Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: 1cw/7F8RdmIPgmW/OfIr4/9yaRUvsCZtGi2p70AlP3w=
Subject key identifier: 9F:55:63:5E:06:2B:29:52:D0:03:70:16:98:E6:2E:D9:7C:89:35:E5
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019D9BBF2871B266647AF3FA8A8F19CAF023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:01:29 +0000
Manifest this update: Fri 17 Apr 2026 14:01:29 +0000
Manifest next update: Sat 18 Apr 2026 14:01:29 +0000
Files and hashes: 1: Q5FhHS_MVZGd1l2ZO9zRacw2QxY.roa (hash: Wzi4Lz9Dn9AJ7LwWcDDviF0pPsw/FGU4vgm1EN+k6No=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: VV6r11x8oc+cH+oKpPj43oWFOSKDbEtpZzFUfDr5LYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:28:71:b2:66:64:7a:f3:fa:8a:8f:19:ca:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Apr 17 14:01:29 2026 GMT
Not After : Apr 18 14:01:29 2026 GMT
Subject: CN=9f55635e062b2952d003701698e62ed97c8935e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:1c:36:c2:6a:e3:90:42:51:3d:f6:4d:b2:
b0:50:7e:13:7f:2f:ac:6c:1d:12:59:59:fb:38:bd:
91:41:13:c8:3b:8f:fc:cb:69:d0:c5:ec:e6:1b:53:
61:12:0c:60:4d:13:87:a3:9d:14:34:9b:8f:c8:f2:
05:b7:b6:7f:87:59:6d:f6:00:1e:a9:ed:a9:43:44:
d7:99:6b:1c:d8:74:f3:7d:83:e8:72:a2:53:6a:69:
53:b5:fb:02:77:af:f5:4d:ed:3c:07:c1:9f:9a:4f:
99:3c:0d:30:a1:1e:74:b9:f0:cc:2f:0f:53:a4:6f:
5e:bd:b0:f1:e6:4b:2f:a3:51:07:42:89:d4:e8:c0:
60:44:bf:d0:5a:47:52:85:01:80:14:fc:cc:08:27:
be:6b:a1:c4:f4:2b:8b:4f:ab:93:4e:3a:50:87:36:
6f:22:f7:9a:ef:18:48:ea:0a:76:7e:1c:f3:19:33:
02:76:b9:92:b3:5c:16:f8:18:be:e4:0a:89:3d:39:
cb:23:b9:58:49:ac:4b:5f:21:56:3d:77:67:03:37:
f7:da:18:43:47:9a:87:4f:f8:f1:93:0b:3d:5c:96:
03:92:8f:84:a1:1d:d8:42:bf:4e:70:55:54:f7:0c:
04:a7:fe:e4:42:91:63:e4:64:51:70:f0:2d:51:49:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:63:5E:06:2B:29:52:D0:03:70:16:98:E6:2E:D9:7C:89:35:E5
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:27:57:60:a5:5b:63:d6:51:68:c8:56:33:ed:4e:ca:f5:53:
6e:97:42:f9:fe:64:8d:bc:3c:80:49:e6:74:8d:c5:9e:48:9e:
d4:1a:cf:2a:df:22:fc:bf:8d:bd:32:e8:ff:39:a5:b2:5c:d4:
1a:46:1b:d2:18:7a:d9:24:b5:f5:45:7f:0a:e8:49:77:b8:89:
2d:03:06:f7:0a:62:c7:1b:16:bc:a0:bb:dc:62:4b:c9:ad:ba:
f0:50:70:7f:fb:22:e5:ed:c2:5e:31:3e:02:2a:f0:65:76:08:
75:db:33:ef:c6:ed:e1:fa:f8:14:00:be:48:2b:39:52:93:28:
62:d1:14:1a:93:50:68:8f:67:e2:db:02:71:3f:5f:df:b6:b4:
19:4d:ee:b1:4c:bf:06:91:78:f1:58:a3:4a:aa:63:70:70:62:
b1:89:3d:a6:65:f2:71:ac:d5:54:0e:fc:6e:5e:5d:c2:bd:55:
ec:6a:65:fc:19:be:2a:6c:41:ca:5a:ec:f4:51:4f:2a:5d:85:
77:9f:bd:87:ad:eb:13:8c:c2:f3:0c:ed:11:37:37:3c:bf:5b:
27:f4:23:b0:b8:5d:4e:c5:72:2e:e6:2c:bf:0b:65:20:d0:85:
d8:a9:a9:06:d1:b1:54:7e:75:1d:1b:45:59:05:ca:3c:33:4e:
ad:35:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:32 2026 by rpki-client