Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: 38++aWtD7ligRnoUSLy77Z86eZ71ykcEEcnPbD7i73Y=
Subject key identifier: 44:A5:C7:C6:93:B5:D8:4B:0E:23:56:07:22:0E:5D:84:D1:56:E7:52
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 01A0C77D24ED7EC3F1BDB29B01E033F14AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 05:01:02 +0000
Manifest this update: Tue 22 Sep 2026 05:01:02 +0000
Manifest next update: Wed 23 Sep 2026 05:01:02 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: QWmfg663FJGOoE1l6Whtwm6mfseo1nYzZNe2HNk7Pg4=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:24:ed:7e:c3:f1:bd:b2:9b:01:e0:33:f1:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Sep 22 05:01:02 2026 GMT
Not After : Sep 23 05:01:02 2026 GMT
Subject: CN=44a5c7c693b5d84b0e235607220e5d84d156e752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:ab:c2:da:dc:fd:09:1d:93:d8:f7:18:45:
6b:f8:ce:fd:d5:6d:df:a8:44:14:96:04:39:1f:b2:
04:a6:1a:6c:a0:71:c8:7e:51:70:a5:07:a5:27:46:
e0:af:96:b2:4c:45:29:56:ee:1f:d4:68:64:a1:44:
44:16:68:d8:22:ed:ef:29:9f:d4:58:67:2b:18:07:
18:e6:a8:0e:c2:f3:76:32:80:d1:e3:30:9b:19:20:
fb:19:1a:3f:11:fb:18:1d:33:35:4c:1f:8e:ca:d7:
11:e8:4d:7f:44:03:e4:a0:fc:c9:0d:63:64:91:8a:
10:bb:8a:80:77:c3:48:ea:2f:a4:9b:39:8a:d1:4a:
9b:e9:98:51:78:37:a3:99:2c:8e:71:39:b1:aa:ed:
b7:af:1e:65:f0:bd:cb:6b:8b:c8:30:40:98:83:a2:
4e:49:77:ef:22:f6:8f:11:c6:3e:b8:69:d2:e4:b9:
ed:ae:37:52:9a:d6:72:36:5a:2e:55:c9:8b:e1:6a:
da:b9:86:73:6e:4f:13:4a:90:18:f1:7c:c3:72:e0:
fa:98:ae:49:1e:5a:0f:ae:12:18:e2:5c:a3:c1:d7:
bd:5f:da:57:72:1e:a2:c8:58:4a:c5:64:19:79:00:
24:e6:50:cc:ea:f6:da:5e:2e:08:dc:36:99:36:01:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:C7:C6:93:B5:D8:4B:0E:23:56:07:22:0E:5D:84:D1:56:E7:52
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:30:a6:fa:81:e9:d8:f0:91:15:02:e3:58:df:6b:d0:ec:
45:60:d2:e2:a4:75:c1:e5:1b:53:e9:02:ab:f4:49:d9:ae:d4:
c6:4b:d1:5d:54:ac:01:f9:91:21:98:52:43:2e:c0:94:b3:d1:
a7:5d:de:4a:29:2a:45:fa:ec:a2:d3:60:43:93:7a:92:ab:5d:
aa:01:1d:58:2c:2c:65:b1:b4:2a:d3:21:52:22:23:55:71:df:
6e:d3:c2:39:70:93:67:1f:58:76:6e:66:4a:59:cf:e9:22:78:
41:59:16:2b:0b:2d:d1:f2:78:c6:b5:65:bc:a7:fa:bb:6b:2d:
d9:bc:09:d8:33:ac:8b:a2:d2:a8:07:12:ed:78:f5:51:23:56:
0f:13:8e:34:ca:4c:75:d7:83:16:ed:24:35:2f:82:bc:96:f3:
35:50:77:97:bf:28:d8:f2:47:50:74:57:7f:a0:c7:04:e3:df:
cf:42:ac:00:49:1a:53:24:a6:53:c7:72:37:cb:f1:9b:06:07:
b6:c4:a9:c5:b8:f1:17:3e:ff:ac:f3:bc:8f:ed:7e:9b:c2:10:
bc:de:49:14:2a:a0:35:d4:49:0e:92:54:56:a2:f8:0b:3c:22:
93:0a:e0:8d:aa:a3:e4:6f:66:c4:38:9d:5e:f6:c4:74:5b:b5:
1f:d0:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:52 2026 by rpki-client