Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier: 1z3okCwqcS0O6tQSijK1W5pZotzRffz12PoJXYtin54=
Subject key identifier: 38:19:71:98:88:03:B7:45:4A:F7:49:4C:37:46:78:C8:84:06:4E:9B
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 019D389C362173BC78AF5D9479F70CB2A358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number: 1780
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 6k_g9zpR0oUHNJNOJpWC6Uips58.roa (hash: xsbRkvDZeur19giHSHwKBgppoMpB/PB9Dmlu/eOW38M=)
2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: oVwDB2bZOnRfcyWgQwPE6AS81WvTBokAxRu/wbtTVrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:36:21:73:bc:78:af:5d:94:79:f7:0c:b2:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=381971988803b7454af7494c374678c884064e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:fb:63:51:eb:63:51:a0:e7:d9:3f:fe:40:
3b:1d:d6:66:fa:68:9c:76:c8:de:e7:95:24:6b:68:
3f:31:f2:c1:1b:5a:e7:89:15:f3:c7:07:12:cd:ae:
eb:a4:09:9a:03:89:51:f9:fe:82:c9:ba:8a:3f:b6:
aa:19:c9:bb:61:f9:6c:d4:9a:d6:d4:33:19:47:9c:
9b:02:50:b9:5a:c7:d5:b9:fe:1b:77:24:2a:40:61:
9f:42:28:b3:61:44:6e:ed:74:15:67:04:79:65:1d:
8e:b2:52:95:ad:6d:a2:e0:67:5f:90:41:af:1a:d6:
ac:dc:f3:59:00:e2:5a:19:00:a9:ea:f7:bf:65:68:
a1:76:55:4a:65:0d:f9:90:c2:34:d2:60:35:c8:27:
18:1b:6c:47:8c:7e:65:65:be:8a:dc:cc:03:98:a4:
91:43:23:78:9b:4c:4d:39:d6:db:13:c7:06:b4:e8:
67:b4:47:9d:72:31:a7:67:ea:a2:df:b9:82:e2:27:
e6:9a:83:87:ba:5a:dd:4f:b1:89:04:d4:cf:d2:ca:
28:12:09:4f:94:a7:3a:56:cf:18:9d:4d:97:02:e9:
d1:45:16:cb:28:4b:6f:f3:12:fc:a8:b7:d8:ef:c2:
ec:d0:ee:4f:57:58:e6:58:55:18:35:0f:02:fa:68:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:71:98:88:03:B7:45:4A:F7:49:4C:37:46:78:C8:84:06:4E:9B
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:21:dd:23:7f:47:23:d3:7d:e5:ff:d4:a1:df:94:c7:80:
19:69:f6:f2:ca:93:64:eb:28:33:89:dd:e8:9f:ee:18:af:71:
e1:d7:b9:f4:59:f6:ee:c5:8a:c9:82:25:f2:40:25:1d:05:27:
d1:bf:e1:ba:63:cb:6a:12:83:07:c7:70:9e:2c:ff:3c:8a:e8:
b9:9e:77:38:c1:2c:52:b8:13:71:08:c0:d2:eb:03:97:95:b2:
b6:73:bc:c7:96:b8:33:8d:b3:a7:0a:79:20:7b:29:50:1a:a6:
a5:67:42:03:03:10:22:0b:4c:a7:50:3a:13:01:04:99:bd:84:
21:8f:fc:e4:c3:dc:98:c3:a0:13:85:9b:7f:79:f0:18:55:ff:
49:06:d8:7f:92:8e:e6:2c:3e:6d:7b:53:7b:a7:10:df:5c:ef:
01:16:95:63:82:32:80:07:11:f9:93:27:ef:c8:22:be:c9:da:
d0:51:37:3c:a0:3d:bb:28:2a:c0:86:07:d2:46:a5:a2:c1:52:
a8:d8:89:02:ce:a0:18:92:59:90:a7:84:b4:e6:90:b8:33:2a:
58:5f:39:3d:9f:52:c5:4f:04:f6:12:42:e8:04:46:c3:f7:e3:
8c:89:1f:01:ee:26:c0:77:55:5c:85:75:85:e7:d9:61:64:ea:
72:d5:ff:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDYhc7x4r12UefcMsqNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjZhOTk3NDEwMmJhNTgyMjE3MTg4YmU2ZDQ5ZDg3NzZk
M2JlYmIwHhcNMjYwMzI5MDgwMDU0WhcNMjYwMzMwMDgwMDU0WjAzMTEwLwYDVQQD
EygzODE5NzE5ODg4MDNiNzQ1NGFmNzQ5NGMzNzQ2NzhjODg0MDY0ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzL7Y1HrY1Gg59k//kA7HdZm+mic
dsje55Uka2g/MfLBG1rniRXzxwcSza7rpAmaA4lR+f6CybqKP7aqGcm7Yfls1JrW
1DMZR5ybAlC5WsfVuf4bdyQqQGGfQiizYURu7XQVZwR5ZR2OslKVrW2i4GdfkEGv
Gtas3PNZAOJaGQCp6ve/ZWihdlVKZQ35kMI00mA1yCcYG2xHjH5lZb6K3MwDmKSR
QyN4m0xNOdbbE8cGtOhntEedcjGnZ+qi37mC4ifmmoOHulrdT7GJBNTP0sooEglP
lKc6Vs8YnU2XAunRRRbLKEtv8xL8qLfY78Ls0O5PV1jmWFUYNQ8C+mgIQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgZcZiIA7dFSvdJTDdGeMiEBk6bMB8GA1UdIwQY
MBaAFIImqZdBArpYIhcYi+bUnYd20767MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNTQ3N2YtODBkMC00ZWE0LWJiZGUt
NzY3YjcyZWI0MDdiLzEvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNTQ3N2YtODBkMC00ZWE0LWJiZGUtNzY3YjcyZWI0MDdi
LzEvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdYh3SN/
RyPTfeX/1KHflMeAGWn28sqTZOsoM4nd6J/uGK9x4de59Fn27sWKyYIl8kAlHQUn
0b/humPLahKDB8dwniz/PIrouZ53OMEsUrgTcQjA0usDl5WytnO8x5a4M42zpwp5
IHspUBqmpWdCAwMQIgtMp1A6EwEEmb2EIY/85MPcmMOgE4Wbf3nwGFX/SQbYf5KO
5iw+bXtTe6cQ31zvARaVY4IygAcR+ZMn78givsna0FE3PKA9uygqwIYH0kalosFS
qNiJAs6gGJJZkKeEtOaQuDMqWF85PZ9SxU8E9hJC6ARGw/fjjIkfAe4mwHdVXIV1
hefZYWTqctX/KA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:58 2026 by rpki-client