Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: CMpI+e5jzpMHe45vOHClgdzDX6VqFR3p9fabdDthB5Q=
Subject key identifier: EC:E9:19:74:60:1E:D3:DE:94:FE:82:60:F5:E2:44:3B:1F:2E:94:66
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019FAA19ECF6EA60D210A885EEDAB192763A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0DFD
Signing time: Tue 28 Jul 2026 19:00:53 +0000
Manifest this update: Tue 28 Jul 2026 19:00:53 +0000
Manifest next update: Wed 29 Jul 2026 19:00:53 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: jnN0BbVnwp7qZlT+SdVYywOrl4suFTF7X3SnQgp1Tkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ec:f6:ea:60:d2:10:a8:85:ee:da:b1:92:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jul 28 19:00:53 2026 GMT
Not After : Jul 29 19:00:53 2026 GMT
Subject: CN=ece91974601ed3de94fe8260f5e2443b1f2e9466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:ac:f5:89:70:6b:e8:79:52:9f:15:a1:c2:
28:45:98:26:21:41:9e:4e:fe:bb:76:4d:79:2e:86:
c6:97:01:8c:b1:44:47:7b:36:7b:7d:7c:ed:75:5c:
f2:81:b9:f1:ae:89:fe:6c:d9:64:d3:2e:d4:fc:10:
50:e3:d3:0c:25:a1:a2:cf:7a:29:18:9f:b4:ac:9a:
af:37:d0:8b:14:6a:90:f7:41:63:0a:f9:78:7a:37:
df:66:07:79:db:6b:58:40:87:8a:7e:d1:90:7e:ae:
2a:4a:7b:99:1e:24:18:0b:f4:9c:b8:ac:30:99:7a:
1b:b0:f7:eb:28:db:a5:ba:40:3f:ac:9d:ff:59:94:
16:fe:30:0e:f5:e4:58:3c:d4:fe:4c:e3:7a:6e:5a:
4b:60:80:a8:7d:04:93:2d:82:53:50:ed:c0:60:05:
f6:6b:02:d9:eb:5a:9d:5e:36:17:06:93:b0:e9:d6:
c2:7d:be:73:78:60:8a:89:23:b3:18:f7:62:ac:e0:
d1:df:98:5e:b1:74:50:78:df:d9:20:d0:d3:d6:cc:
f3:c9:90:64:77:66:c6:07:51:a2:ae:a2:7b:26:da:
d0:b4:2b:70:a4:10:a8:a7:8a:eb:42:75:4a:db:80:
6b:dc:0e:9b:55:9a:2e:d2:94:35:e1:47:84:1b:95:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:19:74:60:1E:D3:DE:94:FE:82:60:F5:E2:44:3B:1F:2E:94:66
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2d:1c:b6:ca:a4:31:cd:a6:ea:6f:ab:68:5a:b1:45:fc:ed:
81:2c:d8:85:2f:ca:3c:18:24:78:20:3b:76:16:7a:c4:82:3c:
fd:d3:45:45:80:f1:5d:b4:00:ec:ac:a3:f0:01:ae:3e:9b:f9:
6b:d0:69:80:55:ef:77:02:18:c7:84:00:90:5f:ac:e7:98:b1:
1d:8e:0d:ad:95:02:5e:ec:b4:ec:19:b0:f1:b0:c7:20:ec:4d:
ff:b6:6b:70:09:b7:e8:ef:1e:f2:bb:be:2e:e9:45:75:8c:93:
ba:02:ee:b0:7f:70:f7:b1:89:19:ce:9d:10:e6:1d:9e:c2:50:
85:f7:7f:97:f7:e7:a0:b3:f5:ef:1d:ce:2b:bc:68:97:80:de:
67:58:12:ce:bf:6c:49:58:43:b9:51:80:48:e0:22:df:1c:b5:
fe:6f:f9:5a:e0:23:85:06:cc:85:3c:e9:4c:6a:7c:46:fd:97:
b5:9d:07:db:e8:66:07:c6:0d:40:3b:c5:75:4b:5f:b7:6b:c5:
ac:d6:a6:85:3d:d0:68:7b:91:d8:27:36:07:c4:75:a8:b4:c0:
65:5a:05:66:fd:1b:e1:1d:e2:65:41:62:8e:9a:7e:d5:86:6e:
30:dd:d2:a6:77:9c:0b:ef:22:a9:0b:0b:f0:95:86:36:0d:38:
b7:8e:68:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGez26mDSEKiF7tqxknY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjYwNzI4MTkwMDUzWhcNMjYwNzI5MTkwMDUzWjAzMTEwLwYDVQQD
EyhlY2U5MTk3NDYwMWVkM2RlOTRmZTgyNjBmNWUyNDQzYjFmMmU5NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBis9Ylwa+h5Up8VocIoRZgmIUGe
Tv67dk15LobGlwGMsURHezZ7fXztdVzygbnxron+bNlk0y7U/BBQ49MMJaGiz3op
GJ+0rJqvN9CLFGqQ90FjCvl4ejffZgd522tYQIeKftGQfq4qSnuZHiQYC/ScuKww
mXobsPfrKNulukA/rJ3/WZQW/jAO9eRYPNT+TON6blpLYICofQSTLYJTUO3AYAX2
awLZ61qdXjYXBpOw6dbCfb5zeGCKiSOzGPdirODR35hesXRQeN/ZINDT1szzyZBk
d2bGB1GirqJ7JtrQtCtwpBCop4rrQnVK24Br3A6bVZou0pQ14UeEG5UfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzpGXRgHtPelP6CYPXiRDsfLpRmMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC0ctsqk
Mc2m6m+raFqxRfztgSzYhS/KPBgkeCA7dhZ6xII8/dNFRYDxXbQA7Kyj8AGuPpv5
a9BpgFXvdwIYx4QAkF+s55ixHY4NrZUCXuy07Bmw8bDHIOxN/7ZrcAm36O8e8ru+
LulFdYyTugLusH9w97GJGc6dEOYdnsJQhfd/l/fnoLP17x3OK7xol4DeZ1gSzr9s
SVhDuVGASOAi3xy1/m/5WuAjhQbMhTzpTGp8Rv2XtZ0H2+hmB8YNQDvFdUtft2vF
rNamhT3QaHuR2Cc2B8R1qLTAZVoFZv0b4R3iZUFijpp+1YZuMN3SpnecC+8iqQsL
8JWGNg04t45opw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:49 2026 by rpki-client