Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: LxGFzGLM0+ga+bxwJHwurq5ERBw+UxWwZVd5vxro9dU=
Subject key identifier: 59:0B:2A:32:DE:B3:F1:6E:CC:BD:97:4C:F2:00:27:07:9A:0D:19:EB
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 01A1352308BC9BCDC89380DDFA34A6FFCD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 16C4
Signing time: Tue 13 Oct 2026 12:00:50 +0000
Manifest this update: Tue 13 Oct 2026 12:00:50 +0000
Manifest next update: Wed 14 Oct 2026 12:00:50 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: YvG8ZTrSY5Mhfb3OcNbRkveuOdL7G/bBhyiostwjTGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:08:bc:9b:cd:c8:93:80:dd:fa:34:a6:ff:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Oct 13 12:00:50 2026 GMT
Not After : Oct 14 12:00:50 2026 GMT
Subject: CN=590b2a32deb3f16eccbd974cf20027079a0d19eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:1e:5d:54:ac:21:75:67:09:c0:ce:c4:a6:
6d:c3:5a:40:dc:18:cd:c9:d6:aa:7f:80:2a:70:f4:
9f:8a:df:1f:c2:3b:aa:99:68:dc:e4:cc:f6:60:27:
2b:53:25:e8:5e:58:5b:c6:9d:65:07:d0:eb:85:b8:
b5:aa:9a:33:a1:45:9f:71:ad:d9:7c:3b:19:52:cc:
22:25:75:73:af:47:3b:a7:57:23:4d:85:bc:d8:89:
92:ac:ac:71:99:16:ad:75:1a:f4:31:a9:28:03:d3:
d0:b5:08:eb:af:72:d4:42:ae:30:98:05:7f:3e:bb:
c4:aa:0a:f9:57:19:f5:39:99:f4:de:d1:0c:ac:7e:
ce:51:a3:54:e7:a1:9b:df:02:82:fd:15:f3:53:f9:
ee:e5:27:5d:29:25:57:cb:65:b5:b7:0d:6b:db:db:
a5:db:2d:d3:89:4e:bb:ee:c1:69:6e:d7:36:50:a1:
14:b9:9a:36:84:e4:5b:77:f1:7d:11:71:c7:b9:c0:
fc:07:a7:5f:9c:6d:0c:19:ac:59:31:0e:f5:4b:27:
91:ec:71:45:de:12:a5:b3:22:5d:ca:de:4e:ec:ee:
6c:7a:e6:c4:e6:bb:ef:0d:7b:31:e1:88:3e:7d:c2:
31:a6:bc:09:70:18:82:bc:34:db:a8:bb:5a:92:db:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:2A:32:DE:B3:F1:6E:CC:BD:97:4C:F2:00:27:07:9A:0D:19:EB
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:44:18:ef:44:05:66:66:9c:3b:49:a1:ce:7a:87:86:9a:e3:
fd:c0:8c:93:48:df:92:ad:16:a5:01:3e:82:75:bd:59:ed:b0:
e0:97:5c:d5:4a:6b:d3:06:70:e8:ae:1a:51:e3:77:ae:e3:6d:
84:58:d5:71:5d:c2:3f:df:8c:a3:37:41:74:da:09:4d:0c:b4:
e1:84:5b:10:f2:f1:ef:84:bb:25:fe:a6:a1:e7:09:19:73:72:
95:17:99:ed:87:fc:de:dd:cb:39:0f:e1:d0:49:f8:f7:7f:84:
62:2d:13:0b:cc:57:c1:6f:46:55:06:48:12:e4:40:70:6c:3c:
22:97:0f:ad:35:e4:ca:b5:bb:43:62:1b:f6:64:26:82:98:6c:
29:71:1b:38:b7:43:23:7e:02:55:8f:23:de:ce:96:fc:2e:48:
f0:68:64:ab:da:a7:5b:8f:09:52:9d:04:ab:53:66:1a:9f:25:
1a:ce:a0:e2:02:f7:76:9c:0c:0a:6a:77:30:96:d5:be:01:c1:
68:84:e0:94:88:f7:9b:7d:a6:51:44:be:21:5c:1e:db:61:8a:
f2:4d:bb:69:52:92:63:ff:a7:ae:14:67:f9:52:e5:c2:60:4a:
35:22:ea:c6:88:ce:62:1a:be:f4:18:e5:45:e9:a2:12:8b:53:
28:3f:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:47:48 2026 by rpki-client