Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: WvAf7sEizVqEqMOU0IgvUXtH9tHcf1rYLU4hlUEI2J8=
Subject key identifier: 00:AC:2E:03:0C:62:1F:42:53:D8:FC:BD:AC:96:62:E9:67:60:75:A6
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019FA9E33D1106FC2DF48D23C25399053472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:01:09 +0000
Manifest this update: Tue 28 Jul 2026 18:01:09 +0000
Manifest next update: Wed 29 Jul 2026 18:01:09 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: gaLqt2g9xjylHgwgrgG8DMDvRyPKMQA17KaEzfrU4iE=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:3d:11:06:fc:2d:f4:8d:23:c2:53:99:05:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jul 28 18:01:09 2026 GMT
Not After : Jul 29 18:01:09 2026 GMT
Subject: CN=00ac2e030c621f4253d8fcbdac9662e9676075a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:f5:69:d1:c0:39:13:d9:2a:db:66:e3:c9:
81:0f:77:a1:3e:dc:b5:39:6d:c5:3a:e4:95:65:bb:
62:c9:be:08:70:18:1c:1c:d5:b4:0a:2d:dd:74:17:
f1:b1:b4:f0:7e:54:10:8a:73:71:20:17:bd:dd:e8:
0d:4d:92:3c:35:02:13:b8:4b:ed:6c:a8:21:10:63:
ba:13:f6:45:98:49:61:3d:ad:33:b0:cd:d4:0b:49:
bb:09:13:7a:ab:1c:52:8f:f1:b0:eb:af:6a:5e:d3:
e5:95:00:40:a6:b8:66:a1:f7:11:a2:8f:50:c0:f9:
81:a0:84:5d:8e:c9:1c:a5:0a:73:48:7d:13:15:cc:
57:bc:f2:28:e6:66:7b:02:98:3a:5d:84:df:0b:e8:
e6:04:cf:97:f2:0e:a7:fc:00:b8:fe:3d:44:09:c7:
31:cc:56:76:f0:25:11:79:ae:34:1a:e4:e9:e6:8c:
ec:8a:40:f8:60:10:58:de:1d:a8:03:a8:18:c6:8b:
db:a8:1a:ff:69:6d:e0:4a:8b:64:98:cf:a0:33:24:
ff:fb:73:a9:f2:6c:73:32:85:19:5e:9e:b5:82:da:
ca:ca:c0:97:5e:fd:97:fa:fb:b8:0a:3d:d8:a3:13:
80:a4:13:70:96:1d:31:a7:f7:0a:cc:88:ab:c5:1f:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:2E:03:0C:62:1F:42:53:D8:FC:BD:AC:96:62:E9:67:60:75:A6
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:e6:f3:55:3b:96:a9:37:78:ad:ec:5d:60:bc:5a:a2:5b:
94:ae:93:a9:d0:71:3a:76:59:9a:5b:27:04:7b:7c:b2:c0:49:
ce:3d:e2:07:cc:e6:e4:f2:03:fa:21:92:af:a3:5b:05:60:87:
4a:2d:e2:7f:77:14:5e:8a:79:30:5b:5d:84:14:e7:a6:2d:49:
6d:14:a9:2f:64:b4:de:ec:f6:31:e0:15:79:0f:cb:3d:ba:70:
a9:0c:2b:84:34:89:5c:84:c2:39:0c:90:f4:86:83:0c:f9:2e:
14:40:d8:60:e9:7a:81:3e:f7:da:f9:a7:94:d6:94:eb:2d:61:
38:05:de:d5:6f:d6:61:96:a3:43:b7:95:0b:b8:8c:17:f7:05:
1a:d3:9c:0a:b8:d7:03:51:c3:50:02:c8:1b:5a:d5:e6:fb:fe:
b3:93:bb:e6:35:49:e7:df:d1:7b:9b:6b:ab:b7:89:50:26:d4:
d9:76:83:52:25:a9:68:1d:c4:d6:46:7c:19:1a:ae:9f:a6:06:
9e:95:1b:f4:5e:e3:5f:de:78:67:fc:70:e3:85:aa:15:1e:e2:
b4:43:e0:0e:40:d9:12:aa:95:34:f0:ad:d2:48:49:61:15:b9:
fc:91:c8:93:7c:47:8c:59:9b:fe:b0:f3:13:d2:fc:46:4e:32:
ce:bf:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:37 2026 by rpki-client