Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: C/3QV6yuELCkwVYdnKLzqr8JgDj4xCYCpQMP/89UG7U=
Subject key identifier: 89:10:BC:6D:6E:CD:A6:82:9E:05:9C:7F:5C:36:17:03:DB:CF:3D:8E
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 01A089B0D4658982A24C9B771C21DB02130E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 05:01:02 +0000
Manifest this update: Thu 10 Sep 2026 05:01:02 +0000
Manifest next update: Fri 11 Sep 2026 05:01:02 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: chJnugUtBKbUO+zE4GuKjEQcGJBf2IM1rPVlFD5UD6s=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:d4:65:89:82:a2:4c:9b:77:1c:21:db:02:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Sep 10 05:01:02 2026 GMT
Not After : Sep 11 05:01:02 2026 GMT
Subject: CN=8910bc6d6ecda6829e059c7f5c361703dbcf3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:47:29:21:36:c0:76:54:3d:00:26:04:5e:
00:72:28:6f:70:7d:93:34:21:9c:d0:54:95:ce:05:
ea:8d:f4:1c:ed:35:fb:ac:5a:38:19:b9:df:aa:ad:
cd:ff:74:27:e6:03:aa:ee:07:7c:7d:63:12:f4:08:
f9:5c:93:ef:3e:97:a8:51:7c:3e:aa:72:fe:46:d2:
a9:57:64:e6:51:f5:b9:ae:35:1e:62:24:63:05:33:
90:0b:ab:dd:49:5e:7a:7c:6b:60:b7:c2:8c:b5:f8:
b5:01:38:38:ae:e4:a5:d8:58:85:80:8e:61:fa:45:
a0:f7:03:53:4c:ff:c5:0a:46:71:04:34:11:7e:70:
c1:bc:b8:18:80:6d:25:68:84:97:15:47:4b:54:1c:
d1:37:77:59:c6:7c:d3:0b:d9:f6:7a:6e:8a:2d:4f:
e7:20:67:58:83:9f:97:b6:30:90:a5:6c:c9:58:cf:
0d:07:24:0e:39:6d:09:c8:75:66:dd:fe:cf:7a:56:
df:c0:c7:45:05:7f:23:0c:49:dc:59:69:88:7f:e7:
f6:f6:2a:92:aa:23:81:f3:c3:d2:29:a8:c3:a0:5b:
0d:49:e9:7a:5d:96:b5:7f:a3:e8:75:5f:e0:ac:97:
a3:c5:2f:10:f7:6e:78:42:a6:7f:cb:b9:ec:72:eb:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:BC:6D:6E:CD:A6:82:9E:05:9C:7F:5C:36:17:03:DB:CF:3D:8E
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5e:a6:1e:77:23:1f:2c:77:43:8c:9e:9e:81:e5:6d:60:9e:
44:65:e0:6e:ef:f6:4a:62:00:11:3d:07:35:b3:13:62:c5:d4:
c3:b1:03:e4:7a:af:b4:6f:7d:67:f2:05:41:bc:75:2c:83:3e:
d4:d7:6c:a4:c0:c5:3b:8b:6d:3f:45:9b:7d:5e:c3:bb:fc:cb:
69:8b:1b:3f:24:a9:b4:39:6c:c1:2c:cd:b6:fc:df:51:1a:69:
00:79:5b:13:89:c2:72:81:39:d6:27:db:93:df:f3:a7:ae:1c:
77:6d:86:e7:a3:77:9e:84:0c:14:fc:f1:62:41:5f:3d:49:bc:
ea:4f:15:cf:55:6a:33:dc:81:6c:b5:53:9c:a7:aa:b3:55:c8:
7d:ff:78:cc:c8:83:ce:a4:91:d8:5b:da:fb:74:ba:f0:a4:0b:
8a:ca:6b:9a:d4:5e:9a:03:e8:1d:17:63:2f:cf:55:f3:62:ee:
3d:7f:d5:f1:30:e0:54:a7:09:c2:07:97:39:5a:bd:a7:07:5a:
07:65:82:17:5b:df:9f:f4:3f:41:bb:fa:fd:b5:e6:fc:05:d2:
35:c0:4a:8e:5d:c1:1c:37:3a:53:56:88:4b:fd:42:52:ba:58:
d5:71:8a:a9:52:c0:47:3b:4f:82:14:83:3e:61:49:ed:0a:b7:
70:27:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:00 2026 by rpki-client