Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: +K/h8ayCAwdCyl89aic5aQXO4aEC4YyrGlo0VQ4LhTU=
Subject key identifier: D7:40:B3:E7:CD:E9:23:85:AC:2A:1D:ED:47:74:27:8C:72:A3:8D:27
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019F927F6FD0D120430D7E4EFA925DD16468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:52 +0000
Manifest this update: Fri 24 Jul 2026 05:00:52 +0000
Manifest next update: Sat 25 Jul 2026 05:00:52 +0000
Files and hashes: 1: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (hash: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: yt6Skek+xCfnRd2HJv23NNtHoFvAEJwdLCRSaGxm5/4=)
3: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (hash: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:6f:d0:d1:20:43:0d:7e:4e:fa:92:5d:d1:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Jul 24 05:00:52 2026 GMT
Not After : Jul 25 05:00:52 2026 GMT
Subject: CN=d740b3e7cde92385ac2a1ded4774278c72a38d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:72:dd:39:b3:b5:c5:8a:31:08:de:b4:0e:
c4:78:41:f6:ae:6a:a0:2c:14:bc:fe:cf:8a:b9:d2:
b5:d6:61:b4:cf:8e:22:f9:e0:2c:13:aa:eb:ad:98:
01:fb:e4:b2:13:e2:8d:0c:e2:a9:5c:97:ca:8b:9f:
bd:0d:12:ff:e0:e8:bf:21:30:c4:88:bf:fd:76:92:
e7:d2:83:4f:58:e2:cc:ea:33:ca:25:76:01:c1:d2:
74:d1:0e:3a:22:58:9e:bc:f3:0f:72:18:f7:75:6f:
6f:46:eb:20:d4:3d:76:03:5a:0a:23:2d:42:d6:12:
95:42:62:05:f0:05:3b:97:66:c0:f3:1f:84:dc:d2:
b4:6b:78:85:11:0e:db:2d:42:b9:f2:78:98:76:27:
96:9a:4b:7c:31:a8:6c:a2:62:61:0c:d4:30:d3:9d:
28:20:3e:dd:80:c4:1a:26:ba:be:7b:54:fc:29:a2:
9e:10:e4:06:d8:c9:37:2a:bf:bc:9c:a4:e9:30:c8:
2a:a0:52:33:74:20:c6:43:b0:a5:5a:9b:59:7a:2f:
fc:d3:58:5c:2b:05:04:12:81:ba:f2:5e:d4:63:83:
ef:76:75:93:fc:b6:d9:c7:22:af:72:9f:aa:3f:05:
e1:7a:aa:c0:a2:41:d4:f2:d5:d8:99:00:f0:0b:f2:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:40:B3:E7:CD:E9:23:85:AC:2A:1D:ED:47:74:27:8C:72:A3:8D:27
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:86:b2:a1:bd:9b:55:ac:00:22:1e:6d:8a:7a:9e:7d:25:47:
96:da:29:ac:4e:bb:35:32:04:b9:b6:dc:bb:7d:d9:86:f1:e4:
e9:e9:fe:2e:47:63:93:8c:61:ae:37:4a:c0:7d:e4:72:4f:fa:
62:a2:75:7f:4d:d7:a3:af:f0:4e:de:70:46:5a:1d:80:db:5a:
19:ca:ef:0b:05:0f:e6:e6:3b:75:fc:b3:66:73:cb:eb:55:81:
c9:69:22:99:92:37:28:a6:25:62:f6:09:9c:41:60:f2:9d:ff:
06:56:50:a2:7e:f5:5d:c4:d5:42:fe:6f:8b:11:62:91:01:31:
46:85:9d:89:d5:cb:df:57:73:cf:e3:bc:cf:60:b0:2e:0d:5b:
c7:cf:53:4d:02:3b:af:b8:dc:6d:40:82:b4:97:c9:d1:88:77:
e0:24:9a:4f:50:17:35:45:75:6b:98:02:2f:88:5a:c0:bc:c2:
8f:af:cf:af:53:8c:74:d0:8f:1b:eb:52:78:5b:37:41:29:0c:
97:e3:06:b4:62:ad:91:05:3f:f3:3b:c6:45:15:e5:27:e0:a8:
45:0a:d9:40:a4:be:9f:1a:cc:d6:2a:2e:e9:5d:64:63:85:19:
da:de:29:da:91:aa:ea:f1:e3:ed:89:45:9a:b7:22:79:d4:43:
64:05:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:20 2026 by rpki-client