Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: 4hSMLl9NFrVYSld6nRULygL/V4uqbtY4BAN3mpQ+Ctc=
Subject key identifier: 16:F4:33:DA:12:55:1D:6A:00:57:46:D6:A4:FE:C4:A0:9A:21:CB:19
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019E1F4785B6C8CB7B2B8A218667B9B43B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 152B
Signing time: Wed 13 May 2026 03:00:41 +0000
Manifest this update: Wed 13 May 2026 03:00:41 +0000
Manifest next update: Thu 14 May 2026 03:00:41 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: q12/AqGz2Z5+emZHaQ2+gtuhjUhTtJ1e/GdD6jsGljA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:85:b6:c8:cb:7b:2b:8a:21:86:67:b9:b4:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: May 13 03:00:41 2026 GMT
Not After : May 14 03:00:41 2026 GMT
Subject: CN=16f433da12551d6a005746d6a4fec4a09a21cb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:6a:81:f0:68:f7:79:22:25:20:05:5e:89:
a1:71:f4:bc:d2:25:db:b9:5e:0a:35:30:c1:c3:d8:
62:db:8f:ee:f1:e1:60:6d:c8:e8:9f:8c:4c:1d:c5:
a0:1f:ec:49:cb:c4:d4:09:fe:e3:9f:a3:bf:bf:9e:
dc:1e:a0:98:8e:90:f5:38:48:5c:78:01:cd:be:37:
36:9c:93:97:59:14:f8:52:94:6d:ff:64:e7:62:c2:
1c:24:73:f7:c7:e3:5d:32:22:3a:e9:89:0b:dd:4b:
ab:a1:56:09:6b:be:8b:e7:85:55:2f:c3:33:a3:ec:
7c:f3:ff:2a:be:61:32:9a:b5:54:33:75:01:68:7f:
ef:49:24:ec:2d:71:81:dc:c9:be:e0:34:4f:21:be:
70:84:89:67:16:86:e4:5e:f5:61:de:7d:5d:49:9e:
d2:fc:7a:8b:a1:f5:63:ac:38:52:0b:3e:28:a4:e4:
80:45:70:09:d3:92:ff:ab:eb:ec:80:9b:63:84:38:
ec:11:59:56:86:35:73:72:1b:d0:57:8f:73:bd:86:
4f:50:4a:87:c9:78:54:2a:18:37:60:a3:a1:dd:13:
94:09:b8:01:c4:e5:f4:c8:a2:75:9e:58:98:5b:ce:
11:1a:83:6e:42:a8:82:8d:5c:6e:94:c2:e8:11:e1:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:33:DA:12:55:1D:6A:00:57:46:D6:A4:FE:C4:A0:9A:21:CB:19
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:56:16:dc:92:8e:ab:e3:c3:79:a6:e9:46:d8:53:0b:61:
c7:9e:2b:e8:a0:dd:98:be:82:a3:62:a1:cd:dd:ca:f5:6a:f5:
85:64:66:c5:78:df:a9:32:a2:32:42:04:30:11:99:31:23:1a:
6c:a8:d0:86:3f:54:25:f4:4b:3b:8e:58:ed:02:ae:62:9a:a1:
eb:af:96:85:6f:d1:0b:f1:08:86:d7:90:93:ac:54:dc:af:d8:
80:2c:0a:ad:41:af:24:37:db:f8:88:ef:8e:93:f1:4a:b1:71:
ab:7a:7a:a0:71:27:fa:83:d9:4a:ba:03:6c:0d:0c:35:24:61:
d8:58:7f:cf:61:78:99:58:99:06:1f:cb:7e:fc:31:1d:87:24:
b1:6d:a1:6b:53:9c:ee:40:64:73:e9:04:5d:74:f5:d2:db:f2:
2e:c0:91:7e:28:48:dc:5a:18:ff:a9:1f:32:58:fc:bc:14:99:
c7:3d:37:44:94:3f:b8:47:27:28:62:3f:d3:60:1b:11:0f:81:
0e:02:cf:1d:48:e9:ad:54:37:27:7a:d2:7a:8e:75:51:e6:89:
4e:ad:40:58:f9:50:7d:1e:55:4b:41:ac:3f:24:2b:c2:d7:3f:
a7:95:6e:9b:04:68:1f:a9:a0:51:e6:27:91:db:29:5a:a0:36:
72:3f:df:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR4W2yMt7K4ohhme5tDtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjYwNTEzMDMwMDQxWhcNMjYwNTE0MDMwMDQxWjAzMTEwLwYDVQQD
EygxNmY0MzNkYTEyNTUxZDZhMDA1NzQ2ZDZhNGZlYzRhMDlhMjFjYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsphqgfBo93kiJSAFXomhcfS80iXb
uV4KNTDBw9hi24/u8eFgbcjon4xMHcWgH+xJy8TUCf7jn6O/v57cHqCYjpD1OEhc
eAHNvjc2nJOXWRT4UpRt/2TnYsIcJHP3x+NdMiI66YkL3UuroVYJa76L54VVL8Mz
o+x88/8qvmEymrVUM3UBaH/vSSTsLXGB3Mm+4DRPIb5whIlnFobkXvVh3n1dSZ7S
/HqLofVjrDhSCz4opOSARXAJ05L/q+vsgJtjhDjsEVlWhjVzchvQV49zvYZPUEqH
yXhUKhg3YKOh3ROUCbgBxOX0yKJ1nliYW84RGoNuQqiCjVxulMLoEeE8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb0M9oSVR1qAFdG1qT+xKCaIcsZMB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzlWFtyS
jqvjw3mm6UbYUwthx54r6KDdmL6Co2Khzd3K9Wr1hWRmxXjfqTKiMkIEMBGZMSMa
bKjQhj9UJfRLO45Y7QKuYpqh66+WhW/RC/EIhteQk6xU3K/YgCwKrUGvJDfb+Ijv
jpPxSrFxq3p6oHEn+oPZSroDbA0MNSRh2Fh/z2F4mViZBh/LfvwxHYcksW2ha1Oc
7kBkc+kEXXT10tvyLsCRfihI3FoY/6kfMlj8vBSZxz03RJQ/uEcnKGI/02AbEQ+B
DgLPHUjprVQ3J3rSeo51UeaJTq1AWPlQfR5VS0GsPyQrwtc/p5VumwRoH6mgUeYn
kdspWqA2cj/frQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:35:08 2026 by rpki-client