Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: ud0wNnKmdShI0btDGNIrIlTAMLRLodYtlfYoxLA484E=
Subject key identifier: E0:93:3B:4E:E8:EA:91:E6:D4:11:9D:3F:FE:0E:B1:84:04:0C:F4:C0
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019D2628492D8BA763043C1D9948542D17C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 14AA
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: P6VVz5kHwdIPACKFuVOYvFcBFetwNMXC0dxZuS1Ob1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:49:2d:8b:a7:63:04:3c:1d:99:48:54:2d:17:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=e0933b4ee8ea91e6d4119d3ffe0eb184040cf4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:b6:7c:91:18:f9:0c:cd:37:ce:61:a5:c1:
d9:11:bd:21:a9:02:b9:e7:b2:ce:61:73:6f:77:87:
c5:eb:cf:fc:a9:4f:21:4c:1f:c5:e8:47:24:5a:58:
06:6c:66:a1:b2:4d:00:ee:42:2c:8b:c2:16:da:4d:
70:e1:be:9e:b1:38:00:f4:fe:52:55:6b:d3:cb:a2:
c1:89:ce:e1:01:b5:50:0b:14:64:d9:4b:59:93:e0:
00:f3:ae:47:ca:19:94:7c:7a:11:77:40:99:1b:d9:
70:d2:3f:8d:74:d3:ac:cb:6f:0d:48:24:67:db:20:
56:ce:36:7c:92:6c:2a:77:9c:fe:ce:67:6e:9e:72:
a0:29:6e:6a:2f:50:6e:11:1f:ab:e8:b3:66:34:bd:
94:2a:d0:38:c9:95:6f:27:32:35:f2:32:34:e8:29:
da:46:9f:ed:12:c5:9f:1c:c6:d5:93:4d:9f:69:b9:
e7:a3:db:40:e7:dc:4a:59:25:ec:40:06:8c:dd:c7:
61:f3:d4:d4:1d:4a:aa:b1:28:f8:90:7f:e1:57:38:
a0:90:08:a7:49:bb:aa:6b:1c:d3:2f:33:d4:f0:7f:
7e:23:d5:80:b8:3d:05:8b:bd:f1:6d:99:47:cf:1a:
1a:16:0c:f2:2d:0e:23:42:0b:8b:57:12:7f:a0:07:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:3B:4E:E8:EA:91:E6:D4:11:9D:3F:FE:0E:B1:84:04:0C:F4:C0
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:c1:9b:46:cc:be:7b:7b:00:e0:ac:9e:69:f5:c5:2e:50:
fb:a4:1a:8a:c1:6a:17:db:cd:65:84:89:59:01:6a:96:cd:7a:
c6:80:a7:9c:8a:7d:5a:f0:f2:be:58:2a:0a:8d:c6:47:bd:4c:
0f:80:5f:50:bb:4e:45:96:36:00:7f:e8:c6:83:18:a8:75:da:
34:79:d4:98:2f:c6:17:a5:2a:83:98:06:27:fb:cc:ae:42:b9:
8a:01:33:d9:00:be:f2:f1:4e:78:28:65:c1:24:4e:49:47:a5:
fa:a5:5c:df:71:14:0b:7e:1a:76:31:44:c6:f4:d8:9c:19:cb:
1d:5e:da:6a:86:d0:4d:48:57:f1:29:48:5c:c0:18:0c:9b:9b:
a6:51:6f:33:2f:e7:bc:7e:b5:27:ad:bd:30:20:5d:6f:85:cd:
17:8e:9c:e0:ae:0f:23:b9:65:dd:0f:fb:fc:fe:57:a7:79:64:
93:36:a3:29:38:d9:81:45:c8:c2:c6:b5:9b:49:85:1b:1d:fc:
be:4c:e2:05:2e:0a:a9:95:bc:ed:31:d4:e5:43:d7:e3:34:aa:
6c:a5:93:64:09:0a:cf:c6:4b:d0:87:ec:28:d8:d5:c5:93:15:
1e:12:1d:aa:02:10:97:91:c8:ed:c4:e9:e7:cc:6b:62:5d:2b:
ed:4d:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:16 2026 by rpki-client