Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: nzomedNwmuuki7TU2Hc6r735r7Wk0TgGie03nFXmjXE=
Subject key identifier: 33:24:F4:BC:9F:31:B4:68:9B:C7:68:30:7E:28:81:63:5F:53:FF:C5
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019F91A3B0076226CEA764D25760F2FDD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1890
Signing time: Fri 24 Jul 2026 01:00:51 +0000
Manifest this update: Fri 24 Jul 2026 01:00:51 +0000
Manifest next update: Sat 25 Jul 2026 01:00:51 +0000
Files and hashes: 1: XDoOCkf5CnO9nMvxbGa0LtE_XQQ.roa (hash: ot+Sv1+Lvck9ZSiTraTVvrdyHCpJGwJQ0EVIO7hg38A=)
2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: +cRnRLd5Y2F1GdYtHy8M6sAu1jly5jnTXVfGDbV3+JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:b0:07:62:26:ce:a7:64:d2:57:60:f2:fd:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jul 24 01:00:51 2026 GMT
Not After : Jul 25 01:00:51 2026 GMT
Subject: CN=3324f4bc9f31b4689bc768307e2881635f53ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:00:92:d4:f4:37:47:fa:1d:a6:c9:f3:30:
61:0a:6d:78:68:5d:9e:aa:ce:31:01:11:65:8d:3c:
93:91:88:5f:7b:b8:47:88:53:8d:7c:15:09:aa:db:
2c:fd:8a:6d:01:af:e4:9d:0c:e5:ed:e2:57:9b:96:
f8:e3:07:b9:ae:f8:e7:a3:38:79:1e:a0:68:27:d7:
89:49:3e:55:61:98:be:3f:c4:9a:b7:4e:bc:78:f6:
66:f5:c0:9b:20:2a:17:1c:1f:8e:89:0c:55:e7:e4:
22:08:b3:e7:2b:b6:d2:2e:ce:e8:90:a5:af:b5:56:
eb:30:4e:11:48:eb:bb:a1:d4:c4:e1:2f:ec:cd:f7:
e2:93:1d:13:bc:82:b5:d8:3a:37:8f:d2:ba:9e:70:
34:36:f8:e4:d2:1a:7c:4b:93:c6:7a:56:fc:9c:28:
2d:b2:23:ef:a3:a0:f2:0f:10:6b:b6:9d:9d:ff:e1:
99:e3:a9:8c:2d:44:d8:e9:6a:43:94:7f:7e:ce:3a:
94:0f:7f:9c:3e:7d:e3:09:8e:85:cb:00:4f:6d:ea:
06:32:29:e1:1d:5e:5c:d0:84:ba:de:12:98:19:06:
b6:ac:57:6b:9d:f3:c4:ef:35:63:72:77:31:36:5c:
a2:6d:85:23:7e:b3:8b:15:ec:68:3d:3c:c1:75:b2:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:F4:BC:9F:31:B4:68:9B:C7:68:30:7E:28:81:63:5F:53:FF:C5
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:25:06:25:2e:67:1b:d0:ec:4b:64:1d:9c:5d:90:c9:d5:63:
c3:0d:c0:b6:51:05:71:3f:a3:c1:75:b5:57:eb:fb:d7:36:51:
69:91:4d:8d:c1:e1:a9:58:c8:ad:04:d8:c3:a8:a8:3c:95:4a:
38:35:0d:a8:f5:91:32:80:3e:07:63:26:9a:f3:9d:24:56:a3:
19:e9:81:d9:78:31:76:38:ed:d0:72:ad:f2:1c:4a:d3:dc:54:
d9:61:d3:f4:ab:13:6d:e4:04:b7:4b:29:74:10:3f:cf:fe:74:
36:62:d4:8a:9c:ea:c4:bb:3e:db:0c:d1:84:a3:22:52:c6:9d:
f6:2f:12:94:f8:20:14:8b:8a:ea:cc:f0:69:a8:a8:24:59:58:
90:7a:0e:e0:9a:66:0f:3a:98:79:d5:4b:0c:2b:86:76:3d:1c:
5a:d6:c4:24:ee:b9:cb:dc:48:24:ed:45:15:a8:0f:f2:63:03:
c1:a3:45:d1:86:b0:7a:80:7a:4d:3e:7a:b6:e5:46:f1:27:fb:
b3:dd:a2:b3:72:ff:36:29:ba:ca:2f:1c:da:fb:7c:20:15:19:
a7:b4:a9:5c:64:f4:0c:3f:7c:8c:d4:74:b1:8a:70:e1:fd:03:
49:8e:cd:80:f9:37:af:83:3d:21:9d:30:0f:11:80:2a:e0:28:
c0:b1:26:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro7AHYibOp2TSV2Dy/dRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjYwNzI0MDEwMDUxWhcNMjYwNzI1MDEwMDUxWjAzMTEwLwYDVQQD
EygzMzI0ZjRiYzlmMzFiNDY4OWJjNzY4MzA3ZTI4ODE2MzVmNTNmZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl8AktT0N0f6HabJ8zBhCm14aF2e
qs4xARFljTyTkYhfe7hHiFONfBUJqtss/YptAa/knQzl7eJXm5b44we5rvjnozh5
HqBoJ9eJST5VYZi+P8Sat068ePZm9cCbICoXHB+OiQxV5+QiCLPnK7bSLs7okKWv
tVbrME4RSOu7odTE4S/szffikx0TvIK12Do3j9K6nnA0Nvjk0hp8S5PGelb8nCgt
siPvo6DyDxBrtp2d/+GZ46mMLUTY6WpDlH9+zjqUD3+cPn3jCY6FywBPbeoGMinh
HV5c0IS63hKYGQa2rFdrnfPE7zVjcncxNlyibYUjfrOLFexoPTzBdbKOYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMk9LyfMbRom8doMH4ogWNfU//FMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCUGJS5n
G9DsS2QdnF2QydVjww3AtlEFcT+jwXW1V+v71zZRaZFNjcHhqVjIrQTYw6ioPJVK
ODUNqPWRMoA+B2MmmvOdJFajGemB2Xgxdjjt0HKt8hxK09xU2WHT9KsTbeQEt0sp
dBA/z/50NmLUipzqxLs+2wzRhKMiUsad9i8SlPggFIuK6szwaaioJFlYkHoO4Jpm
DzqYedVLDCuGdj0cWtbEJO65y9xIJO1FFagP8mMDwaNF0YaweoB6TT56tuVG8Sf7
s92is3L/Nim6yi8c2vt8IBUZp7SpXGT0DD98jNR0sYpw4f0DSY7NgPk3r4M9IZ0w
DxGAKuAowLEm5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:30 2026 by rpki-client