Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: OkwE7dfVWeaaWl2Y+80UIahkXv1UMFyKWEXuGGzCrxU=
Subject key identifier: 11:5E:D2:A1:8C:4D:7A:2F:D1:E8:3A:97:2F:09:09:11:04:3A:76:43
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 019CACEB6917B5782B191E1A7B6E04D19EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:34 +0000
Manifest this update: Mon 02 Mar 2026 05:00:34 +0000
Manifest next update: Tue 03 Mar 2026 05:00:34 +0000
Files and hashes: 1: 9QydodLxK9rUXP9S5hg2oY8e164.roa (hash: 9FAzjdLFT8fn52nXr1/CoNt7SxfwNxZtFTZWh8c6oZI=)
2: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: aDf1WeNZT+wh/DTSx7/gBtemC75ro2odVLPMiE5AP2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:69:17:b5:78:2b:19:1e:1a:7b:6e:04:d1:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Mar 2 05:00:34 2026 GMT
Not After : Mar 3 05:00:34 2026 GMT
Subject: CN=115ed2a18c4d7a2fd1e83a972f090911043a7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:bf:fd:3a:8e:19:1f:ba:ca:26:45:9e:56:
ee:a9:04:3f:69:a8:e5:8f:d1:79:a1:eb:59:84:9f:
f5:50:62:b1:6c:26:d0:cd:88:31:af:ec:a8:3f:f1:
d4:d4:f3:25:68:d0:42:f8:ac:36:c5:a9:4e:76:09:
7d:6b:6e:62:5f:a1:80:c0:b3:86:bd:64:ba:12:8d:
bb:9d:1c:39:d3:c9:8e:e3:e0:e2:e7:7a:12:52:ec:
15:d2:7e:14:0b:60:ac:9b:83:84:87:fd:8b:c7:fe:
06:a5:c4:1e:5b:b7:b7:7c:5f:0f:61:d6:d6:1d:e9:
d2:13:57:e9:4d:ea:da:90:48:30:2b:88:93:9a:7f:
fb:93:10:33:37:40:e8:e1:af:6c:a1:77:ef:86:b1:
fa:12:2b:49:23:c1:35:4f:d3:87:da:ed:a1:6b:1b:
e6:ef:b4:82:ae:4c:00:75:9e:18:4f:2f:07:38:92:
dc:d2:c5:77:f3:79:a0:d9:11:26:b8:a0:a9:d2:82:
13:ab:25:ea:32:92:08:96:74:e5:b5:b9:09:3f:9b:
c6:f8:03:b7:9f:ad:7d:d5:2b:a3:ac:06:b5:38:e6:
6d:84:9b:ab:68:2e:61:b9:ab:3d:df:8d:c6:88:57:
7f:5d:c9:74:03:cf:51:b6:df:da:24:d8:14:bf:6d:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:D2:A1:8C:4D:7A:2F:D1:E8:3A:97:2F:09:09:11:04:3A:76:43
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:bd:9f:11:48:b0:e4:fe:ec:e7:e2:0a:eb:ad:d6:dc:e0:
b2:1a:48:27:d0:77:99:10:1d:f0:67:ef:2f:93:d2:9b:0a:89:
f6:c4:a8:10:0e:53:9e:79:9e:71:27:66:27:c3:6f:37:b2:d9:
21:1a:99:86:eb:e9:5b:12:db:ba:10:d5:3e:45:95:fc:0e:84:
ff:a1:a3:7b:2b:97:9c:28:ba:07:73:4a:aa:eb:dc:1e:79:28:
f8:3d:6b:2a:20:c9:12:7b:ba:d5:e1:39:05:cf:d9:30:eb:b7:
6e:a4:7f:81:f4:51:76:16:c4:ee:0e:49:40:16:00:5d:cf:a4:
3e:d4:0d:96:ba:57:28:58:13:23:9f:5a:88:76:62:c5:9c:25:
84:76:d6:0c:23:33:80:c3:fa:b8:49:be:09:92:56:43:74:00:
ef:fb:9f:3e:fa:ce:3d:87:15:de:eb:f0:eb:0d:3d:6c:52:07:
c6:96:58:53:6d:50:cd:1a:c8:83:45:5d:c5:cf:5e:a6:f3:ad:
e3:38:4b:ba:07:97:30:41:22:a2:d7:18:57:b9:45:a5:dd:8a:
26:36:c5:90:f9:f3:95:34:ae:06:32:2f:a0:32:a8:ab:c3:4f:
bc:e7:de:d0:68:36:f4:34:45:11:c8:5b:60:50:04:3f:3f:20:
0d:3e:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:13 2026 by rpki-client