Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
File: GSx4GHPqSt3idTiBHLaqfhvATxs.mft (raw, json)
Hash identifier: pysd1j6avEtgcg0U3gTMqiCyhGTYpR0yria8+9S3qPg=
Subject key identifier: 8B:85:82:DC:A3:73:B2:96:71:22:C2:17:95:81:A5:82:33:6B:6C:84
Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Certificate serial: 019D3789982D876B0797F30BA988DED2D66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
Manifest number: 014E
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: GSx4GHPqSt3idTiBHLaqfhvATxs.crl (hash: H9Z9eMISn22n4EK+zEsLwhi6Sz8PZJ9S823ypfMZB2A=)
2: hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa (hash: bh4oVJdbvK/LvMbDuYGxDed08n+D8/Frk/yYfcwWr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:98:2d:87:6b:07:97:f3:0b:a9:88:de:d2:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=8b8582dca373b2967122c2179581a582336b6c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:05:a7:54:d0:36:c7:77:9c:06:a8:ba:80:
93:6b:65:b1:94:8b:76:9d:d6:09:0d:75:92:fc:2c:
e9:64:68:df:a0:4f:4a:14:fe:59:8e:10:b9:da:86:
b1:62:26:d8:f4:dd:36:9b:b5:47:b4:ec:4b:fc:c2:
f1:cd:c3:3c:42:21:7f:d3:35:2b:c7:95:b1:4d:27:
27:99:c2:66:fc:4d:17:89:55:e7:59:c7:0f:e7:cc:
32:7f:12:2c:20:c6:0d:0f:22:38:ec:af:9e:04:45:
ae:ec:d2:42:3d:ff:82:47:b2:a1:ad:f9:ed:d4:df:
17:94:71:5e:9d:d2:1a:61:92:ef:07:0b:74:a2:b4:
f5:eb:04:1f:a6:a1:ca:95:fc:47:70:9c:ea:d1:07:
b1:a5:77:23:86:07:de:fe:1c:b5:31:87:23:d2:bf:
f6:95:b3:77:6a:0d:09:7a:00:d3:17:1d:19:7d:6b:
92:34:2f:47:47:6d:2d:82:e1:b9:ee:2f:22:16:90:
f4:cd:ca:e1:0c:9c:fa:8b:5d:05:c4:c4:ed:14:d2:
c3:83:3a:06:77:4a:06:8a:6a:d2:d8:2a:25:f6:01:
dc:f1:63:92:4c:37:4b:80:32:4a:5d:a9:b3:07:7f:
9b:2c:76:4f:e6:bd:ea:0d:e9:02:45:3e:fa:63:e7:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:82:DC:A3:73:B2:96:71:22:C2:17:95:81:A5:82:33:6B:6C:84
X509v3 Authority Key Identifier:
keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:50:9e:eb:b8:27:90:4e:f2:9b:2a:71:05:4b:9c:c0:63:
9e:73:32:e0:e2:b0:86:92:96:f2:4a:8a:e7:ac:4e:fe:17:14:
04:0d:bc:5f:89:38:c6:76:16:1f:70:b9:7c:32:fd:00:2c:d6:
85:40:ef:18:7b:2e:0d:3e:0a:4a:01:3a:6c:99:5b:a2:01:36:
81:69:ac:d8:6c:23:ff:bd:ab:56:b6:57:b1:b0:96:56:55:25:
34:fc:2a:f2:91:14:47:87:68:d6:ec:88:e8:dd:21:13:73:7a:
5c:c6:83:a3:d6:75:71:c5:41:d1:e3:79:35:e2:17:b5:76:9c:
7f:1d:f3:28:86:b0:54:82:df:5d:b6:bf:75:08:54:7b:5c:8c:
96:d2:77:79:04:f0:e3:42:a8:ab:3d:f7:0b:c5:10:a8:98:51:
90:4d:c9:ed:b2:94:e9:d4:d7:d2:fe:54:55:8d:fb:a0:36:3f:
17:87:10:67:d4:2e:ae:3c:5f:3c:c7:00:b5:ed:a1:41:13:ce:
4b:e0:86:76:41:fd:b1:d8:35:de:aa:a1:60:26:fc:0e:7b:d5:
c3:7a:49:9e:a1:69:5a:ad:ca:a6:e5:6e:6f:5d:bc:9d:75:89:
eb:e2:20:f0:37:ca:aa:4c:a9:ef:47:be:1c:6c:ab:21:84:3f:
22:5e:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client