Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: ENNIPt0epTJzRF5VTmEdTUAYg0NpryfT8Umg1IbLSj4=
Subject key identifier: 0E:5C:5A:E9:56:DA:CF:35:3D:E4:F3:7A:9B:43:EE:42:74:3B:A5:FF
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 01A0DCBC317FC293D31893222040FF674933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 08:01:55 +0000
Manifest this update: Sat 26 Sep 2026 08:01:55 +0000
Manifest next update: Sun 27 Sep 2026 08:01:55 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: vsALr7DJPC+NiTPeo97x/UJVmzpIXyutyNvkD4DxrxI=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:31:7f:c2:93:d3:18:93:22:20:40:ff:67:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Sep 26 08:01:55 2026 GMT
Not After : Sep 27 08:01:55 2026 GMT
Subject: CN=0e5c5ae956dacf353de4f37a9b43ee42743ba5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:56:5a:17:fa:73:89:6d:b1:b2:44:da:6f:
84:4e:70:96:8f:79:90:aa:ee:69:c6:95:db:d5:4e:
12:83:a9:64:bd:ea:7b:8b:83:f0:5f:5b:62:17:8d:
3f:56:cd:2d:78:e4:75:19:a6:93:cb:49:eb:60:71:
60:5b:7f:df:ab:4e:e0:75:8b:87:2a:9d:6e:7c:bf:
79:31:3c:ff:67:ab:62:bd:f7:03:e6:9d:ea:bb:76:
4e:2a:34:10:ca:d7:fd:32:ca:5e:8a:d5:da:3b:35:
4f:74:71:c6:70:7d:72:6c:fa:64:04:18:ca:dd:57:
de:9f:09:2f:01:4a:38:6a:e6:c7:80:c1:62:df:12:
42:79:1a:80:10:74:b2:d2:bc:5d:c3:e7:c4:d5:d2:
31:ad:2c:2a:7d:17:c6:49:06:c5:14:92:63:b1:2b:
bf:52:05:ec:bc:fa:4c:63:16:29:3c:c9:9a:56:7d:
5c:4d:40:19:46:d0:70:22:6a:b2:35:b6:7a:0b:f1:
54:00:36:b5:a8:9b:2d:41:0f:d5:2a:4d:98:9c:33:
a1:47:3c:51:7c:97:00:37:c6:86:92:8c:13:42:ff:
ce:5c:2f:70:36:82:85:e0:76:ad:97:8a:62:7d:45:
71:9b:77:06:23:a8:22:fd:6c:10:55:fb:78:33:87:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:5A:E9:56:DA:CF:35:3D:E4:F3:7A:9B:43:EE:42:74:3B:A5:FF
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:23:67:14:c0:d7:c7:bb:a9:bf:97:f3:3f:36:49:e5:d1:
79:ce:c7:c7:10:bd:65:ab:e8:dc:f7:6e:0c:2e:d8:6a:99:92:
ea:dc:eb:ff:38:66:25:26:4e:f3:0b:8e:92:d4:28:54:96:7b:
48:b7:da:33:bf:09:a8:ca:24:1c:5e:1d:e3:bd:75:5f:20:90:
87:87:ea:4b:5c:c7:6b:df:70:83:f7:d5:dd:e8:70:07:66:57:
c8:7c:f7:f9:71:a5:6b:7c:c6:45:f4:21:6f:0d:78:ec:0f:1d:
0c:fb:8f:b8:c8:5f:0e:62:56:0b:8a:5b:bc:e8:69:0f:11:c3:
5b:27:4a:f5:88:d9:d1:d0:e0:35:7d:82:22:01:12:57:96:3f:
3b:3a:7c:a4:2f:8f:c4:16:17:f4:db:53:97:dc:14:6a:88:84:
4d:61:bb:c1:4c:07:3b:b1:54:4b:e3:a3:78:06:85:46:2c:6c:
0a:9d:54:46:34:4e:9a:1c:11:dd:4b:7c:56:f3:7c:38:db:63:
ea:5d:2c:2d:2d:54:49:15:e1:bc:e9:2e:7e:d2:2e:67:a1:ce:
78:fd:36:0d:3a:04:44:4d:d9:e2:dc:75:ab:f3:e7:35:61:b0:
6c:1b:da:7b:d8:9b:18:db:9b:f9:81:95:37:ec:47:85:53:12:
11:b7:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:08 2026 by rpki-client