Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: Yo1FmEON4a2i+vvDztyLk6BMFQyHPOQ2QaFMNmpOiJ4=
Subject key identifier: 9C:97:D1:7F:82:5B:AB:46:F5:AB:57:F6:01:2C:B6:79:FA:3B:6F:55
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 019FADBF4B8A40A1EDDFB071CD91C8AE3690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 11D2
Signing time: Wed 29 Jul 2026 12:00:22 +0000
Manifest this update: Wed 29 Jul 2026 12:00:22 +0000
Manifest next update: Thu 30 Jul 2026 12:00:22 +0000
Files and hashes: 1: JpmAbUUjgdGj6qAIyyJytHhitKc.roa (hash: CcEuObSxm5FzQn0dVTtYmBf1361NVKZ22QzUQfSvlR8=)
2: _DjjSU3BAoPGedf4mI0XCD0mbWo.roa (hash: qwdJ+lJOWsnxPjxpN0M5u6G8sfxnyYF02VcN5oTvQUA=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: x2JZbWIrKBRJ9aX5gUoS/VhsVNkyvROA7F0yApVqKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:4b:8a:40:a1:ed:df:b0:71:cd:91:c8:ae:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jul 29 12:00:22 2026 GMT
Not After : Jul 30 12:00:22 2026 GMT
Subject: CN=9c97d17f825bab46f5ab57f6012cb679fa3b6f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:58:1b:45:35:91:b4:21:33:50:3f:1b:23:
c9:89:ed:8e:f2:03:67:27:2a:62:e6:03:0a:1a:f8:
13:2d:9a:ac:6f:96:14:2b:ac:36:c6:62:d6:5e:9e:
16:0e:b5:9d:66:17:1f:35:95:5f:14:e7:ba:c8:97:
9c:de:3c:c4:56:68:d8:70:15:2d:1d:7b:a9:43:32:
07:88:49:ce:bf:29:43:6e:47:77:6f:84:64:07:fb:
7f:9f:d0:35:31:84:7d:50:9a:62:71:7c:6d:0b:e9:
96:23:ae:a8:86:86:4f:79:e5:26:18:1f:7d:b7:44:
31:1f:ca:6a:9c:8b:88:1c:a5:b3:39:bd:11:33:ac:
6f:3e:70:ac:a0:0c:6e:79:94:f1:8e:52:ed:5c:3f:
cb:28:27:c8:81:a7:1a:49:ac:5b:50:4d:88:ff:10:
a1:4d:bf:c8:da:52:aa:a0:3b:6b:60:cf:47:21:cd:
8a:2c:74:7d:69:c4:da:40:fa:44:e9:04:05:51:8e:
31:20:57:2e:58:e1:63:2b:cc:e8:81:95:b6:2e:09:
be:cf:2c:5e:98:67:93:36:67:0d:68:02:08:42:f6:
15:82:7a:af:43:5d:ea:16:ad:bb:50:e1:6a:d4:9d:
58:bc:d0:4c:f6:42:7d:cf:d8:11:9d:81:31:ec:8c:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:D1:7F:82:5B:AB:46:F5:AB:57:F6:01:2C:B6:79:FA:3B:6F:55
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:38:86:65:e4:7d:fb:19:36:2a:f8:a2:c1:73:92:0a:89:
b1:b3:7b:a7:e2:86:6d:62:49:3e:de:f3:7d:61:f0:17:6e:7c:
d0:97:05:5c:90:0e:1e:4d:6a:4b:89:ae:e7:d7:4a:8a:39:f8:
23:c4:f4:77:56:dd:1f:0d:d5:66:08:d0:01:39:94:d5:23:27:
35:a0:e8:6e:b4:99:e4:3e:0d:3f:a8:3a:2b:f4:c2:34:75:7a:
bb:88:8c:61:16:63:63:40:24:6e:7f:61:57:7b:a9:fd:c9:cb:
c2:61:5a:3d:8a:b8:ea:ab:f5:9e:ba:1e:83:56:99:36:63:75:
b4:d4:0f:cf:50:ff:57:8d:3d:d9:66:63:ee:50:dc:39:50:85:
95:b4:5d:6d:58:13:c6:dd:da:32:6b:3d:dc:d1:d5:24:4e:58:
c1:37:70:b4:42:93:79:2d:be:ee:fd:c7:fe:34:17:aa:65:4c:
e4:09:47:e0:8f:08:88:bd:bd:06:33:45:f6:bf:d8:8c:01:ef:
f1:3a:52:92:6d:93:f8:7e:6b:29:f5:01:ea:a6:88:36:c8:21:
34:89:b7:a2:a3:62:07:62:26:24:15:21:38:65:d5:fc:a2:cb:
bf:ac:10:57:06:46:bb:7d:15:4b:a2:cf:2a:ec:11:2b:c5:f4:
67:61:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:46:00 2026 by rpki-client