Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: fb0v4TX2lDufCbxzikHI8FA6hPvpDxT25WVSfF89DC8=
Subject key identifier: 83:92:50:68:0F:80:11:2C:4D:2B:86:42:FE:23:A9:E3:34:61:EA:2C
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019CA9EACA475A996FF5D27659BDF002C769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa (hash: Sy4qxp/vjChSs7LGRbsdrKBPDJPwQ9QRGo9byWidGTE=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: H9ldE9TTsR9MgvtcC+GL76HZHlnxOCv+oxx5l9swX+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ca:47:5a:99:6f:f5:d2:76:59:bd:f0:02:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=839250680f80112c4d2b8642fe23a9e33461ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:96:f9:45:7b:19:7d:4f:66:db:4e:6a:27:
2f:5a:fb:f3:2d:af:e4:e6:fb:2c:df:32:0e:27:83:
14:fb:21:d0:56:18:9b:39:a8:43:12:dc:10:56:6f:
93:41:32:f2:af:84:8f:90:f7:81:d9:9d:08:a1:d7:
27:ab:7f:07:2e:35:0e:28:7f:95:b8:d0:b7:5a:d3:
e7:64:83:47:b1:20:eb:e6:cb:a8:01:fa:0d:6a:17:
ce:70:8b:10:00:68:4c:09:59:27:aa:fd:c7:c3:42:
42:fc:cd:a3:36:14:fd:fa:7c:e2:df:15:8a:79:6f:
2f:8c:7c:62:bb:08:96:42:19:2b:5c:19:1b:bd:85:
1e:d7:60:e9:93:97:2b:b3:7f:05:47:c0:f1:e1:ac:
ea:8d:86:2b:c2:75:10:c8:4d:e4:af:02:3e:ab:09:
82:22:d4:9a:fb:8f:55:4a:fb:6d:e2:45:c4:bd:ff:
89:b6:6a:8a:b1:6e:e6:ab:7f:f0:5d:ad:9f:d1:e5:
68:16:19:32:a9:7f:c8:17:69:d1:b1:b7:d7:8f:cd:
76:25:fe:db:49:ae:dc:ff:dc:5e:b5:b9:92:9d:10:
34:30:91:93:fa:1d:98:8d:d9:a7:c7:bf:07:cb:1d:
42:ee:64:95:20:07:5e:25:c3:be:9d:ee:6f:fe:af:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:50:68:0F:80:11:2C:4D:2B:86:42:FE:23:A9:E3:34:61:EA:2C
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:91:3c:31:fa:31:25:1b:b0:ac:98:38:ea:de:9a:72:b9:
bd:17:fe:f3:cb:1f:73:63:12:6f:66:34:59:be:dc:8f:0c:8e:
80:da:7b:06:66:b4:7f:86:10:0c:d9:92:4a:d5:e7:3e:d0:f6:
3c:07:6c:4c:61:6f:1c:20:f2:e1:9a:91:cd:1a:b4:a9:bb:ee:
06:da:55:97:1e:42:d8:28:29:14:bc:c7:87:f1:e9:57:40:25:
79:d9:d0:70:92:fa:6e:af:7f:49:20:99:9e:ae:b1:2b:61:55:
e1:5e:6b:65:24:a1:65:63:0d:a1:ac:10:49:37:1c:da:d1:e2:
27:9d:81:bb:ab:c6:6a:ae:88:65:ce:fc:a7:6f:38:39:49:ff:
d0:a4:b6:2a:e6:59:d7:b5:18:f8:29:b3:69:c9:3d:25:a4:97:
a9:53:08:5c:b5:1e:16:f8:b2:22:47:c4:5e:35:9a:ef:dc:28:
72:aa:8d:ea:fb:d6:ee:47:4d:8c:b4:20:82:6b:50:70:cc:ec:
33:5b:67:ac:40:82:ff:09:e0:3f:98:2a:6f:cb:1a:c9:e7:cd:
7e:08:de:33:89:b1:c8:78:ad:2f:ff:b5:bf:04:7b:d1:0c:44:
f9:a6:07:d9:ff:b3:0c:6c:4e:74:0a:f9:65:b9:25:39:61:ab:
f2:a7:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:15 2026 by rpki-client