Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: KVXFY4w3SE3sMhsk808cZUCYkVZJUJqC65N9qs4wSO4=
Subject key identifier: 11:11:CB:AF:E1:80:07:E0:79:C8:32:A7:6E:03:CF:83:54:02:12:FF
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019EB845F0886BA440396C9058148B4B0E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 20:00:51 +0000
Manifest this update: Thu 11 Jun 2026 20:00:51 +0000
Manifest next update: Fri 12 Jun 2026 20:00:51 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: XU1PylDBO5M6AvQgnrqlfdOFDB+FhVs9SCkBds6g4uo=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:f0:88:6b:a4:40:39:6c:90:58:14:8b:4b:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Jun 11 20:00:51 2026 GMT
Not After : Jun 12 20:00:51 2026 GMT
Subject: CN=1111cbafe18007e079c832a76e03cf83540212ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:84:9e:39:63:19:52:5c:57:34:1f:68:92:
44:e1:75:fc:ce:19:80:a2:44:20:70:8c:db:ee:ee:
30:7c:f8:83:04:eb:9d:5e:9f:76:f7:17:01:94:80:
fd:3b:b6:f6:75:29:58:e8:cc:25:27:82:87:b1:eb:
d4:a2:d2:e7:e7:c2:a5:98:68:8f:e1:bb:b6:c7:4e:
d7:8d:3d:19:65:6f:26:c8:5e:a4:0e:92:a6:2d:5f:
77:50:81:76:2d:62:d6:3f:00:2d:7b:f5:55:9e:91:
27:06:9e:7d:45:75:19:5c:c2:31:e6:d5:11:bd:90:
65:a3:26:53:44:73:de:ca:84:69:6e:4d:9f:74:d5:
04:d5:6e:cc:84:67:b8:74:33:4a:73:84:80:11:67:
c9:c0:fd:b5:c3:43:70:b8:3d:64:ac:49:57:47:f2:
19:b6:9c:29:69:28:f8:5b:61:43:71:73:40:80:5a:
3f:2e:1e:43:6c:ae:27:00:5d:a7:5f:bb:0d:d6:44:
8e:54:db:26:21:80:89:4f:9d:fd:d1:2e:b6:a5:ce:
68:16:e0:2d:94:0e:24:16:d2:0b:3b:f0:e4:16:cf:
75:90:7e:d4:71:32:35:44:15:6d:c1:50:17:ab:8e:
46:be:50:eb:56:7b:3c:65:f9:36:34:d7:7e:ff:60:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:CB:AF:E1:80:07:E0:79:C8:32:A7:6E:03:CF:83:54:02:12:FF
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f3:45:6a:2c:bb:a6:45:e9:94:cf:6d:de:3a:9c:41:c5:00:
ba:2f:cd:f1:d3:83:56:da:21:49:cb:38:bb:0d:80:84:5d:ff:
e2:83:3e:e5:4c:e7:72:9b:22:4d:35:17:ef:18:03:3a:05:96:
87:57:6a:ee:66:4d:17:8e:6b:b9:51:e6:92:45:1c:51:75:a2:
2d:5f:e4:fa:58:27:a4:7f:81:ef:c3:1c:09:d6:97:ae:44:85:
a0:f8:52:bd:b2:5d:1d:7a:6a:f2:3d:53:b6:62:02:78:6a:59:
61:5b:6d:41:80:3e:81:d1:1a:2d:b6:70:91:9a:ff:d8:ce:46:
44:ac:77:9e:51:f0:ad:bd:1b:e8:a5:bd:ef:12:7c:24:35:84:
b9:8b:6c:3e:1b:e4:9e:6d:4e:a7:8f:5a:46:12:d4:af:75:b7:
d1:51:34:dd:bf:49:30:57:0e:c2:4d:4b:bc:26:6a:58:7b:e7:
91:7b:60:6f:8c:81:fc:12:41:65:39:67:44:37:ed:29:b0:d1:
3a:7b:99:e1:77:0a:0a:c3:b2:b7:4d:be:92:a7:1c:58:61:96:
36:14:f6:0c:41:19:c8:dc:cf:09:f4:fb:2c:5a:fa:a0:ea:4e:
ac:36:54:97:21:6a:71:11:1b:b0:d4:26:e4:ab:a5:56:ae:42:
29:2e:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:30 2026 by rpki-client