Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: n4eb/uGSdnrUUm5MEeM58J6zDOkvHW6Dkwd2b3tHQyc=
Subject key identifier: DA:11:AD:5E:D1:D4:EC:CA:66:08:A7:66:65:47:41:0D:30:F4:D8:62
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 019D25BA01E75FF4385EE83708F4FF4E1E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (hash: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: br+2Q+15Xtljuuib6+DmHnrkV7nln2dz+skS/bPsRIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:01:e7:5f:f4:38:5e:e8:37:08:f4:ff:4e:1e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=da11ad5ed1d4ecca6608a7666547410d30f4d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:c9:6c:c7:1f:a5:5b:1b:da:95:27:6e:f2:
b6:df:57:78:fc:97:72:bb:65:7e:51:1f:ff:3d:99:
9e:42:aa:4a:c8:00:b0:c5:ef:30:d0:da:54:f7:36:
38:93:c3:76:2b:56:dd:f6:4f:02:58:f4:5b:c3:1c:
b4:19:56:a1:94:a0:71:1e:b8:46:7c:92:3c:70:ee:
53:40:28:98:bf:05:57:65:18:17:5d:b8:5d:45:27:
11:bc:c9:6f:38:0d:33:84:50:5f:30:f1:b9:04:51:
e8:7a:3e:dd:23:e8:5c:e1:7c:c4:85:1e:d3:8a:93:
76:6f:a4:01:6d:ee:9a:ce:de:eb:98:eb:7c:0e:76:
53:ab:51:36:b9:7b:57:40:47:3b:e4:5b:0a:d1:eb:
5d:10:7f:57:ef:de:26:9d:25:df:f4:63:84:e0:43:
54:d8:0e:ce:3a:37:54:54:9f:2d:cf:0e:a3:ab:b7:
9e:82:dc:65:1c:15:3e:00:46:35:66:1f:2d:8f:09:
67:26:6b:68:e7:d3:be:00:9c:e5:b0:91:95:6a:f6:
e8:9e:ba:7b:22:ae:99:e1:2c:27:89:8a:64:c6:94:
95:b8:45:1b:7c:98:42:58:1d:17:00:1b:67:e1:88:
db:ce:57:2e:6b:0d:34:de:75:7f:b3:ae:06:b9:77:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:AD:5E:D1:D4:EC:CA:66:08:A7:66:65:47:41:0D:30:F4:D8:62
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:7f:09:b2:9b:68:23:57:31:cc:54:49:89:85:d5:44:63:
de:3c:cc:94:d9:05:f4:b1:90:d1:51:81:55:0d:d6:85:4c:64:
dc:f2:20:2d:01:93:8a:8c:53:cb:77:cd:06:e6:2c:97:e8:73:
5d:3f:96:1b:1d:b1:3c:eb:b4:61:bb:ea:af:6a:90:5d:cf:16:
9c:61:a7:f2:90:a7:96:75:0d:c0:5c:4d:95:8f:03:ac:1b:85:
a7:10:54:02:22:3e:99:fe:cc:64:34:12:53:8b:d5:85:f0:af:
a4:7f:a4:20:ff:90:03:6f:64:af:2e:42:30:ae:89:1f:bd:51:
c1:83:1f:37:e4:f8:9a:64:54:11:5e:4b:97:dd:4b:a2:70:aa:
41:55:6d:f9:60:99:7c:4d:de:aa:ac:9d:0f:ad:27:12:e2:a5:
fd:2d:17:44:f4:23:f1:a8:3a:cb:8d:a2:81:ae:05:ed:2f:36:
b5:1b:6e:75:fd:30:26:79:69:0c:00:1e:6c:c3:e5:9a:b4:57:
38:24:a6:d7:b6:43:a7:1a:26:f2:fe:18:5c:00:da:86:4a:b6:
50:33:f7:5f:4f:ae:2e:66:59:e0:f3:d8:f0:cb:b4:63:b3:5e:
2f:0b:bf:4c:a0:7c:49:91:f6:75:d9:ec:0c:b5:92:ea:cd:01:
f8:6c:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:56 2026 by rpki-client