Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: lcsoSIMJbFBkuRsvuimcYlRupewnKvIcfLo0eDRwmk0=
Subject key identifier: 6E:A0:66:3F:17:DD:1E:E8:60:C3:63:78:CD:16:E6:D6:2F:FC:1B:22
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01A12542222892FAFE51D6EC22E4859C5E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 10:00:53 +0000
Manifest this update: Sat 10 Oct 2026 10:00:53 +0000
Manifest next update: Sun 11 Oct 2026 10:00:53 +0000
Files and hashes: 1: C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (hash: PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: WVeLdN1OQeaQlpRnhEcILHmIqmCfvFY47gdGe+Js8xA=)
3: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (hash: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:22:28:92:fa:fe:51:d6:ec:22:e4:85:9c:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Oct 10 10:00:53 2026 GMT
Not After : Oct 11 10:00:53 2026 GMT
Subject: CN=6ea0663f17dd1ee860c36378cd16e6d62ffc1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:b2:60:c8:5d:c4:62:81:b1:57:72:8f:30:
09:af:bb:9e:a2:f8:8c:80:05:dd:8c:b2:ca:8a:80:
b9:d3:d2:f1:dd:fb:52:98:a7:bf:aa:00:be:5d:e7:
90:3f:ad:9a:a7:de:f0:06:8e:78:60:d1:4f:34:cb:
60:94:35:07:4b:d4:af:03:8c:66:e8:9c:23:fb:9e:
8f:e9:c7:77:3c:4d:6e:c1:f9:1f:27:27:0a:da:24:
38:d4:20:f3:55:e8:c3:c8:3e:22:59:de:b9:fe:fa:
46:65:e4:b0:38:a3:95:7f:58:0d:2b:4a:0e:d2:82:
95:27:8b:94:e8:8e:66:1d:f5:c5:3f:97:d6:c3:b1:
69:4d:d4:21:70:96:3f:07:3f:3d:6f:19:91:c8:fc:
42:ac:51:0a:c2:26:07:db:8a:c6:2d:7e:3b:a6:02:
a4:4c:15:96:5d:77:36:01:04:98:1a:43:f3:f3:14:
ec:05:c8:e1:1a:ba:f0:6c:c2:37:07:52:4e:11:fd:
34:c2:89:71:75:4e:61:9d:02:9a:c0:41:e3:87:b0:
10:81:df:53:71:4c:11:11:62:72:b4:d1:66:0d:01:
14:bf:11:67:5c:c9:7e:96:eb:a9:01:73:eb:f8:ae:
95:87:fe:4b:fe:a0:9d:d6:b4:26:ff:a6:65:64:71:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:66:3F:17:DD:1E:E8:60:C3:63:78:CD:16:E6:D6:2F:FC:1B:22
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:ea:96:79:5d:1c:a4:aa:ee:c2:cd:ea:39:8b:e0:99:19:
c6:c7:e6:fc:75:d4:36:15:03:d8:81:f7:9b:e1:83:df:3c:0c:
b9:ed:d6:e1:97:ff:d5:eb:74:77:d3:2e:10:b6:14:e7:96:65:
d2:04:2d:f3:44:5f:76:3d:0c:fd:49:5f:b1:3a:36:17:09:d5:
13:ff:97:40:4b:2a:1c:00:11:6e:91:c6:67:32:06:50:dc:8c:
aa:c2:9c:67:34:7c:8f:8e:56:35:cb:c3:a2:2a:6e:7f:84:d6:
ce:f0:42:9b:a0:3d:f7:87:e2:bd:b5:51:5a:2f:fd:b5:bf:89:
9e:92:f6:d0:81:3e:10:90:18:fa:03:f8:77:40:66:bd:a7:a0:
a5:6e:ab:a7:80:6b:cc:b2:e4:fc:67:c0:01:1c:06:da:f3:0d:
77:21:6b:8c:cf:77:f6:ac:dc:22:20:63:e3:32:44:ef:3d:fc:
82:9e:fa:30:ef:52:f6:94:08:4f:ab:64:b0:a8:47:2a:83:99:
eb:e8:75:0e:f6:2d:a5:aa:37:a4:bc:82:83:ef:80:a8:a3:11:
e0:58:5e:45:0a:9e:88:0d:fe:ef:89:99:77:83:03:24:42:47:
d0:4e:35:13:38:13:33:61:32:9e:b5:ba:da:46:fb:ae:15:75:
d1:3c:b4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElQiIokvr+UdbsIuSFnF4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTYzNWZlY2VmMTcxMDllMWFjNzhiMmZiNzIyNDEwZDg0
NzdhOWMwHhcNMjYxMDEwMTAwMDUzWhcNMjYxMDExMTAwMDUzWjAzMTEwLwYDVQQD
Eyg2ZWEwNjYzZjE3ZGQxZWU4NjBjMzYzNzhjZDE2ZTZkNjJmZmMxYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdKyYMhdxGKBsVdyjzAJr7ueoviM
gAXdjLLKioC509Lx3ftSmKe/qgC+XeeQP62ap97wBo54YNFPNMtglDUHS9SvA4xm
6Jwj+56P6cd3PE1uwfkfJycK2iQ41CDzVejDyD4iWd65/vpGZeSwOKOVf1gNK0oO
0oKVJ4uU6I5mHfXFP5fWw7FpTdQhcJY/Bz89bxmRyPxCrFEKwiYH24rGLX47pgKk
TBWWXXc2AQSYGkPz8xTsBcjhGrrwbMI3B1JOEf00wolxdU5hnQKawEHjh7AQgd9T
cUwREWJytNFmDQEUvxFnXMl+luupAXPr+K6Vh/5L/qCd1rQm/6ZlZHGMCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6gZj8X3R7oYMNjeM0W5tYv/BsiMB8GA1UdIwQY
MBaAFILmNf7O8XEJ4ax4svtyJBDYR3qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEt
YTI2MDUwZWYwNDdlLzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEtYTI2MDUwZWYwNDdl
LzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwbqlnld
HKSq7sLN6jmL4JkZxsfm/HXUNhUD2IH3m+GD3zwMue3W4Zf/1et0d9MuELYU55Zl
0gQt80Rfdj0M/UlfsTo2FwnVE/+XQEsqHAARbpHGZzIGUNyMqsKcZzR8j45WNcvD
oipuf4TWzvBCm6A994fivbVRWi/9tb+JnpL20IE+EJAY+gP4d0BmvaegpW6rp4Br
zLLk/GfAARwG2vMNdyFrjM939qzcIiBj4zJE7z38gp76MO9S9pQIT6tksKhHKoOZ
6+h1DvYtpao3pLyCg++AqKMR4FheRQqeiA3+74mZd4MDJEJH0E41EzgTM2EynrW6
2kb7rhV10Ty0Ew==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:05:53 2026 by rpki-client