Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: UnzlwnnyJoNNqwM1stWXOn25wv3fAd/56HPred5/l0g=
Subject key identifier: 37:72:B8:D3:66:46:A9:A8:3B:CC:7A:91:4F:64:EE:7A:0C:2F:52:A9
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019D9AE2FAA3AE26EE5AC93E397921C3BD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0CEC
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: 7Fs40PpZVfBxZb0lXLXHfu3FMMn9hssSvbTOm03lsYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fa:a3:ae:26:ee:5a:c9:3e:39:79:21:c3:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=3772b8d36646a9a83bcc7a914f64ee7a0c2f52a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:9e:21:b8:91:17:46:20:d6:94:bb:19:96:
e6:c7:7b:ff:41:0a:c4:af:bf:d4:68:b2:ce:90:36:
3a:8e:d3:83:bf:43:b4:13:7e:b3:78:b3:92:6e:00:
32:82:ca:f4:f3:29:e3:7f:a1:ed:33:44:f2:6b:31:
60:30:3f:a8:e9:67:d1:b2:67:65:a4:4a:76:7d:df:
e5:f1:de:e2:96:a0:11:e3:5f:4d:31:06:c1:a6:fd:
56:81:7c:fe:52:0c:03:c4:e0:79:7a:1f:21:da:64:
2c:7c:3f:28:d1:98:a1:dc:39:ef:53:02:4d:f5:de:
34:41:aa:49:98:0e:21:90:f3:de:71:c7:6e:12:0c:
9a:5e:6f:d5:37:99:56:60:72:57:84:ca:b3:4a:d9:
9f:38:b8:bd:c1:b7:84:4e:01:21:8e:5b:c7:42:b0:
f8:0e:a1:f1:fa:c7:11:ed:a2:c5:b7:5c:cf:4a:0a:
b6:26:60:77:53:f5:59:8b:99:f1:cc:db:8d:7a:a7:
a8:bb:d0:2d:a6:c0:5c:7b:ac:a0:c2:b7:3d:01:e8:
21:db:52:ea:27:02:d0:c5:84:4d:de:2e:3a:d5:d8:
72:a9:2e:b3:ac:48:e1:78:ae:6f:b6:1d:90:d1:9b:
66:64:fa:fe:49:71:2c:2c:d0:32:c3:73:d1:5b:87:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:B8:D3:66:46:A9:A8:3B:CC:7A:91:4F:64:EE:7A:0C:2F:52:A9
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cf:ca:04:11:26:2b:d1:37:eb:18:0e:f9:b2:5b:b6:10:29:
97:b5:1f:a8:e3:17:ea:43:f3:17:45:43:81:10:a9:2f:4c:30:
15:ca:ff:3e:3d:e5:b7:1b:73:a7:fe:52:26:fc:dd:33:11:58:
02:30:f3:90:87:d4:24:db:87:78:89:dc:60:61:1f:18:f9:5d:
77:4d:6f:b0:21:0c:63:7f:15:63:0e:55:30:6f:ac:51:84:f7:
48:c1:8f:20:a3:dc:c8:96:3a:3e:4d:88:f9:17:bc:13:ad:f8:
16:9d:40:ea:a5:c0:3e:49:88:92:e7:e1:f0:ec:a6:40:8a:b7:
b4:25:f1:2d:3f:ae:c4:7d:2a:2e:2f:29:b9:11:34:44:1b:ea:
af:79:94:07:47:f1:4b:8a:59:7c:74:41:8e:95:3a:1d:a8:f8:
74:55:49:b2:64:99:19:14:f7:f7:13:c2:9c:2b:cd:3a:20:b5:
51:cf:19:5f:42:4d:db:9a:8a:d3:67:bf:16:44:21:75:f0:27:
3e:4e:9a:80:41:9f:ec:f6:39:d6:0a:f9:79:b7:e4:17:82:a6:
af:8d:8e:d7:76:23:ac:d7:81:55:37:6a:74:bb:d4:ea:aa:6e:
a4:31:08:3d:cb:4c:ec:4c:9d:20:02:b1:93:79:07:92:77:7b:
d1:e7:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:15 2026 by rpki-client