Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File: GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier: QjMy/HVUSABl1wnBur9jg3lKy0yjxSjFOqcRbZbt468=
Subject key identifier: CE:14:2F:DA:B7:0E:B8:2F:7E:74:70:03:A2:BD:62:67:CD:52:38:0E
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 019F9248559DBF27B151A0E53DAC0ECC18C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:41 +0000
Manifest this update: Fri 24 Jul 2026 04:00:41 +0000
Manifest next update: Sat 25 Jul 2026 04:00:41 +0000
Files and hashes: 1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: 01LMzvigXkbe0/I5a1/t7/lzDa7w7Up6EojrJ5Rrr9E=)
2: QfrHMiVpt3G-cJy_BbBREo-KTJ0.roa (hash: LOQ7MtV866jGXGTdWHN/r/Nnuu+Qk3u4t0LPFc49Qt8=)
3: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (hash: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:55:9d:bf:27:b1:51:a0:e5:3d:ac:0e:cc:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Jul 24 04:00:41 2026 GMT
Not After : Jul 25 04:00:41 2026 GMT
Subject: CN=ce142fdab70eb82f7e747003a2bd6267cd52380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:f7:52:c8:6b:29:4d:87:c8:35:38:14:d0:
4c:66:9c:b9:a7:b6:af:f3:46:25:dc:8d:23:c6:4a:
2a:7b:76:2b:a7:e0:b8:05:5c:6f:bd:06:09:2a:18:
35:d7:fc:f5:bb:e2:6b:09:9c:3a:a8:12:47:f1:59:
66:c4:02:dd:49:07:3d:47:c3:cf:ea:81:0b:93:07:
60:62:ff:be:ce:69:e9:cf:fb:05:b6:9e:71:a1:1e:
b6:2f:64:e9:72:28:f1:4f:b0:51:80:53:87:77:50:
ec:e6:96:42:f3:79:89:57:13:52:cb:e6:66:ee:23:
d0:d7:2f:fb:39:65:f2:82:be:7f:42:a1:7f:68:6d:
f0:b3:7e:81:2d:05:66:84:f9:42:f0:e3:23:c9:5f:
25:c1:1d:c7:f2:6a:02:c4:d6:55:24:31:3e:cb:9b:
9e:c0:de:d4:90:6c:ea:48:18:5b:96:21:15:73:39:
07:1d:13:e2:df:5c:b3:c9:b9:93:2a:b3:ee:7c:1c:
19:16:d2:a9:51:e5:ba:76:5e:2e:e2:93:4c:c9:2f:
65:16:8c:1e:cb:0c:2c:c8:a5:ba:80:53:dc:1f:5b:
cf:a1:89:74:37:0a:3b:6c:22:d8:b6:e6:10:f0:9c:
b6:23:07:f9:45:3d:a2:49:2d:74:76:fe:81:b3:d0:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:2F:DA:B7:0E:B8:2F:7E:74:70:03:A2:BD:62:67:CD:52:38:0E
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:31:0e:8d:6d:12:89:93:ea:f2:ed:52:5c:8a:95:3f:c3:
eb:dd:61:b0:c1:9f:cc:a2:b8:d0:4e:9b:1a:a6:04:e6:a3:59:
62:a9:ba:a8:ac:9a:e0:2c:7f:f9:e9:9c:49:3f:8d:ff:dd:85:
a1:fa:56:c3:3a:a3:6c:f2:7f:72:0b:29:de:5e:ff:8c:b6:78:
ee:31:18:10:e8:20:72:e1:28:de:d3:3a:e6:45:a2:e4:bb:3a:
96:e9:78:25:34:05:23:9c:08:21:03:47:4f:9c:a9:43:47:be:
77:93:58:07:a3:e7:0d:c3:f3:e5:69:43:9a:02:e7:e2:5c:44:
38:92:a1:3a:8e:e9:55:66:cb:45:86:25:fa:75:60:4d:b1:fa:
a2:64:34:a0:ca:8a:79:c0:9e:00:51:f0:45:71:e6:e6:76:ad:
35:ce:50:88:ce:09:b4:81:b2:a7:d2:c6:99:d8:0e:e5:1b:c0:
92:6a:bc:08:f4:bd:17:80:8e:83:cc:37:ef:96:ac:7d:e7:23:
59:71:34:b0:7d:ff:18:15:94:ce:e2:d1:41:74:99:b8:68:e2:
d4:4a:84:d6:3a:0c:89:54:bf:1e:9e:ee:86:88:50:a6:7c:74:
ea:79:d3:c5:15:c9:10:e0:bd:0b:af:04:19:89:00:ec:4c:5b:
68:62:05:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSFWdvyexUaDlPawOzBjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx
YzliMTkwHhcNMjYwNzI0MDQwMDQxWhcNMjYwNzI1MDQwMDQxWjAzMTEwLwYDVQQD
EyhjZTE0MmZkYWI3MGViODJmN2U3NDcwMDNhMmJkNjI2N2NkNTIzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBP3UshrKU2HyDU4FNBMZpy5p7av
80Yl3I0jxkoqe3Yrp+C4BVxvvQYJKhg11/z1u+JrCZw6qBJH8VlmxALdSQc9R8PP
6oELkwdgYv++zmnpz/sFtp5xoR62L2TpcijxT7BRgFOHd1Ds5pZC83mJVxNSy+Zm
7iPQ1y/7OWXygr5/QqF/aG3ws36BLQVmhPlC8OMjyV8lwR3H8moCxNZVJDE+y5ue
wN7UkGzqSBhbliEVczkHHRPi31yzybmTKrPufBwZFtKpUeW6dl4u4pNMyS9lFowe
ywwsyKW6gFPcH1vPoYl0Nwo7bCLYtuYQ8Jy2Iwf5RT2iSS10dv6Bs9DHJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4UL9q3DrgvfnRwA6K9YmfNUjgOMB8GA1UdIwQY
MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt
ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm
LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu4xDo1t
EomT6vLtUlyKlT/D691hsMGfzKK40E6bGqYE5qNZYqm6qKya4Cx/+emcST+N/92F
ofpWwzqjbPJ/cgsp3l7/jLZ47jEYEOggcuEo3tM65kWi5Ls6lul4JTQFI5wIIQNH
T5ypQ0e+d5NYB6PnDcPz5WlDmgLn4lxEOJKhOo7pVWbLRYYl+nVgTbH6omQ0oMqK
ecCeAFHwRXHm5natNc5QiM4JtIGyp9LGmdgO5RvAkmq8CPS9F4COg8w375asfecj
WXE0sH3/GBWUzuLRQXSZuGji1EqE1joMiVS/Hp7uhohQpnx06nnTxRXJEOC9C68E
GYkA7ExbaGIFXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:11 2026 by rpki-client