Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: xv/XsralGtVMPWqksVr28Cvb9tOrLNMNeN5cf45kWY4=
Subject key identifier: 9A:90:E3:D2:8D:B7:92:13:0E:7B:1E:17:E2:DB:44:42:47:F4:6D:C7
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019CAA8FFF8BE56E36A7A9E4386A27D26B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0F2E
Signing time: Sun 01 Mar 2026 18:01:29 +0000
Manifest this update: Sun 01 Mar 2026 18:01:29 +0000
Manifest next update: Mon 02 Mar 2026 18:01:29 +0000
Files and hashes: 1: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: r4iAL0yUaDWqe/WivyNV8l21X9MFP59LP5O48G9dWqQ=)
2: lV6i9HMGJoauyywXtNVMngtUYcw.roa (hash: 12sx9g61Ie6Zxf7JQ+oShflzzu8hN9b9J5QtxLChp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ff:8b:e5:6e:36:a7:a9:e4:38:6a:27:d2:6b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Mar 1 18:01:29 2026 GMT
Not After : Mar 2 18:01:29 2026 GMT
Subject: CN=9a90e3d28db792130e7b1e17e2db444247f46dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:3e:35:48:12:e7:fc:2e:e8:af:d1:0d:fd:
e2:00:83:5a:b4:c5:7e:31:f4:ae:dc:5f:82:ec:3d:
f5:fa:60:12:60:4b:8e:9a:c0:64:58:95:a6:c6:47:
d8:ab:13:ed:ef:91:de:42:22:a8:53:09:0d:b3:f4:
9e:98:56:ef:96:9c:01:c7:69:96:d5:7f:9b:f6:de:
21:c3:23:de:59:80:de:de:ad:16:b6:78:12:e1:c7:
95:1d:0e:eb:e7:e6:77:61:f5:ab:65:02:5c:28:f7:
1b:d2:4c:99:a7:04:99:ad:2f:14:35:83:62:46:87:
27:0f:e5:91:fa:64:bb:e7:28:b2:fd:c1:ab:e9:b6:
77:35:bf:2f:06:76:b6:d2:ce:f8:d3:46:fa:eb:31:
22:2a:0e:72:10:9b:8e:5f:be:17:28:e9:c8:6d:40:
07:a7:84:12:40:fc:47:49:c4:e4:f3:26:fb:66:ab:
85:4a:20:80:cb:e3:8c:c7:bf:8d:36:35:d2:22:c0:
e7:d9:1e:6b:5a:70:82:95:84:27:30:42:f7:2b:31:
aa:1c:b3:98:af:fd:d5:ba:ff:bb:0e:96:92:f3:19:
2b:d9:d4:b4:9d:f5:d6:c8:98:49:77:22:e8:97:80:
82:69:a2:a5:31:43:39:39:d4:00:fc:23:c9:d3:f5:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:E3:D2:8D:B7:92:13:0E:7B:1E:17:E2:DB:44:42:47:F4:6D:C7
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0d:0f:12:d8:d4:f9:75:f4:79:a0:91:fd:7e:f0:bc:70:c5:
b9:5f:49:ec:d9:6b:af:ab:5e:8a:2e:a2:18:af:13:d9:da:97:
72:3f:24:5c:62:b7:0a:46:3c:fb:7e:08:3f:71:38:0e:e0:98:
2b:07:2a:11:e0:b8:3e:d6:c7:2a:0a:1d:6b:48:ff:e5:a6:8d:
0e:2c:75:44:80:bd:7d:7a:67:6a:65:31:3a:d7:f6:e7:21:b0:
0d:e6:d5:d8:82:31:45:90:46:de:45:2c:db:aa:06:20:ba:84:
3e:87:22:82:b6:c1:dc:0e:15:13:54:70:5e:1c:c5:46:36:27:
1c:0b:1d:0e:03:9c:fa:88:1b:0f:7a:12:ed:ee:fa:08:98:8f:
e4:94:e4:6d:11:de:08:87:04:6a:5b:5e:e3:c4:8f:9a:5a:d1:
12:17:24:25:3c:b7:1a:13:07:a4:04:6c:75:d9:b6:39:c1:ff:
b4:35:a0:d0:34:6b:1f:67:f7:e4:98:96:18:ec:1a:f9:ab:17:
f4:ca:5d:77:0b:31:4d:c6:09:14:1e:43:a0:d8:31:ee:25:3a:
88:ec:36:ab:6a:28:af:57:ce:36:23:09:42:25:c4:63:44:2a:
51:da:5a:be:34:ec:ae:44:e0:c1:44:9a:a8:d1:47:e5:98:ec:
fd:7e:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:39 2026 by rpki-client