Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: UcFdovS6bFF8SQhQsX1qWVVYP1+yzYgx7E7OgL8etSw=
Subject key identifier: 81:37:5E:96:80:4F:B9:FF:E1:D3:91:F1:08:BF:06:80:99:69:6F:C7
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 01A17B164CFFD3827C76AA45431A9058E880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 02:00:21 +0000
Manifest this update: Tue 27 Oct 2026 02:00:21 +0000
Manifest next update: Wed 28 Oct 2026 02:00:21 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: +c7ZV5AOTUTo5LTcAMnaO3+F24HT6O2NILuGgBMb3Jg=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:4c:ff:d3:82:7c:76:aa:45:43:1a:90:58:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Oct 27 02:00:21 2026 GMT
Not After : Oct 28 02:00:21 2026 GMT
Subject: CN=81375e96804fb9ffe1d391f108bf068099696fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:06:20:54:62:4c:01:b5:b9:0b:5a:16:31:
3f:7d:66:83:97:7a:d0:f5:84:e3:35:3a:d9:84:58:
95:d4:e0:50:34:6d:62:b9:a6:e0:1a:90:b9:1b:a2:
05:b5:36:80:f5:ac:d4:56:ca:08:eb:19:9d:bc:30:
84:f8:64:27:d0:4e:5d:ae:c6:fa:72:77:68:b9:7c:
50:40:a1:f8:de:d1:61:ee:62:2f:93:a4:a9:a9:0d:
78:1f:49:3e:6d:aa:03:86:05:5f:f6:86:6f:a4:45:
43:7f:08:86:69:47:e7:34:21:82:0a:64:bf:a2:0f:
f2:ae:04:a7:d9:94:04:95:4e:01:69:41:b2:4b:f6:
18:f9:03:75:f1:3d:df:10:65:f5:72:ce:b9:58:dc:
52:97:d2:3b:3b:aa:ab:01:33:d0:c3:62:5d:3c:3c:
c2:7f:67:f4:70:c1:78:45:36:0c:cf:65:db:e3:f0:
08:43:c0:53:e9:6f:df:a3:43:ec:6a:5d:35:5b:65:
5f:b4:c0:40:9d:b2:1b:65:b0:d9:a6:1c:36:9d:ea:
9e:a3:33:0e:e1:f3:84:61:d4:66:5b:99:e3:87:c0:
36:0c:fb:0e:50:23:c0:f1:32:1a:ee:ba:3f:c9:ee:
67:ab:f3:13:43:b7:e0:6a:f1:bc:e0:d2:a0:d0:31:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:5E:96:80:4F:B9:FF:E1:D3:91:F1:08:BF:06:80:99:69:6F:C7
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:42:88:b7:30:e3:24:6b:ed:fc:18:09:50:06:d6:3c:a1:
70:22:39:5a:ef:0f:ee:9b:b6:a3:c2:31:0f:12:68:a6:14:3f:
91:76:78:0c:8a:7a:cd:c2:08:64:fe:42:0a:44:9b:d1:d0:54:
0b:9b:b7:6b:cb:49:2a:9e:a7:0e:76:80:3d:e7:29:06:13:79:
0d:97:0d:4b:7f:74:ff:4d:0b:6a:2f:56:a5:aa:54:43:fc:3a:
cb:ea:a1:c6:e9:02:c6:76:1e:1a:b1:5e:f2:09:28:41:58:13:
6c:56:44:84:e9:e3:aa:1a:ad:79:3f:8f:93:64:85:84:24:8b:
52:83:5a:d6:03:20:d9:4c:84:73:a2:d0:91:40:37:64:38:92:
62:cf:e9:ee:4b:24:1b:bc:3e:17:84:79:53:97:a6:2f:46:54:
b3:81:a6:a1:bb:00:9f:75:63:ec:92:f1:aa:1f:c4:a3:46:35:
b1:38:34:40:65:08:e4:56:52:6f:02:71:18:f5:33:47:af:85:
1c:b8:0c:da:28:62:99:f3:62:4b:9e:43:6a:ef:e2:e5:32:48:
c2:e0:f7:a6:a7:d4:7c:d3:3c:93:87:8b:1e:d7:ee:2b:e1:ae:
77:b8:81:bc:86:fd:8a:bf:51:7a:7a:1c:80:9a:78:43:01:11:
59:19:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:05 2026 by rpki-client