Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: zHwX+gz097Poh4UIEMn/P6iU96BOSBaBM4CIa64cAYU=
Subject key identifier: 67:72:A8:91:0A:04:FC:27:70:AD:F1:C9:AC:CE:5F:5C:F4:11:EB:C5
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019D9962BFB4394C503175A21FF8FFA54D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:18 +0000
Manifest this update: Fri 17 Apr 2026 03:01:18 +0000
Manifest next update: Sat 18 Apr 2026 03:01:18 +0000
Files and hashes: 1: Tz1-N59sSfd-X1uanpY0uE0n3Z8.roa (hash: TjI9Conr3Wy1dhn8UqIMqHZ2WlgAzdiybMSutLCTCzk=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: Rc3ADWpXNPfvBKLWAEpZgCkI/ThWKFdXi6MEM9ZUllg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:bf:b4:39:4c:50:31:75:a2:1f:f8:ff:a5:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Apr 17 03:01:18 2026 GMT
Not After : Apr 18 03:01:18 2026 GMT
Subject: CN=6772a8910a04fc2770adf1c9acce5f5cf411ebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:9c:fb:94:48:5f:a3:f0:e6:fe:cc:fb:c1:
27:d2:dd:b0:77:98:45:38:b5:e2:78:4e:73:29:63:
1e:6f:89:d9:72:69:7a:d3:35:41:ea:e7:25:38:ac:
18:11:06:b3:20:cf:4f:92:5b:20:01:aa:3c:59:54:
92:63:0a:b4:95:f4:3c:54:f1:e0:6e:df:cc:af:31:
08:ed:da:6e:9d:0d:6e:80:34:63:27:18:5a:cb:4b:
15:16:b9:1c:c7:a5:f9:02:e5:61:f7:92:cc:45:6f:
59:fa:93:04:20:2f:89:57:b2:e0:e0:6c:ca:7f:af:
01:58:e4:51:02:1e:99:14:29:32:a9:11:72:1c:f1:
1e:b7:7a:72:9c:2a:3a:65:1e:da:12:1b:98:9e:4d:
6c:43:b2:82:b9:e4:8a:e4:43:5d:a2:b1:d2:46:4d:
75:12:07:e0:60:8d:ab:ba:4f:f6:d6:e7:14:33:a1:
ef:25:9e:84:dc:15:66:ef:c6:63:99:84:1f:26:f6:
ff:2d:b9:11:3e:83:a9:35:66:bc:fe:64:1a:eb:c9:
a3:52:4b:76:6e:09:54:4c:7b:7f:30:1b:98:f8:e0:
19:18:23:98:0d:a8:a0:cc:5b:69:05:58:2f:32:20:
0f:fa:2a:b2:37:41:bc:2b:07:b7:3e:fe:ac:d3:e7:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:A8:91:0A:04:FC:27:70:AD:F1:C9:AC:CE:5F:5C:F4:11:EB:C5
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5c:d3:3d:80:ff:fb:0b:6d:fc:e2:6d:24:b1:a5:18:03:06:
ab:d6:9d:e4:5c:f4:97:45:bb:86:16:8f:97:35:f5:dc:f9:60:
74:f5:82:da:90:e3:80:d0:89:64:62:ec:ec:78:02:b8:c9:c7:
18:a5:40:17:d2:27:52:dd:4f:76:3a:db:92:ea:6d:aa:a7:d0:
fe:de:91:30:4f:37:96:b5:3f:bf:eb:89:14:b5:ed:38:38:ac:
62:ec:ff:d8:8e:c6:50:e8:0a:03:94:ab:8b:18:9e:79:d3:51:
ce:ef:b7:a6:14:2f:73:8f:9d:c5:44:04:74:e7:48:d4:0e:66:
28:0c:71:fb:b8:53:da:f4:40:ca:bf:d1:b5:a5:07:d4:2e:e8:
f6:af:68:76:62:b2:05:5b:82:5c:32:38:70:56:13:f9:f0:f7:
70:5f:4f:2d:ff:f2:48:fc:24:ed:47:38:f3:9f:1f:d7:c1:d2:
2b:ce:04:79:20:cc:15:7e:51:0c:94:22:89:f6:c3:26:a0:54:
0f:54:36:4b:1a:80:1c:20:43:93:ac:3c:e3:98:bb:e4:d2:9b:
eb:5c:e4:5c:5f:cb:27:78:64:2b:65:d6:27:0d:b1:78:ff:b2:
23:ec:87:5f:d4:43:fc:b3:5a:9c:91:25:ec:45:cb:ec:60:92:
a7:1d:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:17 2026 by rpki-client