Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: FstTzbqTl4UFuiJt3h12LJpN0BBKA3qpdDUj4CWBaiA=
Subject key identifier: 1B:B7:EA:80:FE:5C:5F:29:6F:9C:52:C6:7D:26:0A:04:D4:2B:68:5C
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019CDF58454434CEA588A5C7116320E0EFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 1865
Signing time: Thu 12 Mar 2026 00:00:29 +0000
Manifest this update: Thu 12 Mar 2026 00:00:29 +0000
Manifest next update: Fri 13 Mar 2026 00:00:29 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: /Vc4qxeaYAH1AiRIPWX+cXTEoK55OROIsC3hSP+jSlM=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:58:45:44:34:ce:a5:88:a5:c7:11:63:20:e0:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Mar 12 00:00:29 2026 GMT
Not After : Mar 13 00:00:29 2026 GMT
Subject: CN=1bb7ea80fe5c5f296f9c52c67d260a04d42b685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:d3:e6:52:e3:ca:a7:13:b4:38:09:67:34:
e3:05:ca:17:80:42:29:cc:3f:b9:3e:9c:71:8b:9d:
74:45:0e:6a:8a:ca:ca:04:83:9f:08:8a:5f:7c:e1:
a4:64:e2:cd:ab:0e:77:03:27:82:1b:ec:03:77:8e:
e3:4d:24:98:1d:64:7c:99:26:0e:d3:6f:15:61:46:
82:f8:db:5e:40:a3:93:06:49:2b:3a:0c:98:ff:1f:
9b:2e:35:b9:db:a9:53:f2:ec:14:4e:97:fe:b2:54:
4b:a5:41:f8:c5:bd:a6:d2:e3:52:85:46:34:38:ed:
a9:ed:c6:a9:52:ae:a4:24:4e:32:3d:27:d7:b2:ed:
da:68:26:8f:31:4a:82:e4:45:c9:18:33:75:80:b9:
a8:cf:f6:ba:f0:8a:f9:1b:9b:5b:65:71:86:cd:e0:
e7:ef:c0:9f:23:ec:8e:b2:50:d4:49:1d:2a:f6:81:
3b:dd:bf:d6:45:72:d1:9d:4e:f0:0f:6d:b9:3b:1a:
24:82:dd:ce:7f:f3:e1:00:d4:27:a4:63:6b:27:7c:
bc:78:02:09:92:5d:b5:3f:50:5a:f8:7d:92:1e:20:
4f:c2:22:33:06:f7:cf:e3:d4:69:9b:96:3c:19:e5:
67:e7:6e:7e:f4:40:90:6c:3f:18:fa:1e:5d:ee:46:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:EA:80:FE:5C:5F:29:6F:9C:52:C6:7D:26:0A:04:D4:2B:68:5C
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:9b:e8:af:1f:b6:3c:78:a1:70:d0:64:79:48:b0:16:dd:
e6:da:fb:39:24:b8:4d:ce:cf:6a:28:fa:45:de:af:08:6d:dc:
0b:58:e8:2d:5b:31:52:f4:ec:60:6c:f7:76:2d:7c:2f:f5:2c:
80:a2:4e:05:f6:e4:6e:49:af:3a:cb:74:d2:d7:39:70:45:77:
7a:67:14:9d:ea:41:88:fe:33:40:3b:90:72:d6:45:22:36:2d:
8d:35:36:5c:68:6a:9b:03:0f:91:0a:2f:c7:70:c7:78:08:08:
42:41:25:16:4d:01:ce:4f:b9:0c:87:f0:bf:b6:88:8d:4f:33:
ab:ee:38:78:2d:08:a3:33:bf:1f:b5:04:22:16:9e:04:2b:65:
e5:a6:b2:60:5c:39:2d:cd:fa:a4:f5:1d:36:d6:e2:a0:c1:fd:
6f:17:9f:e7:cc:98:b9:c2:3d:c2:36:75:40:97:c4:c4:aa:a0:
2e:2c:d3:c5:1c:6c:6a:db:ab:a5:a8:ed:d8:91:d7:86:1f:cd:
2b:4e:08:e4:8f:25:52:bd:91:71:62:d7:94:1e:a2:95:4f:cf:
9e:b3:19:f8:65:f2:79:ad:26:93:3e:52:d7:70:9c:4f:b3:e1:
f4:5f:4d:e5:e2:3b:18:45:cd:b6:1c:1a:1b:ae:0f:3c:e7:cc:
4d:8e:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 10:40:54 2026 by rpki-client