Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: BAnoVVNUnMj2HlEj8O5oz/ENbA4bkEgb2aAuf6iY0kQ=
Subject key identifier: 6A:F3:DC:09:36:46:C5:1D:86:C3:9C:98:0E:6F:49:1C:FE:F0:56:4A
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019D26CD4858E40A487C58C5FEC94876B2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: veoFHQtt/i0eWugUfONPtTDIGjenWMjv6ifB34V+7HQ=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:48:58:e4:0a:48:7c:58:c5:fe:c9:48:76:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=6af3dc093646c51d86c39c980e6f491cfef0564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:03:f5:c4:4f:41:a6:60:97:0e:3c:41:71:
d1:7d:61:0c:be:7b:7a:1e:90:89:0d:f3:84:0b:56:
34:30:bb:f7:59:65:54:49:27:9a:60:96:33:78:1b:
c9:1a:43:65:f0:9b:78:80:0d:3d:92:7b:86:9a:2b:
2c:ba:6a:17:9b:bd:5b:0d:8e:9c:05:aa:2a:0b:dd:
74:d7:ac:2c:62:97:8f:01:73:fd:18:b2:77:69:be:
26:2a:6d:cf:11:d5:ef:3f:0b:fe:48:00:30:78:a0:
61:e3:ef:0b:4f:53:4f:80:81:19:ad:43:95:88:55:
d8:ed:e9:a6:28:28:9a:3b:8b:71:10:5d:51:26:18:
72:ac:52:b6:72:cc:d9:8f:3a:d2:59:0a:fe:ea:77:
e0:cf:06:85:97:af:00:f5:b7:eb:7a:0a:b7:6d:53:
49:2c:7a:47:52:ba:56:58:d6:e8:3f:d4:ed:f2:f8:
ad:86:0b:98:25:c1:f9:a1:a2:58:55:1a:19:48:ed:
fa:de:68:8e:74:73:59:ea:d9:7a:4a:e6:1d:c5:89:
a5:54:60:70:37:56:3e:ff:27:fb:d5:b2:ab:94:b1:
17:88:38:6e:fa:af:f3:8a:8d:bb:89:e6:45:7e:dc:
9f:6a:cd:4f:5f:17:3e:42:77:66:52:2f:30:b4:71:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:DC:09:36:46:C5:1D:86:C3:9C:98:0E:6F:49:1C:FE:F0:56:4A
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:65:1b:79:f6:ac:8f:43:85:9d:c3:49:d5:09:83:05:3a:30:
6a:b9:2b:98:b8:35:a0:c8:87:8d:41:b8:f6:b2:92:90:1a:83:
b3:33:b7:15:71:03:b2:37:9f:53:3c:ab:cf:27:c4:09:73:d8:
84:04:45:87:26:04:48:8a:0f:13:33:21:b2:ed:82:52:de:47:
0c:7c:9b:8c:fe:bc:4e:b4:94:5a:46:fa:c6:84:cf:7d:95:89:
72:fa:69:c7:aa:c1:27:b5:16:0b:c2:5c:11:6c:af:05:ff:88:
91:84:eb:07:be:b1:c5:9b:b4:43:71:5d:6b:fc:85:48:bc:6d:
ed:14:fd:1a:d4:18:fc:f2:8c:e3:17:27:c7:10:23:7c:c0:91:
77:24:08:3a:70:14:79:92:1a:43:b6:e2:a1:8b:c9:d8:fe:52:
0b:0d:98:d7:2a:e5:4e:0e:c5:4f:6c:b3:7c:f0:c3:26:2a:ce:
5c:ce:eb:97:06:c7:e2:16:93:b6:28:e7:2b:41:60:b9:f9:a7:
25:eb:44:d2:f6:8b:b4:68:4c:6f:f6:29:5c:96:b5:23:d5:7b:
0b:47:ca:df:37:cd:61:c7:64:8e:c2:b0:e2:a0:a1:5c:8a:18:
87:68:f4:e1:38:16:51:e8:5b:a4:05:3f:db:47:b7:99:b7:33:
29:84:0a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUhY5ApIfFjF/slIdrK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli
NTMwNTcwHhcNMjYwMzI1MjEwMTIwWhcNMjYwMzI2MjEwMTIwWjAzMTEwLwYDVQQD
Eyg2YWYzZGMwOTM2NDZjNTFkODZjMzljOTgwZTZmNDkxY2ZlZjA1NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wED9cRPQaZglw48QXHRfWEMvnt6
HpCJDfOEC1Y0MLv3WWVUSSeaYJYzeBvJGkNl8Jt4gA09knuGmissumoXm71bDY6c
BaoqC91016wsYpePAXP9GLJ3ab4mKm3PEdXvPwv+SAAweKBh4+8LT1NPgIEZrUOV
iFXY7emmKCiaO4txEF1RJhhyrFK2cszZjzrSWQr+6nfgzwaFl68A9bfregq3bVNJ
LHpHUrpWWNboP9Tt8vithguYJcH5oaJYVRoZSO363miOdHNZ6tl6SuYdxYmlVGBw
N1Y+/yf71bKrlLEXiDhu+q/zio27ieZFftyfas1PXxc+QndmUi8wtHEl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrz3Ak2RsUdhsOcmA5vSRz+8FZKMB8GA1UdIwQY
MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt
YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm
LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGUbefas
j0OFncNJ1QmDBTowarkrmLg1oMiHjUG49rKSkBqDszO3FXEDsjefUzyrzyfECXPY
hARFhyYESIoPEzMhsu2CUt5HDHybjP68TrSUWkb6xoTPfZWJcvppx6rBJ7UWC8Jc
EWyvBf+IkYTrB76xxZu0Q3Fda/yFSLxt7RT9GtQY/PKM4xcnxxAjfMCRdyQIOnAU
eZIaQ7bioYvJ2P5SCw2Y1yrlTg7FT2yzfPDDJirOXM7rlwbH4haTtijnK0Fgufmn
JetE0vaLtGhMb/YpXJa1I9V7C0fK3zfNYcdkjsKw4qChXIoYh2j04TgWUehbpAU/
20e3mbczKYQK7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:50 2026 by rpki-client