Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
File: GSx4GHPqSt3idTiBHLaqfhvATxs.mft (raw, json)
Hash identifier: m+sE31dlf3VgI4jFaP5eFgd0d7dzYtetjBbdOAK4YAI=
Subject key identifier: E9:24:C3:3D:5F:6A:50:7C:01:24:ED:34:8F:5D:EA:F0:0D:C0:B4:19
Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Certificate serial: 019D33ACA8BADC9D3A1BC8400B7E135EC919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
Manifest number: 014C
Signing time: Sat 28 Mar 2026 09:00:46 +0000
Manifest this update: Sat 28 Mar 2026 09:00:46 +0000
Manifest next update: Sun 29 Mar 2026 09:00:46 +0000
Files and hashes: 1: GSx4GHPqSt3idTiBHLaqfhvATxs.crl (hash: 7SnAbt2MsDtLaAP6wLgWfAEX4Su2gaYbI/tbvHn+woA=)
2: hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa (hash: bh4oVJdbvK/LvMbDuYGxDed08n+D8/Frk/yYfcwWr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:a8:ba:dc:9d:3a:1b:c8:40:0b:7e:13:5e:c9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Validity
Not Before: Mar 28 09:00:46 2026 GMT
Not After : Mar 29 09:00:46 2026 GMT
Subject: CN=e924c33d5f6a507c0124ed348f5deaf00dc0b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:20:a5:fc:1b:61:a3:2d:95:99:4b:63:ec:
65:14:4f:57:7e:eb:f9:52:bd:7d:9f:db:4e:1d:07:
dd:24:a1:d0:82:70:bd:a8:af:a1:b3:3a:ed:65:bc:
db:4b:30:7d:76:4e:dc:a9:56:55:9b:e4:af:9f:62:
3f:21:27:c1:42:7e:f2:56:08:98:09:ae:0c:80:95:
f8:06:04:ff:87:55:30:87:55:75:8d:65:94:8e:09:
c6:aa:09:cb:8a:cc:b8:11:2d:fd:b0:07:70:ce:7c:
98:b2:af:b4:a1:ed:d9:db:de:f1:d4:9e:5b:9f:e6:
2f:c9:5c:48:0c:b2:f6:a5:3f:24:52:c6:76:04:db:
92:ab:7a:c4:88:ab:48:20:c1:33:60:89:ae:77:ae:
a2:f1:a9:a1:66:99:df:8b:42:55:e6:47:e3:b7:27:
73:06:69:8c:c3:91:46:65:55:ab:da:a0:7d:24:79:
ad:6e:52:b2:28:0b:e6:03:a3:e4:07:22:ae:06:11:
41:79:a9:f1:a7:1b:b7:94:2f:98:f4:c4:68:8b:75:
0f:65:76:c2:58:3a:5d:08:98:ec:bf:bc:69:4d:72:
0d:bb:18:ec:8a:f4:31:a9:18:6d:90:a6:1e:ac:3c:
33:43:02:03:6f:24:a1:fa:52:5f:15:94:6c:f3:1e:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:C3:3D:5F:6A:50:7C:01:24:ED:34:8F:5D:EA:F0:0D:C0:B4:19
X509v3 Authority Key Identifier:
keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9f:05:de:ec:d9:ad:81:be:47:21:27:71:6b:9a:7d:4e:2a:
9c:fc:8f:af:90:87:33:58:b0:34:7a:6a:a2:22:c8:27:38:6b:
db:d9:6c:cd:6a:63:dc:e1:ae:bb:b6:79:8f:cb:60:c1:0b:0f:
c1:44:8f:75:b3:18:11:05:15:9e:01:7a:ea:c2:87:74:60:1a:
88:7a:d1:4e:a8:3a:82:d8:8d:f7:5d:33:11:c9:b2:16:36:89:
3d:7a:b9:e3:2b:05:47:b0:cd:d6:a6:bc:bf:eb:2e:1f:79:da:
db:43:23:57:02:97:ef:8a:b3:8d:4c:c0:fe:ff:e0:c8:23:03:
32:67:3f:69:82:38:f9:31:38:4b:e7:62:51:11:89:8c:32:30:
1c:de:0f:c9:69:ce:f6:dd:6a:95:1a:9d:40:f5:d4:a6:97:4e:
c1:30:13:63:63:d5:d0:3f:a8:69:fd:34:c0:fa:72:3a:29:5a:
73:f2:60:00:df:2b:f2:ca:1c:5d:59:78:a4:8a:16:3a:b0:53:
de:da:d2:0a:24:21:95:90:ba:46:ec:e6:b1:e7:cf:9e:f2:e2:
b9:3d:62:e0:28:a6:1e:91:f7:cf:50:de:1b:f6:89:ab:f9:32:
4f:81:a0:03:ae:4f:fa:d9:ce:02:34:ab:86:87:80:0c:3e:0e:
a5:a2:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:04 2026 by rpki-client