Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: Tb/uHylzmnPLlLvmlBaiYg3mlN5nixZHWK/xM18mAFk=
Subject key identifier: 14:5C:D9:26:BC:F1:AB:22:60:56:D7:43:42:91:1B:57:03:59:0D:85
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019F9F281CEBF5FF48D0BBE703D3B15819CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1897
Signing time: Sun 26 Jul 2026 16:00:33 +0000
Manifest this update: Sun 26 Jul 2026 16:00:33 +0000
Manifest next update: Mon 27 Jul 2026 16:00:33 +0000
Files and hashes: 1: XDoOCkf5CnO9nMvxbGa0LtE_XQQ.roa (hash: ot+Sv1+Lvck9ZSiTraTVvrdyHCpJGwJQ0EVIO7hg38A=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: WnmBLnm43t2ZWDDId82qzi+JAbSua/7l2SZTRLAecw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:1c:eb:f5:ff:48:d0:bb:e7:03:d3:b1:58:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jul 26 16:00:33 2026 GMT
Not After : Jul 27 16:00:33 2026 GMT
Subject: CN=145cd926bcf1ab226056d74342911b5703590d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:17:29:9c:d5:11:8f:88:74:bc:35:e4:95:
c9:5f:3a:b9:9b:d3:f9:ae:e5:7b:2d:4f:f5:2b:8d:
b1:e9:50:3b:de:cd:5e:20:96:f1:3c:b3:5e:4e:ae:
1e:ba:d9:5a:b8:76:61:95:8a:3a:59:35:15:86:fd:
5b:60:d7:92:8b:c3:41:0c:02:4f:1b:7d:ba:cf:cd:
6b:3c:9b:33:06:b0:75:36:75:3b:a8:80:e5:da:06:
9f:c6:47:fe:9a:a2:17:6a:e3:67:4a:0d:50:15:af:
86:65:f2:47:8b:60:cc:70:57:59:d2:5e:dc:98:6e:
5a:7a:5b:a9:23:c9:7a:59:00:08:5a:03:ea:45:3e:
59:42:ae:e0:6f:57:fe:09:fb:bb:0a:07:90:95:ff:
8b:34:b7:47:41:f3:94:1d:4f:e1:23:48:0a:30:6d:
2d:a9:03:3b:83:b2:fa:5a:ba:92:00:e6:21:2a:4f:
6b:20:cd:00:2d:e8:56:44:9f:2e:1c:f6:d9:45:f2:
42:93:07:84:c5:f9:d7:54:17:8c:0f:c9:6a:63:87:
1e:96:6a:10:c4:12:31:50:74:f3:83:74:dd:fd:bf:
f8:9e:1a:08:28:0e:62:ea:51:f4:c5:04:93:ac:84:
16:66:0c:fd:cb:8d:bc:56:be:b7:78:12:3d:ba:82:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5C:D9:26:BC:F1:AB:22:60:56:D7:43:42:91:1B:57:03:59:0D:85
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:89:6d:da:65:d4:0c:9d:d4:3a:39:99:39:d4:57:80:17:
30:22:9c:14:6e:00:b9:2c:17:90:58:ee:dd:7b:08:14:e3:bc:
16:50:43:f0:c3:fa:cd:db:47:41:7f:d0:2e:96:dd:77:c0:d6:
d0:1a:e3:b2:fd:50:b9:b0:c2:46:1e:bd:50:2b:7b:88:c1:0f:
3b:8d:ca:22:d5:cc:c0:fc:22:c2:5e:6c:ce:8e:45:d4:1d:71:
aa:3e:4e:b6:a3:f3:bd:1c:14:27:40:3c:3e:5a:de:52:8b:47:
d6:38:50:ea:97:dc:58:58:45:08:8c:01:bc:90:ba:77:46:74:
50:a6:01:8b:07:33:6c:81:ba:6c:be:6b:93:63:70:4d:a4:11:
9b:61:88:af:e9:a9:17:f8:b4:ca:0f:0d:38:ad:45:54:17:4f:
1a:86:7b:40:9b:cf:ff:4d:4b:ab:c5:71:b3:e5:7f:7f:7c:59:
35:0e:69:c4:19:05:df:e6:de:be:a9:ad:7f:0e:cb:43:80:79:
e0:0e:39:3b:db:ad:d4:c8:38:16:d3:53:bf:ea:0d:89:a7:84:
e5:59:57:92:e3:de:64:0c:93:fd:a1:72:37:6d:3a:04:fc:40:
e6:11:01:23:33:61:7d:68:10:1b:02:02:ce:11:81:16:fc:e9:
4d:02:71:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKBzr9f9I0LvnA9OxWBnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjYwNzI2MTYwMDMzWhcNMjYwNzI3MTYwMDMzWjAzMTEwLwYDVQQD
EygxNDVjZDkyNmJjZjFhYjIyNjA1NmQ3NDM0MjkxMWI1NzAzNTkwZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgcXKZzVEY+IdLw15JXJXzq5m9P5
ruV7LU/1K42x6VA73s1eIJbxPLNeTq4eutlauHZhlYo6WTUVhv1bYNeSi8NBDAJP
G326z81rPJszBrB1NnU7qIDl2gafxkf+mqIXauNnSg1QFa+GZfJHi2DMcFdZ0l7c
mG5aelupI8l6WQAIWgPqRT5ZQq7gb1f+Cfu7CgeQlf+LNLdHQfOUHU/hI0gKMG0t
qQM7g7L6WrqSAOYhKk9rIM0ALehWRJ8uHPbZRfJCkweExfnXVBeMD8lqY4celmoQ
xBIxUHTzg3Td/b/4nhoIKA5i6lH0xQSTrIQWZgz9y428Vr63eBI9uoLdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRc2Sa88asiYFbXQ0KRG1cDWQ2FMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzSJbdpl
1Ayd1Do5mTnUV4AXMCKcFG4AuSwXkFju3XsIFOO8FlBD8MP6zdtHQX/QLpbdd8DW
0Brjsv1QubDCRh69UCt7iMEPO43KItXMwPwiwl5szo5F1B1xqj5OtqPzvRwUJ0A8
PlreUotH1jhQ6pfcWFhFCIwBvJC6d0Z0UKYBiwczbIG6bL5rk2NwTaQRm2GIr+mp
F/i0yg8NOK1FVBdPGoZ7QJvP/01Lq8Vxs+V/f3xZNQ5pxBkF3+bevqmtfw7LQ4B5
4A45O9ut1Mg4FtNTv+oNiaeE5VlXkuPeZAyT/aFyN206BPxA5hEBIzNhfWgQGwIC
zhGBFvzpTQJxCA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:54 2026 by rpki-client