Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: zKP5cX/CANGnly/OU5COe1mgt68p/2OcjubiQSzGkUA=
Subject key identifier: EE:B9:C0:04:E9:C3:D6:4B:97:7D:61:5A:9D:3A:DB:93:15:E5:C9:CC
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01A101DB1023F6678697696211C3CBED6B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0EAF
Signing time: Sat 03 Oct 2026 13:01:36 +0000
Manifest this update: Sat 03 Oct 2026 13:01:36 +0000
Manifest next update: Sun 04 Oct 2026 13:01:36 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: STbK4jQs/o96Y+0VmwHordZ3lv79McT7K2LpREKfhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:db:10:23:f6:67:86:97:69:62:11:c3:cb:ed:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Oct 3 13:01:36 2026 GMT
Not After : Oct 4 13:01:36 2026 GMT
Subject: CN=eeb9c004e9c3d64b977d615a9d3adb9315e5c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:4f:a6:be:d2:5c:5d:48:47:5a:fa:14:d4:
b7:52:2d:48:b5:6f:7e:8e:35:8c:f4:c1:87:eb:38:
10:ff:19:21:33:a2:b3:4e:f8:88:5b:21:83:92:49:
3d:60:b5:96:c6:50:cb:a7:04:d1:62:0d:d6:3a:4c:
86:58:c7:c5:bd:52:cc:af:7e:4d:60:85:26:ba:3a:
ff:aa:95:d3:a8:81:4e:17:78:67:c9:c9:a0:d9:14:
8c:19:9e:7f:a0:22:7c:6f:70:81:de:0d:66:9b:e2:
fa:5b:00:e7:92:49:46:73:1b:12:33:7d:22:5f:be:
96:a1:a0:0b:03:3d:3e:bf:b2:05:22:8f:60:30:9b:
51:44:71:1b:34:a3:3a:98:5e:f5:6b:bc:bb:ee:4b:
d0:6f:66:1f:b0:54:25:83:7f:d8:d4:c9:b7:ac:2f:
f3:91:eb:39:4a:cc:27:42:65:74:b5:c3:fa:0e:7f:
bc:ad:17:98:a6:48:e4:75:a2:73:62:c1:f8:cc:88:
37:91:34:08:80:a7:0a:f4:5c:d3:02:db:5b:31:ef:
11:3f:19:b0:3b:49:24:b3:ce:4c:7c:40:51:31:5f:
38:c7:62:9a:29:95:55:cd:0a:70:39:f6:3b:01:a7:
93:8b:d4:38:20:13:f2:ec:75:2a:24:01:7e:9d:4f:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:C0:04:E9:C3:D6:4B:97:7D:61:5A:9D:3A:DB:93:15:E5:C9:CC
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:29:e6:65:0e:0b:2f:ed:ce:66:78:48:0f:df:33:82:38:
e3:a6:00:31:26:e9:bf:94:db:a9:4c:08:45:6a:8f:24:6b:04:
29:24:bd:91:20:2f:8d:d8:cf:df:2f:1c:ab:a9:f4:5e:be:02:
92:ff:d7:28:de:8f:75:bb:c7:3b:93:54:28:1b:9f:50:f4:2a:
6c:c5:1c:b5:56:ec:d3:e1:98:9a:3e:36:68:0a:05:44:93:4a:
60:35:12:36:9d:19:11:4a:18:b9:25:8c:24:0e:1d:1e:55:28:
8f:32:8f:31:13:4b:91:15:4f:6b:1b:f6:f5:bb:c0:50:d9:88:
b7:5b:66:4e:b4:0b:22:5c:68:eb:c3:36:8e:45:12:7d:4b:a9:
f2:21:6c:80:89:c7:58:28:3b:9a:06:93:60:d9:47:42:5e:bd:
9a:44:e7:54:84:d5:c0:f1:d0:15:cf:3a:7c:c0:e4:95:de:db:
eb:eb:42:1b:60:f7:eb:bd:8b:7d:02:df:09:73:ee:d4:ab:90:
b3:04:1d:8c:1a:43:39:fc:7d:ec:fb:58:cf:a4:7b:bb:fa:c9:
db:6e:b1:16:3d:a3:32:e3:37:92:ed:5d:41:6c:86:aa:8f:bb:
a7:19:ee:f6:db:04:62:4d:c7:9e:e1:84:c6:99:d1:21:90:92:
33:b5:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:03:13 2026 by rpki-client