Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: ex1jzWS8J0v1QzsW2iYWjjUDx94dzLz5sWkU5GmKC8I=
Subject key identifier: 17:74:A6:32:BF:BD:36:FF:20:E4:D7:89:A3:A1:DC:C1:E4:3B:73:B6
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 01A0E9D26910A005FD0742DEC2AD7DC2B659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 169D
Signing time: Mon 28 Sep 2026 21:01:15 +0000
Manifest this update: Mon 28 Sep 2026 21:01:15 +0000
Manifest next update: Tue 29 Sep 2026 21:01:15 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: sQrrMFMPLizcQOfLrCXHBUDOij/SSeMhFt9ZTxDZTyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:69:10:a0:05:fd:07:42:de:c2:ad:7d:c2:b6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Sep 28 21:01:15 2026 GMT
Not After : Sep 29 21:01:15 2026 GMT
Subject: CN=1774a632bfbd36ff20e4d789a3a1dcc1e43b73b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:a4:1e:40:37:ca:ee:c9:14:c6:1d:c5:7c:
47:5f:0f:ad:6a:46:bc:1a:b6:fb:d7:9a:6c:ef:fc:
87:8a:64:5d:b9:a3:ee:2a:06:1d:01:03:3d:c3:65:
a5:3a:35:15:ff:91:d1:6b:ee:54:cf:20:08:ca:ae:
32:85:f8:10:19:fa:0a:0f:7b:4a:4a:cf:cf:79:02:
44:d0:1a:05:0f:89:0d:3e:8a:3e:36:6c:89:94:1f:
eb:93:19:90:81:03:30:77:8b:28:72:06:74:27:e6:
53:f0:27:cc:8d:53:b8:7f:4a:f8:60:f9:a5:40:9c:
37:a1:cb:4d:60:3d:57:0f:e9:5d:da:94:1c:e2:11:
44:4f:70:c7:a6:63:b0:1e:a6:f7:9c:ac:24:9b:52:
e2:2b:f9:d6:dc:6f:e9:90:b5:3c:f9:91:32:8c:4b:
f4:80:a8:16:c3:a8:11:2c:62:6d:83:13:14:66:1c:
43:f9:4e:2a:de:ab:8b:30:09:84:00:4e:eb:75:02:
dd:b9:f4:e6:b2:af:e9:7e:e8:ca:24:7e:3b:46:da:
fb:55:b9:a0:68:3c:4c:da:b5:3e:d6:ef:8a:f3:b0:
92:4f:60:13:6f:7a:2e:11:3b:bb:74:69:f5:8a:51:
c0:9c:b2:98:92:80:c6:e2:57:d1:07:89:f6:70:32:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:A6:32:BF:BD:36:FF:20:E4:D7:89:A3:A1:DC:C1:E4:3B:73:B6
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:c4:e5:ed:57:1c:c4:7b:fa:43:ae:b9:a2:be:1c:de:57:
7e:c0:83:9f:3a:7d:b5:85:34:bd:3e:81:65:ba:09:c9:fd:1d:
6b:c7:a1:b0:e9:5d:7a:7a:d9:58:85:fe:41:e0:03:f9:65:e0:
a5:f7:a7:8d:12:3a:bb:be:5d:5f:a9:f3:78:c4:2e:60:bb:6b:
e8:30:16:68:7f:04:82:86:22:02:59:47:40:ae:db:c1:3f:18:
86:a0:b3:00:23:9e:f0:ab:d2:01:e7:22:57:32:d6:a1:47:b6:
69:c3:76:a7:1f:69:5b:df:9f:44:93:c2:b4:b5:de:73:29:11:
1e:ac:18:65:2c:5e:0f:a0:f5:02:cd:65:d1:c4:d2:a4:7d:6c:
8a:fc:e8:45:66:60:10:36:50:b7:f3:1e:71:43:33:6a:23:ba:
84:ac:bc:19:fd:fb:7f:85:bf:89:d6:c5:22:76:7d:cb:eb:65:
44:c2:aa:45:85:d2:f2:ee:42:be:4c:24:bb:f4:81:11:7a:ac:
af:48:b5:3c:07:af:ef:a0:e7:26:e0:44:c5:3e:87:54:66:df:
ad:4e:d4:e8:4d:e3:c4:05:22:69:6e:ed:6e:9a:53:69:fc:82:
0b:21:6e:2f:03:ca:d5:d9:50:08:17:f7:21:e1:a9:04:4c:36:
a9:77:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:50:08 2026 by rpki-client