Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: CTJnHd5364O8U0XIps8yXA+N8AbvVlLVazlwJd1eT40=
Subject key identifier: AB:91:E7:D7:51:DA:70:82:98:A5:EA:14:94:6C:97:24:4B:7C:57:FB
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019DD689DEE390A83BE5F81C5C063566F048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 18E5
Signing time: Wed 29 Apr 2026 00:00:52 +0000
Manifest this update: Wed 29 Apr 2026 00:00:52 +0000
Manifest next update: Thu 30 Apr 2026 00:00:52 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: xiG5PAkO7nU+yX2Gry/kShQwvjR9BglJdH522RCweJE=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:89:de:e3:90:a8:3b:e5:f8:1c:5c:06:35:66:f0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Apr 29 00:00:52 2026 GMT
Not After : Apr 30 00:00:52 2026 GMT
Subject: CN=ab91e7d751da708298a5ea14946c97244b7c57fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:8f:ff:18:2b:a3:21:8e:4b:8b:fc:05:a1:
ea:05:dd:9f:db:02:82:25:4f:c5:ed:6a:40:f7:d6:
6b:6f:3b:ad:00:fa:8c:71:e5:47:d3:f8:c7:89:09:
0a:6f:f5:c5:3a:16:f6:53:f7:06:d1:e9:3d:93:7d:
8f:88:0f:85:b9:bf:91:a1:e3:c3:90:e2:38:1a:6e:
55:5d:09:fb:df:85:5d:dd:bb:aa:2f:f0:85:5b:7d:
e4:7a:5c:27:75:f5:ca:77:49:59:bc:4c:c8:1b:a5:
9e:d8:b0:27:1d:ba:92:ab:d2:f9:97:b4:80:21:dd:
1c:bf:36:92:8f:47:e6:5e:bc:5a:cd:73:ea:54:7e:
3e:9d:46:95:c4:27:6d:9f:bb:1f:ae:54:eb:6c:40:
5e:14:0a:67:75:30:bb:64:6c:8b:bc:af:1f:ce:a3:
6f:e7:cc:1d:db:36:95:6d:85:a7:f9:b5:55:cf:17:
70:58:04:b3:a3:e2:ee:a9:e9:5f:18:72:3e:c7:22:
43:04:cf:6e:52:88:cd:d0:2b:23:de:6d:f2:37:f2:
64:ff:35:d5:7f:72:cd:60:fc:20:f5:60:06:97:88:
a3:1a:2c:35:b2:c5:6d:ee:45:68:86:2b:e8:76:02:
b9:dc:6f:ed:8e:da:7a:6c:18:e0:da:f6:3f:68:08:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:E7:D7:51:DA:70:82:98:A5:EA:14:94:6C:97:24:4B:7C:57:FB
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:9c:22:e5:1c:ce:30:f1:75:67:a7:98:5a:83:ee:56:c3:
91:7e:85:e0:02:74:62:85:37:0e:f0:3f:96:9f:c5:33:36:04:
37:a3:97:6d:e2:ab:2c:d4:66:cb:d0:29:17:1d:c3:06:a7:97:
44:31:9d:a4:5e:c8:29:d7:e1:68:4d:f4:65:24:3b:12:6f:dc:
96:ac:08:8d:63:81:5d:d9:11:22:c8:43:59:07:dc:0c:97:d1:
11:65:d7:48:b5:4a:11:63:13:df:66:c5:d7:af:99:20:b8:5c:
47:a1:cb:9e:33:ed:c0:d5:66:73:bc:f2:bb:9c:a9:45:dd:1d:
f4:39:d0:2f:01:9c:03:ac:04:ba:79:b9:a7:30:94:4c:36:8b:
d9:99:ab:e5:cf:3a:65:0a:5a:15:4f:a6:b8:aa:b0:31:fb:47:
f1:86:2e:85:22:1b:55:0d:15:83:c5:5a:70:fa:3e:8b:e2:ed:
35:2a:9d:1a:33:e4:31:6c:37:a3:f2:b6:67:05:37:9c:e8:3c:
8b:56:28:b9:fe:ac:da:d4:66:52:e5:21:6a:21:49:f1:d4:aa:
8e:bb:62:ea:6f:19:e3:f5:7e:a7:90:35:bb:29:d8:d5:6e:00:
10:e8:e2:9d:12:16:42:06:a9:e4:07:70:45:5f:1d:e9:ed:e8:
2d:53:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:36:48 2026 by rpki-client