Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: eZrGls/WLkRWlEi6XN+L/UfUYCEYPptWS2sX9ayEYUw=
Subject key identifier: 70:86:53:4B:67:AA:AE:B8:2C:70:56:20:6E:9C:77:79:FC:61:B8:07
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019CAE35A5EC516EF5921DBAC3A31BE11661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:17 +0000
Manifest this update: Mon 02 Mar 2026 11:01:17 +0000
Manifest next update: Tue 03 Mar 2026 11:01:17 +0000
Files and hashes: 1: Q5FhHS_MVZGd1l2ZO9zRacw2QxY.roa (hash: Wzi4Lz9Dn9AJ7LwWcDDviF0pPsw/FGU4vgm1EN+k6No=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: 0/sktHs49WKOayR3KS3bT7+1mxQPaGkyGW6Oa63FxfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a5:ec:51:6e:f5:92:1d:ba:c3:a3:1b:e1:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Mar 2 11:01:17 2026 GMT
Not After : Mar 3 11:01:17 2026 GMT
Subject: CN=7086534b67aaaeb82c7056206e9c7779fc61b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:14:98:b0:43:2d:4f:55:d8:71:14:81:9a:
2e:4b:94:8b:d2:74:85:66:72:b8:c2:9b:0f:bf:d7:
c6:35:f3:97:48:4c:51:1a:43:51:0f:02:aa:72:60:
89:9f:cd:9f:c0:c5:4b:98:bc:81:57:ea:87:04:76:
ab:4a:97:51:cb:f9:4f:50:09:eb:f2:99:ea:8a:8e:
d7:63:bf:a0:3a:5f:0f:7d:6f:76:5a:81:90:d1:13:
6f:31:52:a0:8e:3b:aa:b8:6a:42:8e:3e:d3:f8:7f:
fd:49:8e:38:b3:d5:bb:2c:87:05:31:3d:02:cc:43:
9d:4c:82:73:b4:cf:9d:10:8b:c0:ed:a0:7c:c2:5f:
e1:ce:6f:5b:36:3d:cb:0c:20:97:a4:c1:0c:1e:f7:
b5:5c:b4:56:5b:80:1e:f3:4a:2d:69:8a:73:ba:fd:
97:46:49:bd:27:6b:df:51:ff:0c:1c:de:b4:b5:d4:
ad:9b:ec:83:d9:8e:39:bd:5b:cc:0d:ce:e5:6b:bb:
6c:a0:75:60:b3:bd:0a:48:83:56:ec:b3:c6:bd:77:
c7:fa:4f:5a:43:3a:cf:2d:50:3f:bd:7f:4f:f7:6a:
7d:c5:01:be:5d:26:a8:6f:be:aa:85:09:46:d3:9a:
fd:3d:de:07:af:67:64:d4:e3:78:f8:e5:ed:04:a5:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:53:4B:67:AA:AE:B8:2C:70:56:20:6E:9C:77:79:FC:61:B8:07
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d5:0a:9f:73:23:0a:96:d0:4e:3a:33:ff:ef:7e:1a:dd:d4:
ab:72:a9:da:55:e7:e3:90:c8:df:5e:90:83:86:c0:b4:19:0a:
fa:7b:b2:50:ba:df:63:a1:b2:df:f4:6f:2a:59:8c:8b:0e:7f:
5d:79:2d:48:bb:c8:1f:6f:23:70:82:85:c0:d6:fe:ed:a1:ed:
31:f9:a6:4e:2f:a9:4c:47:92:37:a7:3b:35:84:0a:24:98:6a:
cd:27:c8:7c:9a:d8:9e:8e:ec:ea:f8:1f:9a:91:8f:83:0a:c1:
e1:c3:9d:7b:5d:28:54:bd:ff:c3:01:cb:35:a5:dc:97:86:2b:
76:8c:14:6d:26:f8:de:c2:a1:14:82:a9:32:14:72:60:f1:bf:
16:2d:51:57:53:c2:67:0f:94:5c:cd:42:ae:9a:7d:69:83:ea:
41:b5:f9:db:fa:c5:db:a5:24:0c:a0:3f:b7:ab:36:7c:e3:b1:
b1:15:09:93:20:03:a2:10:b2:c9:ac:bc:ab:cb:9f:37:b3:f0:
8b:9a:df:cb:e3:c9:5b:98:33:d4:a8:0d:c5:4e:fc:b4:57:9a:
56:dd:ea:09:78:c6:44:3c:55:99:39:ba:26:09:f2:fa:cf:25:
06:2b:4b:66:fd:8d:52:37:ba:00:98:3f:69:49:48:50:cb:1e:
5c:29:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:37 2026 by rpki-client