Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: jNC8GlVKlHdVic7vtv/msfvEVQkzIa0ayezWwrM2qYA=
Subject key identifier: BC:71:88:22:77:8E:C2:DD:28:92:97:B6:E1:2F:AB:93:F3:97:45:13
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019D3789586D0C57942AC95EA21F7B6EFFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: 04wE559PpiedR5ixPSnleE4T+ym3Pb1NAAeRTWOqDxc=)
2: lV6i9HMGJoauyywXtNVMngtUYcw.roa (hash: 12sx9g61Ie6Zxf7JQ+oShflzzu8hN9b9J5QtxLChp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:58:6d:0c:57:94:2a:c9:5e:a2:1f:7b:6e:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=bc718822778ec2dd289297b6e12fab93f3974513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:91:c3:fe:c1:ab:92:39:d7:f3:af:fb:0a:
09:9e:56:30:ce:bd:32:1e:94:4a:04:11:d1:06:59:
18:ca:9c:36:8e:54:0e:b5:ec:d1:74:39:b8:d2:25:
8d:aa:3f:7a:d6:d4:fb:44:fa:de:63:8f:36:3f:f7:
44:da:cd:96:93:1e:d2:5c:45:ee:0f:a5:37:4b:a6:
59:79:41:0e:f7:98:0b:1d:2f:09:2e:08:1a:77:cd:
26:02:a1:e8:84:70:3d:f0:ba:27:f4:4a:07:ad:cf:
52:e7:cf:db:44:cf:02:5e:86:93:87:4a:2a:9a:03:
42:d1:56:c7:b8:df:38:52:88:5f:d2:e3:5f:24:23:
1a:21:ea:a2:e9:bd:c9:81:93:4e:0f:6f:21:1d:d8:
f8:be:14:f9:02:3b:4d:1e:80:2e:d9:11:1f:0a:a8:
ab:32:fe:3f:14:ad:96:23:51:b7:74:d6:a0:3b:a1:
b9:aa:28:b9:17:46:ab:06:92:13:21:00:7c:e8:53:
bd:33:4c:36:7f:94:5b:a8:af:f8:8b:7e:4c:1e:82:
bf:08:e6:0e:7c:47:53:f0:0f:c1:b4:48:c5:1a:93:
33:eb:ad:de:f3:d9:93:cc:ea:11:2e:18:0f:4d:e4:
ab:13:ab:e5:9a:75:38:5c:f6:ba:eb:6f:23:04:c7:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:88:22:77:8E:C2:DD:28:92:97:B6:E1:2F:AB:93:F3:97:45:13
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:0b:28:57:a3:de:82:c1:c7:73:e8:f5:99:a1:61:a9:d5:
72:1a:be:be:c0:7b:4a:ed:73:12:89:6a:c9:a3:fb:52:19:04:
9d:6c:e6:da:4e:0d:aa:f4:ed:4f:f5:25:68:3e:95:ac:b9:87:
96:93:f2:cb:48:18:3c:16:19:0c:b3:c9:bb:eb:36:f5:9a:58:
39:4b:d2:fe:af:9f:1b:9c:74:81:68:00:82:d0:04:a2:79:70:
59:16:67:a5:58:1a:49:74:26:e4:54:bf:6a:c9:97:ff:41:d4:
7d:26:9f:d7:89:79:80:7b:4a:7a:09:ec:c6:b2:e1:fb:c9:16:
49:ba:5a:b7:95:c2:55:c8:a4:87:ef:74:d3:24:d8:ed:66:a4:
0b:9d:39:62:eb:0f:3e:9b:72:a7:88:ad:d0:fc:35:bf:00:b0:
ee:e4:f1:12:5a:00:28:de:c8:24:b9:b7:08:61:03:e2:c5:ef:
96:2e:e3:ad:56:20:94:4f:b5:b7:91:2d:9e:95:ae:22:bf:37:
40:f2:87:bc:c8:65:fd:59:cc:26:cd:2d:ce:17:82:79:78:7b:
8b:17:ed:62:d8:ed:56:ba:18:f5:7b:2a:f5:87:16:be:b1:8c:
e1:a3:f5:f7:32:27:bd:c8:a9:4f:0d:18:a8:28:2b:76:69:6e:
5c:f9:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:03 2026 by rpki-client