Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: 1KwSPWoE7lworlOvs3re8bDJoAg2th5tzrlJsmOat7E=
Subject key identifier: 1C:2A:61:53:8E:5A:A9:68:CB:4A:1A:83:1F:06:73:95:01:E9:CA:3B
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 01A1046DDACC3FAC16BE007139981C463D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 01:01:10 +0000
Manifest this update: Sun 04 Oct 2026 01:01:10 +0000
Manifest next update: Mon 05 Oct 2026 01:01:10 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: CoWZuuugSqADttlL3ECnqA0/2xNLtm0GJdN2l24nq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:da:cc:3f:ac:16:be:00:71:39:98:1c:46:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Oct 4 01:01:10 2026 GMT
Not After : Oct 5 01:01:10 2026 GMT
Subject: CN=1c2a61538e5aa968cb4a1a831f06739501e9ca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:98:b0:54:fe:9c:0b:1b:e2:80:fa:e2:d1:
60:65:0a:af:dc:7f:0e:5e:53:a6:4c:eb:ec:48:7c:
d2:1c:1d:c3:ae:ce:b8:10:02:c1:c4:46:dc:36:9b:
47:df:11:41:5a:df:7b:37:a3:93:9e:49:96:73:0f:
b0:30:08:4d:e3:b4:e7:9d:e0:e4:d0:61:1d:15:55:
03:0c:e5:d4:8a:63:2c:a3:ab:76:44:ca:5a:dd:34:
ea:5a:51:81:5b:d6:a1:d5:87:8e:53:0b:5b:3c:61:
f1:bc:30:99:35:55:37:39:58:10:c7:06:79:e3:a4:
35:58:12:08:b8:55:b2:75:6d:54:32:07:26:f5:cf:
a2:dc:2d:80:ab:22:d9:a8:fd:77:61:5b:45:53:35:
66:89:2a:35:54:58:02:aa:8b:16:9e:c8:e7:73:83:
24:5d:d0:b5:fe:c5:d5:58:98:3a:d0:ac:43:79:ee:
8e:cc:7d:c0:c8:69:4f:24:f2:fc:68:d9:ca:40:1b:
fb:7d:cb:92:0f:b5:8d:03:d7:cd:d3:c2:45:8e:40:
95:8d:39:9c:6e:be:46:04:b4:4c:36:36:a2:8e:95:
dd:71:aa:ee:3b:6d:bd:3e:3e:4c:1f:66:56:bf:15:
10:4a:33:75:73:c1:dd:31:31:a9:73:8f:e2:96:7e:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:61:53:8E:5A:A9:68:CB:4A:1A:83:1F:06:73:95:01:E9:CA:3B
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5f:92:a6:74:db:2a:cc:0f:af:01:76:66:97:b6:9c:ff:32:
f1:96:9b:d8:b8:a0:59:50:35:48:8e:8d:bd:7c:9c:a1:2b:51:
e6:30:57:ea:06:9f:32:a4:ea:43:b0:bc:98:bd:f9:1e:81:a2:
e3:f6:75:82:5a:71:60:2b:23:3e:3f:b7:ad:3b:bb:34:e1:b1:
50:57:05:a9:80:4e:2f:2a:bb:55:c2:58:16:e7:57:84:31:a1:
d2:7d:c8:70:51:bb:b1:36:2e:73:91:d2:ca:d3:48:8e:d7:65:
02:d4:e0:81:fd:b2:d8:2b:4b:a0:48:95:12:3c:3b:2e:10:5f:
17:31:15:ec:55:37:3a:0c:65:92:b8:d1:61:23:a6:f6:f1:50:
cc:46:09:bd:b2:91:62:3f:54:41:7a:6e:ef:b4:39:cd:10:35:
cb:19:3b:77:ed:bc:e9:43:85:94:d7:2f:a8:ea:42:3b:3b:83:
e2:b6:4b:3e:39:d8:da:e0:d7:5c:d2:4d:e5:10:44:92:6c:73:
5a:3f:b3:8a:31:14:8d:23:a7:ef:9b:48:5d:08:cf:37:61:6d:
91:3a:3c:dd:1a:77:5b:5b:ff:9c:29:0b:2d:63:dd:75:22:d6:
4c:c2:5b:b3:67:63:e5:1c:49:b7:74:7b:1d:2c:c8:df:ca:5d:
2d:06:1c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbdrMP6wWvgBxOZgcRj0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky
NDBkYTUwHhcNMjYxMDA0MDEwMTEwWhcNMjYxMDA1MDEwMTEwWjAzMTEwLwYDVQQD
EygxYzJhNjE1MzhlNWFhOTY4Y2I0YTFhODMxZjA2NzM5NTAxZTljYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdqYsFT+nAsb4oD64tFgZQqv3H8O
XlOmTOvsSHzSHB3Drs64EALBxEbcNptH3xFBWt97N6OTnkmWcw+wMAhN47TnneDk
0GEdFVUDDOXUimMso6t2RMpa3TTqWlGBW9ah1YeOUwtbPGHxvDCZNVU3OVgQxwZ5
46Q1WBIIuFWydW1UMgcm9c+i3C2AqyLZqP13YVtFUzVmiSo1VFgCqosWnsjnc4Mk
XdC1/sXVWJg60KxDee6OzH3AyGlPJPL8aNnKQBv7fcuSD7WNA9fN08JFjkCVjTmc
br5GBLRMNjaijpXdcaruO229Pj5MH2ZWvxUQSjN1c8HdMTGpc4/iln4Q8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwqYVOOWqloy0oagx8Gc5UB6co7MB8GA1UdIwQY
MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt
Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh
LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0F+SpnTb
KswPrwF2Zpe2nP8y8Zab2LigWVA1SI6NvXycoStR5jBX6gafMqTqQ7C8mL35HoGi
4/Z1glpxYCsjPj+3rTu7NOGxUFcFqYBOLyq7VcJYFudXhDGh0n3IcFG7sTYuc5HS
ytNIjtdlAtTggf2y2CtLoEiVEjw7LhBfFzEV7FU3OgxlkrjRYSOm9vFQzEYJvbKR
Yj9UQXpu77Q5zRA1yxk7d+286UOFlNcvqOpCOzuD4rZLPjnY2uDXXNJN5RBEkmxz
Wj+zijEUjSOn75tIXQjPN2FtkTo83Rp3W1v/nCkLLWPddSLWTMJbs2dj5RxJt3R7
HSzI38pdLQYcrw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:01:18 2026 by rpki-client