Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: LhY6BtHYHVAqXPyT+NOnf4JnQzmIPSmUyAVDLsw7QII=
Subject key identifier: 97:AD:99:67:FA:73:EF:2B:A5:91:91:C4:19:7E:B9:8D:2A:F5:08:FF
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019EC1119E6AD799F8BD4DFC7E0AD533993F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1824
Signing time: Sat 13 Jun 2026 13:00:17 +0000
Manifest this update: Sat 13 Jun 2026 13:00:17 +0000
Manifest next update: Sun 14 Jun 2026 13:00:17 +0000
Files and hashes: 1: XDoOCkf5CnO9nMvxbGa0LtE_XQQ.roa (hash: ot+Sv1+Lvck9ZSiTraTVvrdyHCpJGwJQ0EVIO7hg38A=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: wUQux3vMy0YN27pIvktNbl0FdFJa1Fd2tGj+/Z/g180=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:9e:6a:d7:99:f8:bd:4d:fc:7e:0a:d5:33:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jun 13 13:00:17 2026 GMT
Not After : Jun 14 13:00:17 2026 GMT
Subject: CN=97ad9967fa73ef2ba59191c4197eb98d2af508ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:9f:9b:c6:c9:41:2c:0c:ca:02:c3:23:a3:
b5:bc:d8:c7:7a:6e:40:ea:d1:f1:e1:34:17:07:0f:
f5:25:71:9e:36:f8:b7:95:1d:82:02:be:23:f0:86:
51:9d:ba:6a:fa:0a:24:a5:9d:7d:8b:29:a0:59:cf:
c1:52:f2:14:7a:01:98:d8:47:b0:96:9b:24:da:7e:
93:9d:71:9d:ad:b3:a8:bc:e8:c6:f2:33:16:1c:44:
65:17:1e:99:66:38:48:a0:f7:ef:98:b7:13:0b:cf:
ea:cb:8a:48:2f:51:a1:33:20:63:2e:80:56:7f:f0:
05:ae:36:17:98:4b:9e:8c:96:79:3b:83:fc:fd:d4:
10:4b:8b:c7:fd:af:32:3e:64:1c:26:cb:4d:86:29:
0c:44:7b:ac:0c:c9:56:3c:7f:32:be:63:b0:9e:b4:
bf:b8:47:5c:37:c9:42:62:5c:da:5b:a8:c6:90:1b:
dd:3a:e5:56:54:2c:9a:5d:25:92:f5:bb:ab:0f:cb:
0f:18:4b:ec:ff:34:7f:e7:80:f0:08:b2:18:2a:3c:
1b:2f:d0:f9:01:5c:64:e6:60:e8:18:ba:2c:9b:da:
19:df:14:eb:41:be:5f:d7:eb:dd:a9:18:7e:39:86:
36:12:e9:f5:f9:5b:85:ba:22:15:90:56:fc:d5:60:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:99:67:FA:73:EF:2B:A5:91:91:C4:19:7E:B9:8D:2A:F5:08:FF
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:af:95:b5:22:19:7f:ae:0f:f9:06:33:62:d8:d7:44:0a:
f0:ba:9a:75:d3:e1:7c:ee:53:d7:e7:50:08:a5:05:ca:87:5f:
8a:37:5a:31:d5:45:c4:eb:9f:c6:f0:d7:25:f6:43:64:b6:9a:
82:e5:f1:ac:02:73:71:83:5e:98:5c:b1:f8:6e:b0:ca:8e:0f:
e0:ca:ad:fa:8e:0b:6a:78:78:29:6d:fc:df:cc:55:e4:ee:13:
80:e1:89:cf:f2:de:b1:b4:c3:d7:22:a9:ea:b5:3a:1c:77:58:
6f:87:2d:a0:33:bc:27:5d:d6:5d:38:bc:6b:54:f1:c5:89:97:
0e:91:09:fa:8a:2c:25:eb:a5:d2:29:bc:10:7c:e9:14:be:ea:
43:0d:e1:bc:2d:1b:83:0a:f1:1d:39:00:11:61:f9:61:30:2f:
64:8e:26:ff:80:a3:90:ad:fb:dd:dc:b5:f1:3a:86:4c:42:0d:
43:4b:d7:b7:ad:b5:cf:dc:84:0d:23:73:2e:c5:98:7a:0d:c8:
2d:bd:8f:5a:cd:2c:84:d3:ec:a8:1c:e6:df:ee:b4:cb:c6:19:
be:c7:62:70:05:86:69:28:34:19:30:59:2e:7e:c2:33:97:33:
cf:6b:26:ce:2e:ea:83:58:ce:72:36:51:6c:79:ed:ce:a2:0a:
db:c0:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:42 2026 by rpki-client