Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: +7AIx2Hwoc5BLNTYf+4PdZ+PFAShlZeXF/DH+J3FFK4=
Subject key identifier: 98:5A:E4:46:A8:27:55:F2:F9:AC:97:D6:04:0C:FE:2C:31:4E:2C:7C
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019D378939B5A0CA1413BFAB28ACFF96FC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 14B3
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: ymlg2colrH8qKu6Jif1Euu7EO0Nz7SQvvRn+BdPN5o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:39:b5:a0:ca:14:13:bf:ab:28:ac:ff:96:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=985ae446a82755f2f9ac97d6040cfe2c314e2c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:16:ac:27:99:78:d7:f6:55:5c:b1:b0:06:
9c:3a:00:f5:f4:5e:d4:b6:ac:c1:95:73:c5:3c:ec:
2b:11:a4:be:99:46:87:dd:70:55:67:af:15:0d:4c:
db:27:06:d1:68:58:1a:09:7a:d0:1e:16:83:c5:85:
86:06:38:f5:ee:dc:f0:a2:03:99:7c:48:34:95:67:
6c:1a:8e:d4:0c:de:3f:de:32:63:f1:b7:93:55:34:
0d:f5:8b:d6:38:ee:12:66:80:29:53:d5:7c:6e:34:
62:a8:65:4d:89:26:cf:a6:ab:58:f8:2a:ea:4d:9c:
c1:05:db:9e:91:0b:67:bb:f3:da:75:87:56:3f:16:
bc:ee:d6:54:3b:e1:e6:c3:c4:09:ce:b7:92:7f:87:
62:97:59:fc:3e:79:90:95:fd:c5:0b:20:3a:2a:91:
00:f7:bb:8b:08:95:27:7e:fb:e6:e9:9b:49:bc:e6:
e0:35:60:f4:3f:92:2f:d0:21:c7:d5:79:5d:0f:54:
7d:4c:8f:92:da:38:ee:6a:cc:07:26:2a:47:10:96:
79:d2:b0:e1:b9:94:41:ea:a0:f2:88:37:43:98:3f:
5f:c7:db:5f:e7:54:85:ac:92:4f:2d:be:bb:8f:67:
9c:e9:33:1e:fd:e8:8a:34:aa:0a:0d:24:ee:53:13:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:E4:46:A8:27:55:F2:F9:AC:97:D6:04:0C:FE:2C:31:4E:2C:7C
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a2:de:a9:47:9b:8c:16:a3:08:f4:58:6c:97:5e:01:19:ea:
3a:61:9b:18:4a:e3:76:01:b2:0b:ea:aa:8e:eb:e1:77:ee:b2:
6e:66:df:2f:33:02:b9:52:97:c1:45:77:f7:06:1c:1d:b5:83:
be:43:52:58:e4:35:28:74:a2:a6:0e:05:d3:fa:98:de:4d:b1:
4e:30:59:05:d9:f2:0f:c4:c4:a5:3a:55:a9:54:6c:48:dc:17:
6f:1a:10:82:23:df:6a:34:44:71:16:b9:df:9d:45:1f:38:4d:
b2:ec:1f:57:1a:e8:49:c2:cf:56:d4:0d:7a:2e:94:3f:18:df:
51:f7:7e:36:6f:77:62:b6:72:64:09:cd:65:fa:bf:a5:c7:f3:
1e:ae:9a:be:c7:dc:1b:8e:c2:4c:62:ab:67:1b:63:ff:68:84:
a1:8b:91:d0:7c:db:66:cd:dc:84:75:e7:c4:89:87:a5:94:f2:
65:8f:d9:f1:70:32:17:ae:9b:30:91:eb:13:e5:eb:ee:3a:61:
48:8a:f1:69:34:6b:87:88:89:a2:73:b9:00:4e:14:ec:a8:56:
3f:e0:45:9a:20:42:2f:f7:11:4b:af:33:7b:20:b3:79:e2:09:
0a:76:d2:93:b9:79:c2:6c:a4:e8:81:ca:ec:d6:1f:de:29:cd:
15:51:98:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTm1oMoUE7+rKKz/lvx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjYwMzI5MDMwMDMzWhcNMjYwMzMwMDMwMDMzWjAzMTEwLwYDVQQD
Eyg5ODVhZTQ0NmE4Mjc1NWYyZjlhYzk3ZDYwNDBjZmUyYzMxNGUyYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOIWrCeZeNf2VVyxsAacOgD19F7U
tqzBlXPFPOwrEaS+mUaH3XBVZ68VDUzbJwbRaFgaCXrQHhaDxYWGBjj17tzwogOZ
fEg0lWdsGo7UDN4/3jJj8beTVTQN9YvWOO4SZoApU9V8bjRiqGVNiSbPpqtY+Crq
TZzBBduekQtnu/PadYdWPxa87tZUO+Hmw8QJzreSf4dil1n8PnmQlf3FCyA6KpEA
97uLCJUnfvvm6ZtJvObgNWD0P5Iv0CHH1XldD1R9TI+S2jjuaswHJipHEJZ50rDh
uZRB6qDyiDdDmD9fx9tf51SFrJJPLb67j2ec6TMe/eiKNKoKDSTuUxMSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJha5EaoJ1Xy+ayX1gQM/iwxTix8MB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqLeqUeb
jBajCPRYbJdeARnqOmGbGErjdgGyC+qqjuvhd+6ybmbfLzMCuVKXwUV39wYcHbWD
vkNSWOQ1KHSipg4F0/qY3k2xTjBZBdnyD8TEpTpVqVRsSNwXbxoQgiPfajREcRa5
351FHzhNsuwfVxroScLPVtQNei6UPxjfUfd+Nm93YrZyZAnNZfq/pcfzHq6avsfc
G47CTGKrZxtj/2iEoYuR0HzbZs3chHXnxImHpZTyZY/Z8XAyF66bMJHrE+Xr7jph
SIrxaTRrh4iJonO5AE4U7KhWP+BFmiBCL/cRS68zeyCzeeIJCnbSk7l5wmyk6IHK
7NYf3inNFVGY2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:34 2026 by rpki-client