8:2f:3c:a7:cf:25:49:a2:93:3b:b9:
b7:78:01:99:fe:35:ca:ef:c4:d3:a6:9d:9b:fd:f7:
86:72:f1:ec:f6:43:63:61:5c:d7:96:09:c8:f7:c5:
8a:fb:27:70:d9:6a:41:7e:e1:b2:36:5c:76:0b:43:
dd:95:6f:67:ec:21:7e:9a:91:f8:f7:ec:4d:24:4f:
d2:15:b9:45:2b:14:cf:78:33:50:67:9d:16:ee:e9:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:70:C4:FE:BC:76:9F:E8:25:F5:F7:A0:66:65:F8:A0:68:36:93
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:e6:f0:37:eb:25:15:5d:38:5b:f5:5b:15:e9:d9:72:9c:
8c:52:16:65:be:07:40:7a:9f:85:20:af:c5:ee:de:d9:b2:f9:
67:71:d9:27:14:b1:ab:ee:ef:be:3c:c5:2c:ab:8a:af:e1:37:
16:4c:75:9f:b5:67:a6:5a:2d:6b:25:a1:c1:29:eb:49:45:a1:
81:0a:73:0d:78:a1:7b:9b:f0:63:e8:fe:a3:20:73:be:31:b9:
9b:4b:01:49:39:ea:61:0e:2b:b2:c4:4c:d7:8c:ee:96:cf:5d:
d9:23:22:82:e7:fd:00:84:cb:c3:a6:8f:5b:34:9a:f6:c2:09:
95:2a:ae:27:ea:c6:8e:f1:7a:5e:62:90:78:ac:a4:eb:68:e8:
85:db:7d:a3:b4:0e:37:86:06:45:14:10:15:a9:93:92:5a:f8:
58:7e:06:63:62:d8:8e:39:de:ce:2f:a6:ef:ef:e2:47:62:72:
90:0e:9e:1f:52:b8:e0:9e:c9:6f:26:42:42:4e:6e:06:a3:4d:
4d:d9:89:3e:d1:6a:12:77:19:84:44:a4:6d:a9:3a:d7:45:5c:
f8:84:54:f8:3c:21:7a:0d:64:8d:90:77:be:da:2d:70:3b:35:
fc:ec:a9:e2:87:d5:2e:3d:a6:7a:8e:e6:ae:a6:e9:a5:da:ad:
5a:20:16:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2WzsYrj+qIhjDlHfsr4LZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli
NTMwNTcwHhcNMjYwNDE2MTUwMDI2WhcNMjYwNDE3MTUwMDI2WjAzMTEwLwYDVQQD
EyhjMzhlNzBjNGZlYmM3NjlmZTgyNWY1ZjdhMDY2NjVmOGEwNjgzNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5I8uTN4Pfibkj/2LlCmXeJGuqnm
X3WWF0osIpWpSbV/wdtzw9w7xzHSsvhJgo2ZCXCZC4h2lV73lGrSjVDQkg6NjyfS
ycTG+H5WHwm6vUiPUI0/YWwnci9NF01M84BfFSqE/UUoBLWeJTXoN1KFMgXpD+HU
1/d7ZIWsyv6KLQZV33vU+4/qsaAgfd+/hQ9PzjoD/o+Zcus+hC9q1IfEHp1jzqQN
tF4eqC88p88lSaKTO7m3eAGZ/jXK78TTpp2b/feGcvHs9kNjYVzXlgnI98WK+ydw
2WpBfuGyNlx2C0PdlW9n7CF+mpH49+xNJE/SFblFKxTPeDNQZ50W7ukAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOOcMT+vHaf6CX196BmZfigaDaTMB8GA1UdIwQY
MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt
YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm
LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHPm8Dfr
JRVdOFv1WxXp2XKcjFIWZb4HQHqfhSCvxe7e2bL5Z3HZJxSxq+7vvjzFLKuKr+E3
Fkx1n7VnplotayWhwSnrSUWhgQpzDXihe5vwY+j+oyBzvjG5m0sBSTnqYQ4rssRM
14zuls9d2SMiguf9AITLw6aPWzSa9sIJlSquJ+rGjvF6XmKQeKyk62johdt9o7QO
N4YGRRQQFamTklr4WH4GY2LYjjnezi+m7+/iR2JykA6eH1K44J7JbyZCQk5uBqNN
TdmJPtFqEncZhESkbak610Vc+IRU+Dwheg1kjZB3vtotcDs1/Oyp4ofVLj2meo7m
rqbppdqtWiAWnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:28 2026 by rpki-client