Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: uo7o1DJCKsRpPo1VuNntuNOpmnQYkABXBOw4vopo3og=
Subject key identifier: AC:E1:B8:85:4C:B0:E7:59:C0:8F:32:E7:EA:90:B7:AE:12:47:48:76
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019E1DFEA7A35EF7575D20756F3DBB3ECFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:01:28 +0000
Manifest this update: Tue 12 May 2026 21:01:28 +0000
Manifest next update: Wed 13 May 2026 21:01:28 +0000
Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: BxuEhxNcc27PRZLJn+jfw8iqYWJQlw/5hvRdqiENJ8c=)
7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a7:a3:5e:f7:57:5d:20:75:6f:3d:bb:3e:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: May 12 21:01:28 2026 GMT
Not After : May 13 21:01:28 2026 GMT
Subject: CN=ace1b8854cb0e759c08f32e7ea90b7ae12474876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:81:e4:06:5c:f0:04:de:dc:9e:3b:ac:2a:
65:14:2e:96:6a:d0:3d:2a:e6:93:05:91:5e:1f:5b:
43:c9:85:94:7f:2c:bd:76:5b:15:94:bd:ed:ba:73:
a2:a9:c8:81:60:46:31:3a:51:c9:63:2b:72:d5:e9:
32:58:b9:6a:ee:c4:87:a3:5d:ef:63:2b:db:06:1e:
45:b0:5f:e6:e0:33:e8:84:97:64:05:06:58:82:c2:
71:c4:73:45:90:a7:2d:00:64:0e:f4:6b:bb:25:69:
ac:c0:76:8a:5c:b9:69:3a:3b:08:c6:8f:06:70:8a:
0e:0c:e9:47:36:f7:a3:92:f0:75:8e:44:cd:cd:af:
09:90:b7:3a:e8:19:a9:8e:bc:f7:78:78:37:a5:07:
7a:e5:33:7e:bb:40:25:82:b1:02:2a:4d:3a:08:bd:
ce:22:22:b4:f1:20:81:2e:04:54:e8:2c:ac:f8:7a:
ba:34:8a:23:08:1f:89:20:0e:79:6b:5d:7a:ef:35:
03:c6:d1:1a:60:81:b9:e9:a8:bf:a3:43:1d:bc:bc:
a8:37:a7:d8:b4:4c:d0:1c:3d:f6:ac:05:ae:19:95:
f4:8f:31:14:0b:18:35:04:b9:e8:3c:64:18:ad:e0:
25:2b:64:49:29:66:83:1e:4c:71:60:88:1b:b6:d1:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:B8:85:4C:B0:E7:59:C0:8F:32:E7:EA:90:B7:AE:12:47:48:76
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:12:96:f3:c8:3c:0e:68:eb:03:c9:e3:a9:86:77:4b:d9:37:
27:2c:d1:84:b9:f2:20:63:a2:e3:13:e8:4e:5a:56:09:7f:a4:
57:f6:71:47:d5:fd:6f:a8:15:c1:9e:48:0f:5e:7b:94:08:5e:
60:d5:43:f9:94:f9:2d:fe:9a:61:dc:97:a8:10:cf:f8:9c:3c:
35:32:0d:6e:c6:7e:60:13:0f:55:97:0f:d5:3e:ec:5a:e0:da:
54:1c:73:c9:a4:c5:59:48:33:ee:37:b9:d0:b7:63:47:c8:66:
c6:f9:5f:ad:1b:5e:c5:c4:14:70:7a:f9:bd:05:de:1c:fd:e5:
9d:4a:37:82:6f:77:96:a5:82:01:07:c6:60:d2:52:e6:04:4d:
d2:a5:15:fe:19:ca:e1:ad:f5:aa:3c:bd:72:62:01:46:c0:44:
4c:3a:64:1b:1b:45:67:92:f5:56:45:a2:58:22:c6:94:81:38:
85:90:fb:16:f7:af:96:45:e7:ac:be:82:51:0f:f6:cd:15:22:
16:60:3b:e4:2b:6c:9d:84:a3:d6:5c:96:79:e0:20:d2:82:fe:
b5:72:d0:ac:18:09:4d:5d:28:02:ce:95:8b:7a:75:60:e3:ea:
f4:50:e6:5f:18:5e:e5:75:4f:73:1a:8a:00:91:e4:70:00:75:
bb:12:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:33 2026 by rpki-client