Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: g55cVlAje7jutiqXv8Jx66SVkD7lngoxphz+JO/UEbo=
Subject key identifier: 55:05:BA:63:7F:43:5B:58:38:7E:B1:0C:C1:C5:46:97:CD:BA:74:F7
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019EC06D8A3C1BCF48CD7B5CBB992996A7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0D84
Signing time: Sat 13 Jun 2026 10:01:04 +0000
Manifest this update: Sat 13 Jun 2026 10:01:04 +0000
Manifest next update: Sun 14 Jun 2026 10:01:04 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: CggFXREZH1FZScaeDiKeR2TPKlQ9SlntAU6+Iub+Q/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:8a:3c:1b:cf:48:cd:7b:5c:bb:99:29:96:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jun 13 10:01:04 2026 GMT
Not After : Jun 14 10:01:04 2026 GMT
Subject: CN=5505ba637f435b58387eb10cc1c54697cdba74f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:5f:08:d0:da:c8:82:7e:cc:58:a4:ca:75:
c8:06:30:01:2a:fa:74:b6:94:e3:4b:e9:a9:cd:c9:
8c:6a:c4:15:41:c2:c6:ad:a4:40:e1:7d:d8:3e:07:
79:1e:1f:37:da:15:b4:3a:15:a7:3d:8a:7b:4b:ab:
6f:48:7e:31:9d:5d:f7:bd:ce:4d:84:4e:3f:7f:ef:
1d:d6:4c:da:8b:21:82:f2:8a:b7:21:0e:60:3d:44:
be:76:08:c5:b3:c5:7f:0f:14:e8:63:c4:f6:1c:20:
fc:a8:43:16:ed:aa:33:e5:25:7f:69:16:96:62:f9:
0a:00:71:37:64:34:14:2a:5b:96:4c:51:c2:b0:e4:
3a:9d:10:75:9f:96:de:99:84:66:f5:01:0e:73:8f:
fe:a6:99:f8:26:bd:a5:fa:85:c8:ea:4b:5e:09:16:
09:8b:45:9a:85:46:91:17:09:98:24:dd:70:20:14:
d6:2b:cb:44:7c:75:84:a3:84:e5:6e:1a:4e:c2:0f:
e5:c0:35:69:22:45:72:79:4f:2b:85:2b:4e:8a:4c:
2d:6c:f8:39:62:3f:09:b0:bf:cd:93:ed:6b:cc:9f:
e2:1a:05:06:bc:e3:18:f0:1b:27:6a:15:8c:8e:ce:
ab:61:e2:b4:fd:66:8f:a4:bc:39:e3:47:08:be:9f:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:BA:63:7F:43:5B:58:38:7E:B1:0C:C1:C5:46:97:CD:BA:74:F7
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:cb:c4:e9:2b:f3:1d:6a:e2:59:de:7a:be:47:1c:f2:14:
b4:9f:b2:2a:4e:7f:ee:69:4d:43:db:de:26:06:b9:f6:98:05:
69:62:62:32:fb:dc:1c:cf:26:6c:b6:ec:34:f3:ed:d4:54:fa:
72:45:70:13:3b:3b:a5:96:bc:c1:54:b1:02:93:7e:91:c5:a2:
da:a0:0f:a7:c6:56:e7:43:12:1c:44:c6:bf:e4:3c:72:02:ad:
c1:39:7f:96:23:81:f2:7e:82:3b:6d:a0:c7:a5:31:69:d5:49:
c0:d9:c0:b1:84:13:f6:14:cc:fd:68:f5:bc:d1:f9:2d:cc:83:
52:e4:7e:69:b5:5b:bb:7f:7a:6f:4e:06:d6:da:d8:f0:13:3c:
f1:62:c9:26:d2:5a:9c:3f:aa:68:64:90:c0:f9:f9:e1:4c:cb:
1f:f7:ca:0a:c9:8c:32:ff:c9:a2:64:28:ab:03:ba:ae:37:ef:
33:36:04:3d:e8:ad:d3:84:10:fa:5d:18:03:a6:8b:b8:e3:f1:
15:65:dc:e7:55:07:f8:a7:f8:be:e8:4f:f1:23:e5:2c:f7:ae:
ab:14:15:ae:81:ec:32:9b:00:e9:3c:82:0b:99:f9:36:de:0f:
9d:85:02:e6:da:0c:29:8e:73:57:38:15:39:fa:a5:29:2d:4b:
74:fb:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:34 2026 by rpki-client