Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File: GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier: amSi5ABoNXG2JY2jpAWv7a5TwscWze+k0S9YHXnatfQ=
Subject key identifier: BB:04:D1:01:25:89:5B:98:D0:B5:72:0F:07:55:0D:71:22:B6:DA:9E
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 01A11C3EC4FAF7C64698F3CC27231829D1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 16:00:37 +0000
Manifest this update: Thu 08 Oct 2026 16:00:37 +0000
Manifest next update: Fri 09 Oct 2026 16:00:37 +0000
Files and hashes: 1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: dE13gdqnHafi83Orwan5I71KD4Gk60Xm+gqNmL4Hgfg=)
2: QfrHMiVpt3G-cJy_BbBREo-KTJ0.roa (hash: LOQ7MtV866jGXGTdWHN/r/Nnuu+Qk3u4t0LPFc49Qt8=)
3: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (hash: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:c4:fa:f7:c6:46:98:f3:cc:27:23:18:29:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Oct 8 16:00:37 2026 GMT
Not After : Oct 9 16:00:37 2026 GMT
Subject: CN=bb04d10125895b98d0b5720f07550d7122b6da9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:7c:c6:de:26:3f:c1:b3:e8:90:b1:3b:1d:
3b:9f:5d:8f:35:6b:be:36:21:8f:8e:10:0e:54:c6:
d3:03:bb:6b:9b:79:6b:61:bb:6d:e0:2f:8c:c5:96:
fe:de:fa:37:55:77:41:15:74:d2:9b:c9:0f:e9:de:
3e:10:7f:4e:e8:e2:26:fb:06:e4:f0:fc:10:3f:99:
d7:19:aa:3b:5a:47:12:59:e8:fd:f6:a0:60:ea:0e:
9d:62:ab:82:2c:d3:da:2e:4e:6d:93:c9:b9:54:64:
d3:e2:82:0c:de:8a:f0:33:0d:a2:6a:ff:30:6b:50:
bd:35:6a:a8:74:8c:55:2a:a1:72:aa:ce:48:97:f6:
43:50:76:77:42:fa:65:3f:ae:af:4d:78:03:03:1a:
ec:9e:45:5a:2e:36:64:ff:5c:f6:7b:f2:10:63:4d:
2f:c3:7e:7b:1a:4c:a1:f9:55:f1:3d:94:bf:4b:93:
63:6d:a0:83:8e:2d:a6:16:a0:71:48:28:76:54:37:
54:61:a6:7a:5d:0c:36:34:a6:b3:83:a1:06:c8:dd:
a7:5d:26:92:1e:64:81:4c:3b:fb:ae:f1:c5:08:94:
42:1c:de:a6:5b:9f:53:6c:78:09:ff:9d:1c:e6:25:
ba:f2:67:2f:22:ad:4a:b5:7c:07:4e:d1:13:4b:ae:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:D1:01:25:89:5B:98:D0:B5:72:0F:07:55:0D:71:22:B6:DA:9E
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5d:d4:2c:b5:39:05:5a:0b:16:7e:e6:b9:da:82:29:47:dc:
0c:24:46:04:bb:45:f7:78:9b:2c:7f:55:1d:a4:5e:1b:ed:17:
a8:7b:fc:47:51:4c:ef:bd:42:e9:6f:c1:b2:df:fd:aa:9c:dc:
01:bc:dc:42:ef:b0:89:47:31:7f:54:54:cb:fd:9c:ad:d5:df:
b7:18:62:a9:01:e1:1c:90:b8:74:84:73:f0:9e:50:f2:b4:da:
51:39:c1:f8:b7:07:6e:ec:fd:c8:00:25:e2:0f:a2:bc:54:23:
32:75:da:41:fe:e2:81:67:03:80:d2:0f:fe:c5:75:f4:c8:8f:
09:41:38:e9:fa:5a:ea:6f:12:7d:a5:40:b5:d0:fb:95:22:13:
1d:98:94:f1:18:b8:00:56:7d:12:0d:a4:bd:03:90:09:eb:b2:
d8:d4:96:0d:98:4e:2e:68:01:d2:76:95:92:e7:16:90:53:17:
11:eb:a9:3d:bc:d3:f1:2f:52:ee:e4:00:46:b8:4a:d4:cd:96:
01:b9:79:28:04:e1:f3:92:20:9e:64:89:14:0a:e4:c9:4e:d6:
e0:7b:34:5c:32:a3:a2:cb:e1:bd:c6:15:42:32:21:28:91:72:
58:73:18:61:24:56:86:9c:6a:35:a3:1a:c2:8a:2e:b8:7f:2b:
c8:f1:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:17:06 2026 by rpki-client