Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: NLB6hxSfiW4/3158QA+HJRUvpeWwm9sW/orN6H3Cm2A=
Subject key identifier: E8:52:D0:A1:5A:B4:2D:18:6B:4F:84:A6:CD:9B:B2:7C:33:F5:8A:14
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019FAFADBA18D8821213F7DA084ED3AF20AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 21:00:25 +0000
Manifest this update: Wed 29 Jul 2026 21:00:25 +0000
Manifest next update: Thu 30 Jul 2026 21:00:25 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: UN0vpEMXWgBusrOmEmaxwm7hvQpL8wgjifeaSyQZmZ4=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:ad:ba:18:d8:82:12:13:f7:da:08:4e:d3:af:20:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jul 29 21:00:25 2026 GMT
Not After : Jul 30 21:00:25 2026 GMT
Subject: CN=e852d0a15ab42d186b4f84a6cd9bb27c33f58a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:43:da:c2:d9:18:26:15:5f:23:93:a6:ac:50:
d2:3f:7c:03:b5:5c:4b:98:87:3a:aa:0b:37:dd:e5:
8b:53:6c:51:79:0d:1b:42:c0:12:05:82:b9:75:20:
34:44:63:b0:aa:c1:b6:f0:78:20:55:8c:27:76:72:
05:c0:2f:8e:78:1b:f4:d3:f5:09:d3:76:10:15:18:
86:b5:18:20:07:10:5f:1c:ac:ca:1a:99:ae:04:c8:
d5:26:ba:ce:a7:00:71:72:ae:46:75:38:70:35:1e:
97:22:58:8a:b5:0d:91:f9:0a:7e:fb:42:d9:3b:a0:
f1:b2:e0:bf:81:91:10:f3:65:a8:02:62:da:3d:ed:
ea:6f:2e:3f:d4:02:44:59:26:ab:e9:33:9a:88:5c:
88:1a:95:b9:04:d5:16:c7:56:67:be:c5:ae:1e:2e:
7f:f6:bc:bc:b4:15:94:31:31:63:5b:c7:38:b5:d6:
02:4d:1b:ed:0b:e2:7e:7d:82:38:9e:2a:31:13:38:
a8:5f:9c:3b:3e:65:f2:cc:67:b5:f8:1e:13:f6:ce:
b0:5c:62:18:25:d2:47:ea:9f:33:4d:26:8a:39:3d:
45:91:ee:bb:5c:f0:f1:aa:98:cc:ce:06:ed:3d:79:
fb:4e:c9:4d:cf:29:c7:fb:42:22:dc:73:b6:e6:f1:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:52:D0:A1:5A:B4:2D:18:6B:4F:84:A6:CD:9B:B2:7C:33:F5:8A:14
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:72:49:fd:92:bd:5f:b6:d8:a4:65:ef:75:7d:64:e6:05:2c:
4b:51:09:ea:56:8a:34:17:60:ec:d7:c9:4f:26:c9:41:34:5f:
d9:39:67:64:58:d9:67:bd:ea:1a:ed:1f:94:94:96:49:7c:b1:
02:5d:24:d1:8a:15:bc:e8:4f:0e:4a:e8:02:1a:8e:44:ae:ee:
71:6e:82:0d:49:6f:f6:38:84:ef:51:1c:db:9d:d9:94:49:c0:
de:dd:b8:ff:9e:60:ec:1e:20:f2:df:73:45:f1:19:89:c7:71:
4e:6a:3c:6f:8d:78:82:24:f8:de:55:93:26:e2:09:16:02:a7:
f0:90:30:15:af:b9:68:53:a5:d2:d3:57:c3:c3:12:12:5b:3a:
79:a6:fa:cd:33:14:ec:5f:7c:12:05:7b:7d:e6:44:da:0d:59:
4e:44:0e:d1:d2:f2:ad:66:de:42:b0:47:63:0d:20:ac:aa:75:
31:3c:fa:ae:f8:ab:09:0f:67:46:da:1a:f8:1a:db:cd:bc:3b:
56:35:bf:59:57:66:d5:cf:4e:d6:5c:80:52:26:6d:05:9e:9f:
3e:e9:e4:78:05:d9:93:cc:6c:5c:ce:ee:ff:7c:12:55:13:54:
83:b7:8c:98:28:30:fd:41:33:6e:ee:38:fa:39:db:33:20:01:
e5:f3:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:52:31 2026 by rpki-client