Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: CmeTmjVsCQblB5zZbQfDbC9AFn6wcQDTwBlXyc8EwbM=
Subject key identifier: FD:6B:8A:BD:01:A7:05:8A:55:F5:29:98:0D:C2:50:A8:E8:7F:81:1B
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019D38D373C208FBD0CF47B8A04080DE853B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: Tz1-N59sSfd-X1uanpY0uE0n3Z8.roa (hash: TjI9Conr3Wy1dhn8UqIMqHZ2WlgAzdiybMSutLCTCzk=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: LUOEZlODKtFW0M4OQuUOAOpeSPY5CXaoNBwg7XHNX7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:73:c2:08:fb:d0:cf:47:b8:a0:40:80:de:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=fd6b8abd01a7058a55f529980dc250a8e87f811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:f1:fc:dc:19:9b:31:7d:18:85:11:92:f9:
45:a0:e5:f3:ee:0e:83:5a:62:6e:35:a8:2e:75:92:
3b:8d:af:ca:eb:1a:33:e7:ff:fe:c3:cc:12:ff:79:
d1:61:32:b6:1f:d7:8f:7e:62:69:47:15:0a:97:cb:
dd:11:ac:1e:e2:b1:1e:c1:5f:40:d3:0b:d7:ad:25:
5d:c3:f7:a0:91:48:43:2d:c0:e1:22:de:80:65:2a:
8a:d5:f3:2f:12:da:d6:95:8b:fa:fe:e5:89:46:91:
4d:be:e8:4f:f5:1f:c7:d5:f6:00:5d:c9:b7:ca:f0:
ed:26:c7:e4:8f:ff:e7:8d:4b:79:19:4e:2e:9a:11:
b7:d2:55:60:6c:22:b7:19:26:4f:32:93:28:3b:60:
6b:6f:94:06:e4:a6:9a:1f:9a:5b:ca:e4:26:62:7f:
26:59:ba:c7:88:a7:7a:03:61:78:8e:23:00:4d:fa:
a6:3d:98:cb:38:a2:31:97:d7:cd:57:ba:5c:10:a0:
6c:54:9c:d3:9e:bc:fc:fb:85:18:27:e7:20:51:1b:
40:09:0d:b7:d5:a7:62:15:19:0a:23:41:aa:6d:43:
b6:0a:3a:52:2f:09:d5:9b:26:ae:e2:18:20:7f:98:
b9:22:72:2b:f8:04:6b:12:ff:c6:88:79:f1:6c:c9:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:8A:BD:01:A7:05:8A:55:F5:29:98:0D:C2:50:A8:E8:7F:81:1B
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6b:b7:0a:e8:2e:3b:e3:ce:8d:2d:55:c7:ac:79:84:d3:52:
fe:26:90:ba:61:4d:0f:07:ab:17:f5:e8:2a:cc:40:9e:64:7e:
6a:8b:99:18:9a:25:8d:96:8e:24:59:a5:9f:67:0e:52:dd:9d:
67:7a:82:4f:bc:6d:1c:66:f8:74:b7:74:d0:cb:c1:9d:73:92:
2e:07:6d:14:23:a7:c4:58:fd:f6:09:29:7a:45:87:c4:75:4e:
f0:f3:d3:e9:60:28:b5:46:bd:72:12:da:1e:ef:d1:c5:8c:5f:
8e:c4:41:aa:74:43:9f:19:29:17:e7:12:44:5b:76:9e:eb:08:
28:70:f0:57:28:e9:e1:b8:ba:52:89:1c:75:ce:94:58:54:6c:
42:71:1d:1b:0e:5f:66:fe:3a:3c:ab:d7:43:aa:58:85:10:b4:
c5:36:64:58:ec:3c:59:db:dd:7f:7e:3b:e2:b1:d6:7a:42:1f:
f2:ee:4a:f8:7a:22:f9:7a:6e:50:be:48:01:42:10:04:36:e8:
81:43:ed:10:9c:e4:87:ca:70:fe:cb:90:9c:a4:44:23:ed:7f:
3e:16:cc:b7:4a:16:f8:27:5a:db:e0:f7:0b:96:85:72:9b:6e:
90:5e:0e:ac:16:17:d6:ae:3a:9b:f9:98:36:1e:53:fe:c3:24:
d5:ba:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:32 2026 by rpki-client