Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: 273vZ8+IW29kwJHz2m2T9HXGCrYEeRQ8f7G+ihDOA5Y=
Subject key identifier: 5E:96:2F:D9:E4:EE:6C:55:03:F9:D5:77:FB:7C:04:12:D1:1A:59:B7
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 019D9AAC071ACB44319B754DBEF6DE3EB308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 16EF
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: FsFsUIKa9o18WqMdN+quN7WYOiVKBRxUxHbvxI3Igbs=)
2: W-RHkKjfkrIHhhnfjojvtv5e4JE.roa (hash: r2MnvbbzWy/csgN5/dHbWJgH2I2PBFo2lC7v+snNF3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:07:1a:cb:44:31:9b:75:4d:be:f6:de:3e:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=5e962fd9e4ee6c5503f9d577fb7c0412d11a59b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:01:a4:a4:e1:cb:e0:67:e4:70:7e:cf:85:
81:80:f3:b4:2d:c6:11:e6:e6:99:5c:c9:be:fa:9a:
8f:48:32:79:13:75:bc:00:5d:b3:61:4e:d0:f2:6d:
08:49:a7:f5:fa:17:13:8b:2f:39:70:d6:92:f8:5e:
d3:32:05:94:b9:28:55:18:f4:48:c8:b1:b4:5e:67:
78:c7:2c:f3:cc:c0:bd:ac:48:2c:6c:0d:fa:14:05:
37:ac:57:5c:ec:aa:a1:a2:d2:89:1c:aa:7c:26:f3:
4b:ee:8b:23:da:a1:78:de:15:a6:c2:56:63:c8:e7:
d7:22:2f:28:9a:40:fe:ad:85:98:65:5f:0f:e1:53:
cb:91:11:d9:45:95:13:e7:b0:ae:74:b3:96:d3:7d:
21:40:55:0e:32:3f:a3:b4:6b:e1:3b:1c:d5:67:83:
58:0c:00:6f:33:59:dd:24:f4:5a:c1:7b:0f:d5:64:
b9:c9:d5:c1:66:2c:ff:4a:07:e6:5e:87:b8:38:57:
1c:79:90:83:4e:5e:ff:ea:24:14:54:ee:b3:12:a0:
69:4e:f3:ed:35:e4:bd:ae:14:7c:41:59:91:df:8c:
bc:e3:52:b7:71:d4:6d:b4:8e:d3:91:32:86:91:5e:
47:c2:6f:f9:83:61:28:6f:f8:e8:7f:b9:a6:d6:1f:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:2F:D9:E4:EE:6C:55:03:F9:D5:77:FB:7C:04:12:D1:1A:59:B7
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cf:7d:e5:88:83:d0:d8:5b:06:97:27:25:ae:b8:16:e4:09:
8d:26:ba:39:cd:7b:19:b3:02:89:c4:f7:74:8f:87:b3:e5:8b:
04:89:81:f7:43:45:c7:d0:9f:7d:a6:1e:ca:f4:34:48:2f:7b:
c3:bc:e5:aa:fb:0d:1a:ce:86:37:e0:44:80:f6:f6:9d:06:44:
6d:1d:2b:e6:4e:48:1e:85:17:e3:0e:db:67:ad:2a:10:e6:4d:
38:07:5c:46:15:28:b4:da:78:ad:fe:57:1f:12:1e:c8:fb:2c:
94:24:63:75:b7:b7:91:c3:db:be:2b:a8:b1:84:f4:de:a7:a5:
d2:ad:40:47:1e:1e:b8:4a:a8:99:7c:9a:65:10:80:1e:d4:89:
34:e6:3c:f1:f3:07:72:17:06:be:65:1d:58:c8:eb:1a:68:7f:
d0:5b:73:ff:e2:1a:6e:b0:35:b9:0d:a3:53:72:ff:7e:cf:fc:
11:ed:e4:85:67:25:64:53:db:1d:a0:d3:05:eb:9b:69:36:35:
a6:c3:92:c4:f0:3a:06:16:fa:e8:b1:04:e6:cb:df:de:e1:eb:
7e:ba:b5:7f:1c:81:45:11:d4:53:7f:d3:98:03:87:f2:e9:9e:
3c:54:9d:9e:fb:bc:07:6c:7e:a1:84:3a:96:a3:44:29:18:46:
73:f1:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:36 2026 by rpki-client