Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: Z7QuDwzdqfGBGqN15P0TpRG+k1p3YHqCYLF/CpGzfZo=
Subject key identifier: 19:F5:4C:1C:DD:D7:6C:79:B3:1C:85:31:AD:8E:B8:14:47:2C:A2:6B
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019D9BF5BA9483F1F7855FD38AA0992C62D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 14E7
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: CAIgrsgmtF5/XnYNwhcdmiMYdZPeYiPOtGkspk5KpKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:ba:94:83:f1:f7:85:5f:d3:8a:a0:99:2c:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=19f54c1cddd76c79b31c8531ad8eb814472ca26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:ca:97:ad:5e:b8:e2:ef:63:5c:48:78:b6:
fe:d5:87:1d:78:29:e0:31:8c:d6:d3:b6:1b:d7:4b:
a4:67:e4:3d:d2:bc:35:a0:14:8c:7d:d6:8b:95:1c:
9c:04:ff:0d:49:a6:b3:9c:0f:2a:e1:c1:77:7a:07:
9e:85:03:78:6e:5b:a0:80:9f:4e:a5:c3:88:da:da:
f3:71:e3:ae:01:e7:ad:a6:ec:5d:67:7f:d2:47:37:
b8:dc:4c:69:d7:ac:ea:50:ff:1a:13:b7:23:18:84:
52:5f:fa:88:17:de:b1:45:dd:76:c7:ed:53:d9:25:
f2:98:ea:6d:4a:24:97:f0:2f:8f:35:bd:27:e2:c2:
d9:94:4e:d2:4f:8c:4f:6f:90:c0:8e:f9:12:0c:82:
fc:b2:f1:dc:db:85:18:e4:aa:d5:b5:10:f5:9e:fe:
3e:b7:a5:f6:06:73:42:bd:2a:7e:72:b6:88:d6:e3:
d0:ca:ba:5f:ef:d3:74:3a:4a:e3:bf:41:5f:f8:2a:
42:2f:10:db:28:7f:26:62:c1:52:c4:fc:68:ed:2f:
cd:ce:a3:ca:99:b5:2b:f0:13:9d:8c:8f:f9:16:ef:
81:7d:76:97:72:52:56:6a:b5:b6:19:ba:b6:79:06:
6b:f9:ce:ac:00:c0:38:9e:98:4c:31:9b:ea:6a:49:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:4C:1C:DD:D7:6C:79:B3:1C:85:31:AD:8E:B8:14:47:2C:A2:6B
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:d6:98:f0:1b:9a:c8:6f:55:29:a0:23:d5:a5:a4:9a:39:
47:7c:2d:e6:6b:54:85:c2:84:f4:14:ce:cc:00:74:b5:e0:ed:
33:a8:ce:de:46:f8:f9:dd:f9:7f:ac:b6:43:17:12:75:49:1e:
b4:6b:e5:fa:5c:96:93:e0:58:a2:ad:c2:40:0d:a7:24:1e:ff:
55:8b:56:99:28:d1:fe:4d:99:9d:5b:dd:3d:b9:d9:d2:20:97:
e4:5c:f4:c1:b4:38:9f:a8:bd:65:2b:f7:89:93:48:84:67:c9:
4b:ef:76:67:30:6c:44:66:57:b9:d2:45:6f:75:0c:52:ca:d7:
09:f4:30:05:fc:8a:f6:00:dc:14:17:4b:1f:42:f1:3a:8e:1a:
2a:05:4b:43:4a:02:65:6d:0b:fe:c7:fc:35:3d:d0:57:de:b1:
80:e2:bd:59:a1:62:e4:96:85:c8:92:b9:97:8f:50:47:a4:26:
db:8f:c2:57:71:1d:ea:e5:d6:12:e5:59:69:61:d8:7c:29:0a:
cb:1e:3d:bc:ed:9d:17:ff:59:9d:d5:6d:7d:b3:c1:21:7b:64:
55:0f:89:bd:65:5e:15:c6:cf:20:8b:00:10:ba:a4:d2:da:00:
c1:8b:9f:1b:7d:a3:da:4e:64:34:3d:72:3c:6d:33:c1:9e:24:
be:54:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:01 2026 by rpki-client