Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: j47l1gvUlM3ZoKyDbKKQsm8hpq+ZG5gjOtSUyaB5VDc=
Subject key identifier: 71:7E:40:3F:A4:FB:A0:0C:E0:E1:31:C7:7C:EA:09:17:38:77:B4:59
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019D38D2D3B2E66574B3DDFF336574D8E83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa (hash: Sy4qxp/vjChSs7LGRbsdrKBPDJPwQ9QRGo9byWidGTE=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: 2pz4koUCeekrhM7Wt/dZjx6/zgDO6SerVBoSPlwC8wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d3:b2:e6:65:74:b3:dd:ff:33:65:74:d8:e8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=717e403fa4fba00ce0e131c77cea09173877b459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:82:59:98:5c:98:4f:52:de:e4:2e:18:9e:
ee:37:d0:fa:21:89:ca:5a:4b:e5:6f:5f:25:2c:17:
6c:76:19:ae:37:b6:24:c6:31:73:52:62:10:89:90:
63:b4:dc:f1:89:6c:de:42:26:07:93:dc:bf:4f:d8:
8f:90:c8:46:74:42:84:e6:ab:ec:64:53:50:20:40:
a2:db:95:ce:e7:d0:0e:4e:d3:a0:2b:1b:c9:bb:03:
aa:b2:7b:8f:8d:84:80:3e:05:5d:4e:27:ee:28:92:
64:32:23:95:51:30:33:14:48:7b:56:6d:69:e9:91:
64:07:5a:87:71:cf:aa:ba:3d:34:8d:a2:43:c2:9e:
6e:39:51:f2:ad:bd:08:a1:0b:40:f4:f1:07:95:65:
ee:be:ef:2a:d0:36:24:94:38:53:13:5b:e5:a7:ae:
d3:db:0c:52:bb:d4:30:28:5b:5b:66:e8:2f:d9:d2:
7b:5f:27:6b:85:55:22:62:22:16:20:39:5b:bb:df:
01:10:95:a9:30:ac:d7:dd:06:ee:0f:eb:82:c1:25:
3e:ed:86:0d:77:0f:c5:0d:b0:c1:a8:05:51:c2:88:
95:de:6e:0a:c7:86:52:d4:ea:a9:b7:ee:32:5a:d7:
c6:33:93:e0:c0:61:4b:98:27:86:5b:ba:16:6a:21:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:40:3F:A4:FB:A0:0C:E0:E1:31:C7:7C:EA:09:17:38:77:B4:59
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b5:3c:3d:74:e0:2b:dd:15:12:9d:85:03:04:f0:b4:0c:88:
55:62:33:ed:e0:7c:88:14:b2:64:52:16:7d:1f:51:df:85:5b:
72:3f:1f:c7:02:49:4b:55:c7:9d:9e:f7:05:cd:fe:58:31:ef:
50:fe:b4:bb:bc:ac:b0:e7:25:65:a3:0e:97:c8:a7:3b:f2:99:
11:76:dc:54:d7:66:4d:bf:d7:1f:d4:0a:35:bd:20:d2:94:4f:
8a:8a:1b:d1:fa:68:18:37:7a:1d:6d:25:4f:ab:c7:f7:41:f4:
72:ae:2a:0c:cd:38:5f:9a:12:09:7a:7b:f9:a5:f9:39:ae:44:
af:4f:23:f3:fc:9c:f8:b7:69:ae:a9:3a:32:ea:ba:0e:2b:24:
9e:4a:06:0d:f5:82:1f:fd:b6:ec:a5:9d:10:5d:ac:41:a3:77:
1f:f4:55:90:eb:e5:20:5e:a7:e6:42:6e:8f:f0:64:42:7c:75:
f9:e7:fd:68:56:0a:91:ad:38:52:84:1b:ec:0e:91:67:02:98:
ce:4b:2c:97:4e:49:c1:27:af:33:d7:1c:dc:c6:79:91:a2:6b:
0f:e9:65:0c:22:b9:28:c5:fb:af:37:42:ca:49:c2:e4:a3:7a:
ac:87:a9:c4:9e:cd:ff:54:35:29:15:9f:6f:35:6f:94:07:56:
b9:ce:be:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040tOy5mV0s93/M2V02Og6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx
MTk4YTkwHhcNMjYwMzI5MDkwMDMzWhcNMjYwMzMwMDkwMDMzWjAzMTEwLwYDVQQD
Eyg3MTdlNDAzZmE0ZmJhMDBjZTBlMTMxYzc3Y2VhMDkxNzM4NzdiNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuCWZhcmE9S3uQuGJ7uN9D6IYnK
Wkvlb18lLBdsdhmuN7YkxjFzUmIQiZBjtNzxiWzeQiYHk9y/T9iPkMhGdEKE5qvs
ZFNQIECi25XO59AOTtOgKxvJuwOqsnuPjYSAPgVdTifuKJJkMiOVUTAzFEh7Vm1p
6ZFkB1qHcc+quj00jaJDwp5uOVHyrb0IoQtA9PEHlWXuvu8q0DYklDhTE1vlp67T
2wxSu9QwKFtbZugv2dJ7XydrhVUiYiIWIDlbu98BEJWpMKzX3QbuD+uCwSU+7YYN
dw/FDbDBqAVRwoiV3m4Kx4ZS1Oqpt+4yWtfGM5PgwGFLmCeGW7oWaiFMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF+QD+k+6AM4OExx3zqCRc4d7RZMB8GA1UdIwQY
MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt
N2NjYmI0NWRjYTUxLzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx
LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLU8PXTg
K90VEp2FAwTwtAyIVWIz7eB8iBSyZFIWfR9R34Vbcj8fxwJJS1XHnZ73Bc3+WDHv
UP60u7yssOclZaMOl8inO/KZEXbcVNdmTb/XH9QKNb0g0pRPioob0fpoGDd6HW0l
T6vH90H0cq4qDM04X5oSCXp7+aX5Oa5Er08j8/yc+Ldprqk6Muq6DisknkoGDfWC
H/227KWdEF2sQaN3H/RVkOvlIF6n5kJuj/BkQnx1+ef9aFYKka04UoQb7A6RZwKY
zkssl05JwSevM9cc3MZ5kaJrD+llDCK5KMX7rzdCyknC5KN6rIepxJ7N/1Q1KRWf
bzVvlAdWuc6+uQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:14 2026 by rpki-client