Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: eFb/eYuQQvqSMXtlHZ0PopSpGCbje2rYBksM6+bZDwI=
Subject key identifier: EE:0A:C8:BB:80:83:FA:74:61:69:25:03:F5:F8:0C:A8:25:7A:EC:75
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 019CAB34012CAAD7283A30469B56B4CD2E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 1673
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: lOhuffsW7ESb3KPR2uZjpf/i/iKYKUsTn44K7+81fpY=)
2: W-RHkKjfkrIHhhnfjojvtv5e4JE.roa (hash: r2MnvbbzWy/csgN5/dHbWJgH2I2PBFo2lC7v+snNF3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:01:2c:aa:d7:28:3a:30:46:9b:56:b4:cd:2e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=ee0ac8bb8083fa7461692503f5f80ca8257aec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:aa:a2:ba:cc:80:f1:62:6f:9e:77:d2:4a:
9a:8b:f0:71:15:b3:d9:96:57:af:a4:72:13:ea:6c:
0e:22:84:5c:5d:e7:01:e5:e1:14:cd:cb:1b:b6:d4:
f3:ff:5c:3e:0e:41:d9:bd:81:28:82:25:97:13:8f:
2d:38:37:cc:b3:ee:d9:4b:27:00:8c:66:6d:05:83:
e7:9a:a3:4a:e1:69:00:bf:ce:a6:50:44:0d:e5:9b:
09:aa:eb:e1:71:9a:7c:86:85:b5:cd:74:02:26:13:
de:97:26:81:a1:e2:32:ea:8d:7a:5e:af:d1:5d:96:
8a:8d:3a:83:01:13:dc:46:43:fd:ce:4f:ac:18:eb:
38:a8:b2:bb:74:8e:a9:08:b4:1e:54:56:5e:5a:98:
a3:c0:5f:af:53:90:8c:84:75:b6:1e:95:9a:2e:6a:
00:00:1b:dc:35:ac:ce:67:dd:bf:9e:68:d1:3c:7a:
7d:e7:da:ca:23:a8:2f:61:0a:98:8e:70:29:dc:05:
a8:a0:43:fc:d0:9b:ce:e2:67:ed:30:66:7b:b6:67:
fc:29:a2:30:47:1e:42:ad:55:61:0c:7b:3c:ca:db:
3b:6f:22:b6:ae:b0:de:24:92:df:00:17:a5:73:e6:
d1:4d:55:cd:4d:83:c6:12:8f:bc:4c:ce:3a:c2:83:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:C8:BB:80:83:FA:74:61:69:25:03:F5:F8:0C:A8:25:7A:EC:75
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:16:82:0d:75:ce:66:9b:c6:d5:35:0c:63:08:19:f4:ca:01:
29:5f:9a:19:0f:5f:7f:60:33:7d:b6:37:bf:46:61:85:71:de:
fd:75:2b:f8:11:67:c1:db:79:f2:59:03:60:90:7c:2c:22:e4:
fa:50:64:ee:f0:0d:20:72:f3:73:ef:b5:b3:85:3c:02:27:09:
13:f5:d2:80:34:16:92:a5:17:e6:3a:85:91:b8:b7:c1:ef:a0:
27:b0:87:d6:d7:09:42:fd:77:c6:d9:78:ce:ea:28:7f:2d:36:
76:cf:16:b8:40:bf:f1:19:f2:35:69:02:47:42:1b:6c:9d:e4:
fc:25:0a:ce:b9:ab:a7:45:8e:56:63:75:20:18:43:03:f1:85:
c6:d9:9e:04:e2:ce:f7:83:1c:23:85:2e:52:e4:df:9a:d8:83:
98:b2:e6:84:e6:61:2e:ba:1c:a4:c9:a4:6a:52:f3:21:29:c9:
99:7f:47:1b:86:fd:bc:99:99:05:f0:02:c5:8b:e9:ec:29:02:
d8:31:36:a2:81:ac:0f:36:2b:3c:d3:41:3d:93:0f:8c:43:8e:
bf:56:d3:bc:d0:af:d3:8a:8c:88:77:aa:a2:9d:55:2f:a5:1c:
31:3b:19:d9:97:4f:89:7e:83:e7:f2:b4:2b:4b:d5:64:b4:c2:
0c:b0:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:45 2026 by rpki-client