Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File: GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier: b1OtWUpBPQLze4+VgQx3LBI3YGx5CHoil0BQd9njl5A=
Subject key identifier: 33:D4:78:7C:92:F7:CE:14:6F:EC:DB:85:77:F4:71:B3:F3:68:A4:08
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 019D39AF20D1050483DBBA8E320BB21A4A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: OTF1xdUIIyAnOuOm3CbIi3PDf1idH5gcm+uSUr8phfk=)
2: QfrHMiVpt3G-cJy_BbBREo-KTJ0.roa (hash: LOQ7MtV866jGXGTdWHN/r/Nnuu+Qk3u4t0LPFc49Qt8=)
3: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (hash: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:20:d1:05:04:83:db:ba:8e:32:0b:b2:1a:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=33d4787c92f7ce146fecdb8577f471b3f368a408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:17:6d:de:a8:e1:eb:94:87:88:b9:fa:39:
75:6e:dc:00:4e:87:38:c6:13:41:fe:90:f1:74:77:
e6:5f:95:1f:3f:e9:5c:5f:aa:46:09:f5:41:48:42:
e4:fa:de:6b:2b:6c:ad:5d:b1:d2:76:62:25:f1:a0:
7e:c8:63:f3:1f:ea:fd:c5:d8:75:1f:bd:f1:7b:ed:
2c:99:a3:8b:53:62:5d:3d:c0:12:7b:a2:bb:da:0b:
f7:1f:19:42:e3:0b:15:ce:3d:3a:5f:a7:11:01:27:
6c:60:fc:b1:db:ff:49:34:99:42:68:c0:40:d0:05:
88:3b:d2:c2:e1:02:3a:3e:16:a8:94:95:5c:f4:8a:
0d:f7:b2:58:8b:c0:0c:dd:c7:81:c2:95:0a:74:ad:
e6:36:39:ab:55:b1:90:4b:64:c4:ff:44:e1:3a:a2:
78:65:fc:53:e8:26:33:0c:66:a5:68:32:42:f5:c6:
96:59:7f:64:ce:c5:dc:6f:dd:3a:35:cc:d0:b6:c8:
43:9d:7d:1c:b1:2d:7d:0c:d5:69:ee:d1:90:8c:83:
4d:57:7d:8c:5a:a3:e7:93:34:1f:c6:5e:e4:00:4d:
e1:42:64:29:59:5b:6c:f9:3a:ab:69:23:67:80:64:
61:fb:a1:d9:d4:2d:e9:01:0f:53:6c:54:86:70:d7:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:78:7C:92:F7:CE:14:6F:EC:DB:85:77:F4:71:B3:F3:68:A4:08
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:04:89:9f:3d:8d:5c:a8:cd:c7:e5:ab:f5:14:e3:01:bb:
03:b7:98:b4:e0:26:6b:b2:b8:4b:c3:86:de:58:d9:05:e4:ad:
cb:03:5b:2b:1d:c4:7e:29:40:aa:50:8d:3d:29:5c:5c:87:34:
f2:7c:96:ee:77:0c:93:24:0c:e2:73:02:1b:9f:8b:cd:79:02:
5e:e2:a6:b3:30:32:fe:a0:3b:23:4b:1d:c5:19:4a:2f:6f:80:
ee:e2:77:11:ec:7e:be:ee:f2:24:84:1a:93:af:00:a6:90:77:
60:d4:09:6b:00:08:4d:2a:02:39:77:d2:64:3a:3c:7b:8b:06:
e1:a4:37:f3:3f:e8:1a:84:fc:16:b5:da:0f:5b:d4:01:8f:4e:
41:a5:8a:05:56:ee:7c:51:2c:d9:92:06:5e:30:6c:48:37:f1:
9a:ef:35:b7:9a:99:e9:9a:c7:c8:e0:55:a2:ce:fc:a1:da:f5:
5a:8a:66:5c:3b:65:9a:d7:da:2b:11:3a:8a:b1:95:63:e9:36:
08:3f:b0:ba:78:3a:80:b3:5d:5b:b8:f9:69:ef:64:b5:0d:3c:
05:dd:ff:cd:c1:49:a2:ff:5e:80:5e:ea:c9:3b:04:cc:cc:dc:
69:9e:cc:34:c0:8d:df:63:51:29:d4:ba:91:64:a1:4e:05:60:
90:31:47:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ryDRBQSD27qOMguyGkqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx
YzliMTkwHhcNMjYwMzI5MTMwMTExWhcNMjYwMzMwMTMwMTExWjAzMTEwLwYDVQQD
EygzM2Q0Nzg3YzkyZjdjZTE0NmZlY2RiODU3N2Y0NzFiM2YzNjhhNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy90Xbd6o4euUh4i5+jl1btwAToc4
xhNB/pDxdHfmX5UfP+lcX6pGCfVBSELk+t5rK2ytXbHSdmIl8aB+yGPzH+r9xdh1
H73xe+0smaOLU2JdPcASe6K72gv3HxlC4wsVzj06X6cRASdsYPyx2/9JNJlCaMBA
0AWIO9LC4QI6PhaolJVc9IoN97JYi8AM3ceBwpUKdK3mNjmrVbGQS2TE/0ThOqJ4
ZfxT6CYzDGalaDJC9caWWX9kzsXcb906NczQtshDnX0csS19DNVp7tGQjINNV32M
WqPnkzQfxl7kAE3hQmQpWVts+TqraSNngGRh+6HZ1C3pAQ9TbFSGcNerGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPUeHyS984Ub+zbhXf0cbPzaKQIMB8GA1UdIwQY
MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt
ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm
LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA44EiZ89
jVyozcflq/UU4wG7A7eYtOAma7K4S8OG3ljZBeStywNbKx3EfilAqlCNPSlcXIc0
8nyW7ncMkyQM4nMCG5+LzXkCXuKmszAy/qA7I0sdxRlKL2+A7uJ3Eex+vu7yJIQa
k68AppB3YNQJawAITSoCOXfSZDo8e4sG4aQ38z/oGoT8FrXaD1vUAY9OQaWKBVbu
fFEs2ZIGXjBsSDfxmu81t5qZ6ZrHyOBVos78odr1WopmXDtlmtfaKxE6irGVY+k2
CD+wung6gLNdW7j5ae9ktQ08Bd3/zcFJov9egF7qyTsEzMzcaZ7MNMCN32NRKdS6
kWShTgVgkDFHEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:10 2026 by rpki-client