Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: 0P8lp8UOFWCBYx4bzkFeStQjA5mmAR5yCIVnr2um9s8=
Subject key identifier: 10:77:48:45:33:76:FF:C6:AE:98:3F:84:87:65:B1:23:5C:62:DD:1A
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019CA97D304233C88BA8C461EB36CD1C829E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0C6F
Signing time: Sun 01 Mar 2026 13:01:19 +0000
Manifest this update: Sun 01 Mar 2026 13:01:19 +0000
Manifest next update: Mon 02 Mar 2026 13:01:19 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: K1mSWQgA/S0xDKDNFbfzXXbPmHuOvSpvFIK4Sq9h4lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:30:42:33:c8:8b:a8:c4:61:eb:36:cd:1c:82:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Mar 1 13:01:19 2026 GMT
Not After : Mar 2 13:01:19 2026 GMT
Subject: CN=107748453376ffc6ae983f848765b1235c62dd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:ef:6a:36:9b:91:79:c1:d4:ab:2a:47:92:
09:ea:ae:56:f6:55:d3:8b:16:25:9e:9c:59:d6:55:
d0:7f:5e:cf:d9:a2:71:9c:30:39:8c:b1:76:1e:62:
47:8e:25:46:a1:9d:cb:8a:ea:8c:c8:52:24:f7:76:
b5:19:ca:7c:27:ff:bb:05:43:65:a3:86:b7:6c:61:
41:a8:e6:c9:3d:76:14:0a:0c:28:03:0b:a9:74:bc:
fc:ec:19:6e:3e:70:cb:2d:24:0e:55:af:ef:24:76:
01:3d:f7:5f:61:12:42:5a:a1:f9:2f:5c:f0:45:30:
89:09:27:28:f2:d6:4e:79:b0:f6:47:bb:f4:47:7c:
01:41:ac:71:a9:88:78:1b:28:21:97:f2:d1:d8:62:
28:cd:88:94:bd:96:2c:a7:dd:25:c2:42:85:f0:28:
ba:fb:94:4e:55:a0:8b:48:54:4c:78:e0:ad:88:8c:
f5:bb:80:fc:95:25:c0:12:c4:10:1e:9d:4b:6e:50:
0f:43:14:84:40:9b:20:0a:a3:ce:40:37:34:11:a2:
73:e3:a5:f5:a5:67:5c:fc:2d:91:b2:ef:82:86:33:
54:6e:af:e0:5d:06:cd:99:59:e8:d9:33:e5:45:e6:
bd:33:0b:a5:c9:89:6e:d3:7d:d6:f6:48:08:7f:5a:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:48:45:33:76:FF:C6:AE:98:3F:84:87:65:B1:23:5C:62:DD:1A
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6b:d4:f7:f4:b2:ef:a6:94:fa:de:8a:23:c2:09:7a:e5:ee:
c0:3d:39:28:d2:3b:55:49:71:76:08:6f:7d:ee:f2:54:24:56:
e5:01:84:dc:46:51:7e:bc:55:3e:c0:94:82:25:d8:5f:99:1f:
6c:3e:4e:f6:e8:85:b5:55:b2:2d:ce:19:2b:13:09:0c:93:b0:
50:52:24:39:00:eb:28:73:79:eb:28:2b:c4:f7:9b:c5:f7:af:
50:6f:f1:ad:18:92:2a:f2:f7:8c:de:22:14:cb:99:58:f4:76:
6e:e2:07:56:d7:e8:1a:a0:a5:df:9d:0d:f5:b4:69:c8:9a:a3:
35:9d:d2:21:fb:b2:74:fc:8a:03:c4:46:b0:21:e1:9e:11:8f:
56:05:fb:1f:21:c2:a4:f2:c1:54:86:e4:10:38:70:2b:83:2e:
42:44:fd:69:0e:0f:e7:f9:c9:63:de:4b:1c:09:a5:6f:ef:8e:
f5:fa:23:f7:db:5d:6b:36:ca:fb:75:b3:be:30:cc:db:0f:51:
67:59:fb:2b:36:9b:83:90:80:d0:34:02:b4:54:be:8d:6b:6e:
15:c2:e2:c0:76:1d:40:0d:af:1f:a2:ee:77:c5:ef:b5:38:9a:
d6:15:68:93:11:89:41:a4:b4:4c:53:f6:e3:67:5c:9f:4f:f7:
f9:d6:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:13 2026 by rpki-client