Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: 9lK/l+GULFaEpzrtMRFU0Aek1tAFtv0zJH9MjxS032s=
Subject key identifier: 20:E6:5B:2E:10:3A:58:DA:55:D2:D8:DE:41:08:6C:DD:C1:AD:9E:B2
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 019D67636E8443A7C77480FF37C379C725B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 18A9
Signing time: Tue 07 Apr 2026 10:01:02 +0000
Manifest this update: Tue 07 Apr 2026 10:01:02 +0000
Manifest next update: Wed 08 Apr 2026 10:01:02 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: ltjFzNFEcyALU7tFu8QWYiL6hs/+/ntHn+ydCAjykJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:63:6e:84:43:a7:c7:74:80:ff:37:c3:79:c7:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Apr 7 10:01:02 2026 GMT
Not After : Apr 8 10:01:02 2026 GMT
Subject: CN=20e65b2e103a58da55d2d8de41086cddc1ad9eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:30:b9:d5:0f:bd:13:7d:93:aa:18:c9:dc:
ce:02:46:f4:d1:e8:92:b7:c8:d4:63:f7:a8:34:7c:
b9:ee:55:04:bc:13:41:c8:9c:2a:f6:79:12:e7:d0:
45:aa:f0:94:41:41:29:48:fa:ac:2d:02:32:69:37:
ff:38:1c:93:92:78:b6:95:6c:d7:20:f6:31:93:c3:
cb:2c:65:49:13:d2:eb:2d:6c:74:92:9f:67:ac:ae:
a1:9b:a6:fe:39:a9:a6:80:3d:0b:c9:a2:3c:a4:d5:
f4:62:78:7f:07:6c:25:51:5c:d0:94:7f:28:51:98:
ba:42:95:d1:3a:31:b3:a5:25:78:c5:3f:a3:98:b4:
ed:d0:4b:bb:7b:94:fd:b7:f2:b0:33:4a:a0:54:f5:
e8:01:17:ec:3f:d0:10:d4:9b:a9:11:47:55:aa:c5:
62:d3:f2:cb:fe:e3:61:e6:85:6d:d5:09:a6:38:e6:
bc:76:a2:f7:9b:78:c1:ff:ab:04:fc:d0:85:c8:42:
04:ba:fa:34:d4:0f:63:9a:25:ca:a5:83:cd:ea:34:
b8:1e:0f:8d:1a:28:a6:7c:98:ec:3b:11:f0:99:34:
00:99:5c:33:0b:cc:66:a2:f8:f0:a4:1d:5d:a0:ea:
cb:cf:e3:c0:9f:64:1e:75:42:f1:46:78:2b:42:c0:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:5B:2E:10:3A:58:DA:55:D2:D8:DE:41:08:6C:DD:C1:AD:9E:B2
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:19:e9:4c:15:00:23:26:a4:18:fd:82:3f:b2:21:53:b1:
9b:34:97:42:35:e9:5f:c7:e1:93:b9:47:da:06:bf:92:8e:a2:
ec:2c:30:49:a2:60:47:3d:d1:77:52:89:9a:a8:7c:44:7d:d9:
56:3b:8a:df:10:2d:63:89:fc:5f:eb:5a:f9:0c:07:fc:fb:cd:
1d:74:5d:42:23:54:0c:b2:4f:b4:f6:38:22:71:e6:67:54:ca:
91:0e:84:c8:e7:af:ef:4d:70:0e:26:ba:ce:da:55:cb:95:f9:
4f:ce:89:67:e2:a7:43:4e:b0:60:a0:a9:9b:bd:3c:97:c8:6f:
2b:3b:89:a9:85:1c:de:df:6e:de:bd:e4:8d:5e:e0:ac:1a:e8:
4e:6f:2c:e1:a0:69:cc:f9:03:08:50:75:98:ed:3a:25:0e:ad:
58:35:cc:55:62:b3:ce:e2:c9:23:48:47:6b:d9:f8:ab:7e:81:
17:ea:4a:f7:b6:50:be:12:ad:4c:81:18:1b:81:8e:3f:54:85:
07:b3:88:ee:25:7a:90:db:59:d0:02:3a:54:e9:8f:66:e2:05:
69:04:b0:18:57:19:c6:dc:5c:66:f0:cd:a6:78:97:cc:0b:43:
ba:89:e0:aa:e1:dc:7a:a0:eb:06:75:c0:4e:6d:c3:c9:1f:b5:
2c:d4:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:31:38 2026 by rpki-client