Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: eU2GbFzrZ8EgtgRlcys6I0H06y82J8BsmLeRU4ftHwc=
Subject key identifier: 35:16:89:29:37:78:C6:63:9D:FE:19:F9:0C:11:D0:F9:3E:43:34:98
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019D9AAC14996441BF2B55CCEC2D8E5CB18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 178B
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: RY6d2War7s_bXguR2iy9IN9YcRc.roa (hash: 5KpHenlSj0FRQpLdtAUp1FNTXJS4qFPZ/fpqZIMZBCA=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: 4f7S7T5p7wV7r2YeTLu0HLWrD1OMx9kmAC3M7t5LZY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:14:99:64:41:bf:2b:55:cc:ec:2d:8e:5c:b1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=351689293778c6639dfe19f90c11d0f93e433498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:5b:3a:65:38:cf:95:ac:e8:4c:e8:62:ee:
96:a6:4d:88:ee:a3:90:7b:d4:ad:c4:e7:01:55:1f:
a6:5b:da:ba:35:0a:81:53:be:b5:15:aa:7c:2c:1d:
a5:3f:f6:91:a6:e4:ac:05:f7:9a:5d:12:6e:2c:de:
40:38:e3:ce:e6:77:35:8e:c8:f8:a5:f6:e6:ef:91:
2c:0e:4d:de:fe:7d:04:d6:4b:af:8c:37:21:1b:e2:
2f:4e:1c:b5:08:1b:8f:54:c9:61:d9:47:6f:7b:67:
44:01:34:c7:08:5b:3c:6b:ab:57:d5:f6:85:da:98:
4d:ee:3f:96:bc:80:72:ad:9c:ea:62:95:e6:c6:dc:
88:bc:2f:74:cd:d4:c3:53:2c:c2:02:67:69:92:b5:
2b:91:78:fd:60:a1:c9:10:7d:75:bb:52:d8:14:3c:
c6:52:75:a4:a5:db:74:19:fd:64:8e:13:f6:d4:db:
16:5a:cd:b7:2c:50:a9:26:60:06:38:98:6f:8c:3d:
51:3e:ff:c2:35:96:79:6c:85:9e:88:5d:51:bd:20:
41:5d:ef:a7:92:4a:18:8a:14:10:5d:68:73:3b:da:
8d:a3:2f:60:7e:7c:19:8b:33:29:a3:ea:ae:b1:2d:
92:17:ca:f2:6c:de:86:d7:f3:c5:8b:5a:ba:9e:8f:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:89:29:37:78:C6:63:9D:FE:19:F9:0C:11:D0:F9:3E:43:34:98
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c5:f1:ce:6c:90:c6:21:d7:98:7a:0d:c9:76:8a:32:29:a8:
d2:be:e5:fd:3c:7d:3e:a2:ce:59:ea:49:07:0d:55:61:2f:ee:
70:bb:7e:c4:3c:a4:e2:b2:da:54:fd:1c:a4:15:ef:bc:f8:28:
b0:0a:b9:b8:10:89:b0:21:c6:d3:51:72:52:52:b8:e8:bb:43:
7e:11:69:f6:85:93:66:4a:42:0e:ac:6b:87:6d:23:c2:58:b7:
d1:14:5f:0c:67:f2:69:47:dd:07:32:1b:d8:ba:b1:9e:21:56:
44:86:29:0c:9d:89:4b:ed:58:eb:4b:d6:4e:9a:3e:fd:a1:e4:
86:e8:14:60:47:89:63:29:61:ca:a1:e6:db:50:bf:a4:03:85:
ff:5d:37:1e:a2:af:d0:3b:6f:70:59:f3:aa:66:61:a1:07:2c:
ad:3d:ac:a5:85:8f:eb:49:1d:84:c6:8f:b3:be:a1:bb:79:21:
96:50:9e:02:23:27:42:8a:c3:d9:c4:71:b8:41:2c:62:48:92:
f7:1d:22:52:c7:33:a4:65:5e:c8:58:f6:ee:47:a1:f6:f5:2e:
55:88:dd:6f:93:24:64:81:63:8d:f7:43:23:b0:c0:5b:64:47:
89:87:c7:9f:1d:b9:72:5a:e0:01:10:a4:b9:cc:77:30:af:8d:
66:c6:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:51 2026 by rpki-client