Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: cHqshQs9joTig9kXJerHvxY6uXDTsGg444lYp/7yQTc=
Subject key identifier: 61:FD:B6:04:2D:4C:ED:70:B0:46:94:86:64:40:78:3F:3A:33:B4:75
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019D382DFE0FA3B64FEDF1B87D153C6E8412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1758
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: RY6d2War7s_bXguR2iy9IN9YcRc.roa (hash: 5KpHenlSj0FRQpLdtAUp1FNTXJS4qFPZ/fpqZIMZBCA=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: mkBnJO/xfarbA9AU3lhuWiea0BQ1VyyaxsgqX5HeMy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fe:0f:a3:b6:4f:ed:f1:b8:7d:15:3c:6e:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=61fdb6042d4ced70b04694866440783f3a33b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:96:41:7c:0b:02:26:80:40:2c:c6:b5:7b:
5b:73:49:79:54:f6:9c:1a:47:07:90:3b:f1:b5:4d:
72:f3:79:00:c3:4e:19:dc:03:90:70:7d:da:5a:69:
ba:8d:8e:22:69:9a:09:8f:6b:5c:db:91:85:60:30:
4f:27:de:13:13:26:01:7e:6d:c0:a2:b2:7b:91:85:
48:fa:66:53:59:53:19:c9:40:99:a5:cd:a2:db:0f:
a4:e8:b4:50:59:1d:49:92:86:79:b6:63:2b:4f:49:
02:9b:3f:63:81:ea:3c:1f:d9:dc:9c:a7:26:50:ea:
cb:fc:46:3a:43:20:7a:e7:72:00:4b:c9:69:3d:34:
88:15:da:37:bb:1f:30:38:10:4b:1b:8a:d9:ee:73:
24:71:bd:61:96:ad:94:f0:d8:f9:b2:b7:78:0f:40:
20:ca:64:65:84:81:78:9d:4f:cb:fa:be:05:9d:af:
7f:c7:b0:07:b3:01:55:13:91:4f:a1:a3:24:bf:ce:
16:a9:13:b3:c2:6f:fa:ea:ce:47:46:7c:1c:c1:58:
f1:c8:c8:c2:7d:1a:b9:77:ce:ab:93:57:ad:13:b9:
1f:46:49:af:ed:d0:9a:a2:4c:4e:eb:18:3f:b4:8c:
ee:93:4d:4d:d2:de:6a:1a:84:8f:06:e1:bc:2d:c6:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FD:B6:04:2D:4C:ED:70:B0:46:94:86:64:40:78:3F:3A:33:B4:75
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:32:d0:d2:96:59:de:14:1a:89:a7:83:5d:b2:d8:0a:db:
7a:2e:90:e2:fd:e5:65:d3:9b:51:9e:cf:d3:82:bf:bd:8b:df:
f3:31:2c:92:92:3f:c4:d7:06:f0:69:c7:2e:99:24:4d:bc:23:
13:f6:db:b2:44:03:48:0f:8d:b7:8f:5c:87:72:42:ae:50:34:
ed:fc:d4:64:e5:1a:66:2e:67:46:2c:43:bf:9f:27:30:b7:f0:
30:ed:1b:b4:27:65:23:0b:27:ca:bc:08:f4:15:f1:bc:a6:49:
50:da:fc:f5:25:26:9d:56:13:92:96:77:85:d0:f3:14:53:82:
8d:69:1f:7e:cb:09:5b:ff:8c:f2:05:d3:16:4b:55:d7:72:f6:
65:f0:a6:fc:59:5e:39:cd:4f:25:87:2f:dd:e3:e5:78:fa:77:
9e:56:9c:19:05:8e:de:a1:88:bc:a1:65:7c:9c:63:b9:7f:26:
65:39:91:93:91:31:f0:b6:7f:d6:35:99:aa:60:94:e8:61:22:
5b:2f:25:95:21:c2:50:f4:71:1a:ac:60:f4:fd:65:30:eb:3b:
08:6d:2d:1e:25:e9:1a:10:26:67:12:35:fb:2c:ce:b4:5d:f0:
75:08:d4:1e:4c:f8:80:22:6d:bc:55:7a:26:dc:aa:ef:f0:db:
3a:2b:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:28 2026 by rpki-client