Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: ZdDnmFzP9AgeXe6oE/4Z3jZiPdVGph5X4vjTMejgTmo=
Subject key identifier: 9C:69:67:A8:D7:DA:76:9D:E5:29:65:DE:13:20:98:D9:0E:79:60:9E
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019FAABEB90467C7DAF6956B86244A806803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 189D
Signing time: Tue 28 Jul 2026 22:00:53 +0000
Manifest this update: Tue 28 Jul 2026 22:00:53 +0000
Manifest next update: Wed 29 Jul 2026 22:00:53 +0000
Files and hashes: 1: XDoOCkf5CnO9nMvxbGa0LtE_XQQ.roa (hash: ot+Sv1+Lvck9ZSiTraTVvrdyHCpJGwJQ0EVIO7hg38A=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: QXdJwBDFlewKNf6ZjM9HIMV3jy8vYvhillc7hIEFmi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:b9:04:67:c7:da:f6:95:6b:86:24:4a:80:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jul 28 22:00:53 2026 GMT
Not After : Jul 29 22:00:53 2026 GMT
Subject: CN=9c6967a8d7da769de52965de132098d90e79609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:4c:da:bb:da:5b:17:9d:71:99:33:92:64:
3e:4a:f6:87:b1:19:f3:3e:9a:60:d0:61:24:5e:d7:
55:34:2c:99:1d:d3:30:89:27:2e:37:97:b8:0b:50:
a8:7f:62:90:9f:d2:31:b3:b5:f5:6e:92:4a:e9:86:
48:17:3f:25:c4:7c:14:16:65:e0:4f:72:ae:71:fd:
3a:6a:78:53:a9:14:70:4a:df:b6:fa:87:5a:32:4a:
4e:f1:5b:52:c3:ce:aa:b8:ee:79:ac:8d:aa:33:bc:
e9:37:e6:9a:7f:74:13:3d:21:2b:25:5c:31:b6:c9:
e0:ed:65:35:b8:51:da:7b:0b:56:e1:e1:d4:76:df:
1a:08:94:81:4e:93:42:62:88:7f:9f:c9:a0:9b:d7:
16:ae:ed:a0:92:d1:30:53:53:03:12:e3:24:8c:86:
be:91:25:0f:57:3f:d6:26:7f:51:03:db:99:6e:97:
69:c8:44:84:eb:57:07:6f:c2:24:3f:c5:f7:cf:44:
e5:f6:ea:08:2d:55:ba:0e:f1:7c:24:be:80:cf:9c:
4d:db:1e:ed:19:02:1f:44:ae:a4:f1:7a:7b:20:fc:
06:f2:0a:e5:6f:39:53:f4:17:ff:6d:43:eb:bc:ff:
91:62:30:2b:f6:c0:5b:7d:c4:7e:7c:62:99:dd:bc:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:67:A8:D7:DA:76:9D:E5:29:65:DE:13:20:98:D9:0E:79:60:9E
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b6:f7:62:76:05:aa:85:0b:d0:b0:40:50:fe:9b:89:f8:41:
ac:98:20:ee:52:7b:c8:73:72:05:46:2a:7c:3b:da:36:cc:66:
93:86:d2:50:01:b9:85:ba:74:b6:8c:18:45:fe:aa:53:e3:45:
fe:72:75:c7:4b:04:b7:8c:3b:99:1a:bc:49:b6:22:8c:68:07:
da:ce:51:82:b3:d7:b5:4d:d0:02:13:30:13:0e:32:fe:79:e4:
8b:0f:54:7f:9a:f0:82:79:c3:a0:05:bf:8c:22:f1:02:82:e4:
89:51:37:75:5b:19:2b:87:28:e9:bb:49:39:54:4b:93:d9:87:
08:40:90:9a:61:77:4c:72:fe:99:82:93:cf:34:a8:2c:66:98:
0c:3a:21:1d:46:68:09:eb:06:c9:6e:16:0c:b9:7a:a7:7e:dc:
4b:71:98:2e:9c:c2:ba:0e:e6:14:fd:2f:bd:05:53:be:29:f2:
3f:97:14:9d:7f:46:dc:07:95:b4:0b:68:c5:2f:04:22:b0:06:
ca:f9:72:cf:db:2b:50:5d:eb:5d:e3:42:e1:54:4f:8f:f8:84:
be:a5:70:b8:70:cc:9a:3e:46:bd:36:42:99:64:bd:49:68:10:
65:c0:6c:3d:e5:63:1b:ad:b0:e0:41:7b:c9:cd:17:71:70:15:
d6:ce:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:03:48 2026 by rpki-client