Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: LwuH/FK6tbDPJ2o+JSkXcTirxYByIQfvPnGbLg7Bg8w=
Subject key identifier: 1C:A4:A4:55:AA:1E:74:50:4A:F8:FA:CC:16:11:A9:DB:A1:68:CA:91
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019CAB345A6DD945F4B9ED10F1ED0367447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 170E
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: W0Hh1_d1lPKloXzotL4nkvHB3XU.roa (hash: /zOxrQImQ5Imt5+eL/vw3bZaT0Bqvqa9qPhLvzw4n4s=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: d7ykme3fy6jLIu/JZRJbfprGe7uJa2tt1VGEm73W3jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5a:6d:d9:45:f4:b9:ed:10:f1:ed:03:67:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=1ca4a455aa1e74504af8facc1611a9dba168ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:53:90:d3:af:f1:cb:ee:5d:32:19:36:34:
77:2f:f3:84:c0:0f:39:c9:ef:b2:9c:cb:d2:4d:a3:
e0:02:ab:f8:7c:65:a6:0a:3b:df:6d:c8:1d:69:0d:
ad:1b:ee:39:1e:55:9c:51:76:56:46:b1:78:3b:07:
99:ec:65:d8:d2:d0:b5:49:e5:da:53:6f:ac:51:00:
81:06:47:e1:cb:0b:52:7a:bd:25:a8:ba:c7:b8:b0:
e4:c3:58:90:79:21:f0:1b:85:a3:17:ec:4a:cc:9e:
43:84:1d:e7:2c:89:97:a3:56:c9:27:39:69:de:b9:
fd:2d:d9:10:05:51:20:18:23:c5:5b:bf:a1:35:00:
86:32:f7:29:cd:29:87:34:7f:7d:42:48:b6:4c:59:
52:c1:b5:4a:55:52:3c:82:e1:98:3a:e2:22:24:87:
df:1c:88:33:c9:dd:de:45:95:ef:0e:ff:c6:5c:8b:
aa:43:a4:f5:82:19:73:a4:1c:18:7b:4f:96:23:13:
97:ce:3f:53:26:70:07:2d:e3:f6:e6:a8:4d:70:9a:
70:8c:91:7a:b7:ed:af:0c:85:4e:a0:d9:9a:c4:4f:
ae:78:18:c1:89:3c:81:ae:ec:42:99:e1:65:3a:3f:
cc:39:21:5a:76:4f:20:19:1e:66:08:0f:4f:d7:38:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:A4:55:AA:1E:74:50:4A:F8:FA:CC:16:11:A9:DB:A1:68:CA:91
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:24:96:3d:4a:c3:b1:90:e0:fc:0d:c7:d5:d3:cb:f2:af:56:
f2:ad:ed:34:10:f1:42:6c:2e:48:c9:32:70:27:b6:aa:5c:b0:
39:f1:9c:f6:a6:92:9d:e9:7d:71:60:7b:8c:d3:73:7b:d1:b9:
7c:5b:58:fc:cd:b6:5b:ec:72:89:a6:6d:54:02:77:c3:10:9e:
61:d0:95:0e:43:ce:3c:16:ac:a7:62:67:8f:06:d8:8b:67:56:
e5:9d:db:cb:47:d9:63:c6:c3:3f:27:0e:e3:3a:56:c8:99:e4:
54:88:bb:a3:7f:12:57:39:d4:be:a1:8b:00:e9:7c:4b:44:e0:
43:bb:a2:56:aa:88:ee:03:3e:e6:e0:62:84:33:e5:1c:5a:9a:
c6:33:1b:a2:11:f7:7d:4a:8d:25:c1:f2:f3:6b:2b:1b:b9:24:
8f:fa:c4:27:65:9c:73:17:5a:4b:35:73:8a:c7:fa:3f:9d:bc:
99:a1:38:e8:6e:0f:7a:2a:86:b5:e1:a2:91:3e:88:18:b0:f3:
1c:b7:5c:a7:44:44:d9:19:d5:64:5a:fe:d9:29:14:2b:21:13:
08:fd:be:71:52:49:36:22:8d:de:e8:2e:fb:fc:5c:f1:ab:e7:
e2:f0:2c:1c:27:e9:0b:8c:0e:2e:93:61:a6:2c:b2:55:05:f9:
6a:b2:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:20 2026 by rpki-client