Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: E/YWKzxwgr6xPFnk7Xf/UpwqBm7cSgkQIOUSR4Zhg4U=
Subject key identifier: D7:48:42:9A:94:BD:28:67:67:D3:9C:16:68:CC:4A:E0:55:47:19:54
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 019CAD22AB0F1B85B4B229479AE48DCC969D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 1044
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: JpmAbUUjgdGj6qAIyyJytHhitKc.roa (hash: CcEuObSxm5FzQn0dVTtYmBf1361NVKZ22QzUQfSvlR8=)
2: _DjjSU3BAoPGedf4mI0XCD0mbWo.roa (hash: qwdJ+lJOWsnxPjxpN0M5u6G8sfxnyYF02VcN5oTvQUA=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: F5dcxazzlUU6HHHNLHG+b6J9yUng5Wl1UtJqGp/VFZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ab:0f:1b:85:b4:b2:29:47:9a:e4:8d:cc:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=d748429a94bd286767d39c1668cc4ae055471954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:d2:5c:10:3a:f1:4a:d0:3c:c6:b3:a8:f2:
b0:f3:d8:2a:15:32:fe:ae:d0:0d:d8:8c:0b:63:aa:
ec:0a:9a:3b:72:4e:98:f7:7f:b3:17:4c:82:68:a5:
dc:b5:6b:b2:42:ad:96:23:4f:52:10:54:ce:f3:02:
c4:92:ea:00:6e:64:49:fd:5b:fa:a0:9c:e5:c7:b0:
b7:a2:04:16:e8:f1:b5:ac:3a:62:c9:2d:c3:83:8e:
a0:f7:f6:7a:79:1d:42:e2:8a:d3:3a:71:27:50:1f:
d4:a7:a5:1b:bf:f3:9c:7a:83:77:b1:75:7b:1b:9e:
b1:11:23:dd:8f:57:8a:0d:31:ad:b8:93:0c:b6:70:
6c:6d:a7:7c:9e:56:66:d1:d7:2c:d3:87:e8:3a:6e:
a0:5f:1b:bb:fb:36:ca:6f:bd:4b:83:ff:c8:8a:a9:
8a:d1:da:7e:fb:fa:69:c4:cc:45:c2:d2:6c:62:20:
41:29:0b:b7:d9:25:13:1d:0e:04:4a:e5:83:77:e1:
1e:1f:7d:2d:3f:d8:c9:84:af:dc:db:12:b3:81:7e:
ed:11:b8:62:6e:3a:be:fd:96:9a:a5:a4:64:45:f2:
f3:f5:0f:83:03:2d:a4:58:d0:e2:df:5f:66:09:c0:
62:af:ec:a7:86:18:5f:64:3a:08:ad:65:cc:2d:c9:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:42:9A:94:BD:28:67:67:D3:9C:16:68:CC:4A:E0:55:47:19:54
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:04:a2:20:b8:7f:65:52:79:98:c0:3d:96:d3:9b:02:17:14:
86:57:34:53:12:cc:1d:77:c4:8c:84:e1:2a:d4:23:5e:00:99:
39:08:62:c6:5c:23:83:9a:8f:d1:03:23:18:94:d4:56:da:ff:
fc:3d:df:23:e6:56:45:7c:6e:4e:bf:76:08:35:53:05:44:f9:
8f:e9:d3:05:6a:a1:57:7f:52:1b:e0:03:63:9d:6a:5c:37:f2:
00:64:45:ab:58:60:5a:1e:92:a6:1f:70:f2:02:7b:4a:50:7d:
e2:b8:e4:2f:e8:43:2d:c3:f2:28:d7:f7:ce:6d:11:de:b4:e4:
97:79:af:f3:3a:34:56:e8:39:95:85:1b:89:1f:17:41:b7:00:
96:d7:16:62:6f:7c:af:dd:2f:6b:b2:89:69:04:31:d5:91:55:
14:1f:f9:ef:9a:b9:2c:fa:e8:48:bf:91:b3:91:e1:80:65:9e:
3a:5e:56:fe:3a:f1:fd:bd:e8:70:be:1e:1b:2b:b6:e8:2f:c7:
f1:40:76:52:cb:e8:f5:0e:1f:6c:41:ab:38:40:8d:22:4a:c2:
65:c2:03:c6:fc:f5:94:0d:56:bd:61:96:f4:91:b7:fd:8d:b7:
35:80:01:01:01:0d:47:8d:5e:3d:cb:47:0f:7a:c6:f4:82:7f:
89:a7:16:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIqsPG4W0silHmuSNzJadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjYwMzAyMDYwMDU2WhcNMjYwMzAzMDYwMDU2WjAzMTEwLwYDVQQD
EyhkNzQ4NDI5YTk0YmQyODY3NjdkMzljMTY2OGNjNGFlMDU1NDcxOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD7SXBA68UrQPMazqPKw89gqFTL+
rtAN2IwLY6rsCpo7ck6Y93+zF0yCaKXctWuyQq2WI09SEFTO8wLEkuoAbmRJ/Vv6
oJzlx7C3ogQW6PG1rDpiyS3Dg46g9/Z6eR1C4orTOnEnUB/Up6Ubv/OceoN3sXV7
G56xESPdj1eKDTGtuJMMtnBsbad8nlZm0dcs04foOm6gXxu7+zbKb71Lg//IiqmK
0dp++/ppxMxFwtJsYiBBKQu32SUTHQ4ESuWDd+EeH30tP9jJhK/c2xKzgX7tEbhi
bjq+/ZaapaRkRfLz9Q+DAy2kWNDi319mCcBir+ynhhhfZDoIrWXMLclVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdIQpqUvShnZ9OcFmjMSuBVRxlUMB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwSiILh/
ZVJ5mMA9ltObAhcUhlc0UxLMHXfEjIThKtQjXgCZOQhixlwjg5qP0QMjGJTUVtr/
/D3fI+ZWRXxuTr92CDVTBUT5j+nTBWqhV39SG+ADY51qXDfyAGRFq1hgWh6Sph9w
8gJ7SlB94rjkL+hDLcPyKNf3zm0R3rTkl3mv8zo0Vug5lYUbiR8XQbcAltcWYm98
r90va7KJaQQx1ZFVFB/575q5LProSL+Rs5HhgGWeOl5W/jrx/b3ocL4eGyu26C/H
8UB2Usvo9Q4fbEGrOECNIkrCZcIDxvz1lA1WvWGW9JG3/Y23NYABAQENR41ePctH
D3rG9IJ/iacWdg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:12 2026 by rpki-client