Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: DO1D8/MtHu4QTP6wRWOrlfJvWS31Bz1rMMaKRfhmVro=
Subject key identifier: B7:95:A9:6F:31:CB:B3:A9:AD:D9:05:5C:FA:DB:5F:6D:DE:F3:FB:9E
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01A172EFADEB41A0E5E4CF2FD2D0D3195E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 198C
Signing time: Sun 25 Oct 2026 12:01:12 +0000
Manifest this update: Sun 25 Oct 2026 12:01:12 +0000
Manifest next update: Mon 26 Oct 2026 12:01:12 +0000
Files and hashes: 1: fiAC-nRFG3j7z6sAPBOW0WWmbbQ.roa (hash: ymlpT421LeYxNgWZaTRLoVGcyg20fikWOGjrcNBgr1I=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: SPeDKNad6FbE4DcWaJT/9+3KHbTcygtNxoeTFlq46P8=)
3: k1V-jLyYwFzcxqE9I8WnGFlRhik.roa (hash: B+Azgi2OMdz2mz2h3m03oc7pj8d8tKJCBST0XGF9S4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:ad:eb:41:a0:e5:e4:cf:2f:d2:d0:d3:19:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Oct 25 12:01:12 2026 GMT
Not After : Oct 26 12:01:12 2026 GMT
Subject: CN=b795a96f31cbb3a9add9055cfadb5f6ddef3fb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:80:1f:31:c6:67:26:93:90:fb:15:75:ad:
21:1b:05:8d:0a:1e:2a:06:47:b3:34:39:77:b8:51:
87:77:36:84:01:17:7a:43:1a:5d:f9:67:19:bf:61:
4c:1f:f3:9d:8c:1d:f4:35:40:80:e0:70:ef:14:57:
ba:18:e0:df:8c:e3:69:1e:0b:2d:0c:2c:23:c0:1e:
9a:c0:eb:74:2c:b2:4e:49:e2:8e:87:cc:e6:61:5c:
98:67:58:41:28:e4:90:85:43:40:6a:ad:44:cc:33:
60:63:12:66:59:d1:ea:d9:e4:df:72:ca:17:71:37:
9d:cb:89:7f:ca:65:55:0f:a5:00:20:43:a9:3e:8b:
a4:64:8e:6f:d7:d7:24:db:bd:4e:f4:ee:1c:01:22:
9c:46:bc:0d:ad:24:32:fc:27:f1:60:a8:09:93:42:
66:46:bf:7c:2d:65:23:bf:5b:02:14:ae:17:73:ce:
1e:c0:f5:9d:0e:42:3f:e1:43:40:d8:ec:04:66:36:
6d:f2:6c:97:c8:4d:24:4f:04:4d:42:f3:13:02:62:
39:af:3d:c4:f0:fa:72:73:72:a7:10:98:c5:f9:26:
89:4e:36:dd:24:c4:80:55:a3:e8:58:e5:02:27:22:
aa:9e:02:a7:a9:18:32:8d:07:3c:a2:af:86:d4:32:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:A9:6F:31:CB:B3:A9:AD:D9:05:5C:FA:DB:5F:6D:DE:F3:FB:9E
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:2a:87:2e:ec:20:7f:b0:27:e2:9f:94:d5:2d:de:c0:a7:
97:b9:9c:27:28:8f:c3:7b:f4:a9:17:8f:9d:a2:0a:d9:43:58:
c1:67:27:c7:c8:be:3b:58:5d:ba:a3:4e:7a:89:34:ca:36:9a:
af:23:ec:7e:f6:d9:2c:2c:a3:ef:99:b5:84:08:2c:6b:2d:9b:
c4:3a:0d:d1:f1:07:ed:cf:ba:e7:de:a8:4f:46:6a:17:f5:3d:
b4:dd:e8:53:b7:42:a6:b9:31:4c:bb:bb:21:39:7e:92:34:8c:
34:57:21:c0:40:e4:74:e0:d7:55:c0:1f:57:67:0f:50:01:4f:
77:89:02:01:ae:e9:73:9f:bf:9c:0a:e9:ad:4e:cc:3b:4b:02:
06:78:94:c7:48:7e:73:c9:5f:99:2d:7c:34:ed:ca:a4:fb:c7:
27:b3:10:87:82:65:29:fa:44:6b:65:03:e6:f0:0b:b5:25:42:
28:0f:ad:28:71:97:d5:48:30:3f:53:a4:77:b3:45:12:f9:7a:
a8:53:18:5a:2e:0b:45:70:e5:f7:bd:10:b3:a8:df:e3:7e:39:
4c:80:06:e1:bb:cc:c9:5e:03:dc:7d:4c:e9:3b:73:7a:c9:2d:
32:cd:ef:c8:4c:07:30:26:da:27:03:66:ad:86:8b:9d:c0:e0:
85:51:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:25 2026 by rpki-client