Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: yane+I6Nd8dnZU1npCNpTbHHzxfKZQhZ35s9njXa8eE=
Subject key identifier: 35:04:E8:57:01:2D:DC:69:52:D7:E9:35:D1:52:FE:4C:9B:90:6C:7E
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01A15AB0D4606CA997726F85B42C4C5AE5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0EDD
Signing time: Tue 20 Oct 2026 19:01:40 +0000
Manifest this update: Tue 20 Oct 2026 19:01:40 +0000
Manifest next update: Wed 21 Oct 2026 19:01:40 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: RSc1H/0RCIqaN/wb7bCYGQQNvIClrXlC8m9JnhvQMBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:d4:60:6c:a9:97:72:6f:85:b4:2c:4c:5a:e5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Oct 20 19:01:40 2026 GMT
Not After : Oct 21 19:01:40 2026 GMT
Subject: CN=3504e857012ddc6952d7e935d152fe4c9b906c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:0c:14:12:4f:09:8c:17:f9:33:7a:c2:b6:
e8:03:be:ae:25:3d:38:b2:d2:68:8c:b1:05:c7:91:
02:2b:f9:e6:e1:73:ba:a3:fa:9a:d2:4d:b9:b2:28:
4d:3e:1e:d9:b7:46:40:bc:36:01:c4:e9:67:b6:8c:
e3:22:66:cf:a5:12:74:47:a3:3f:2d:d4:e9:bb:48:
b2:6b:d1:7e:b9:f3:99:34:72:21:36:b3:9e:0d:44:
06:9d:5e:21:f7:d3:80:c4:9b:09:4b:e0:2f:78:82:
c2:8c:63:4f:6e:9f:7a:20:fd:f1:2f:9d:0b:0f:dd:
51:65:3b:4b:55:ad:4f:01:a4:70:ea:db:cd:2b:e2:
93:49:0e:35:21:ed:bf:d1:04:35:6e:6e:0f:23:da:
84:d3:0d:eb:75:08:8b:f0:92:a1:c5:d1:f4:6b:b4:
61:ce:d0:84:6c:81:4b:8b:27:d7:76:f0:18:b9:d1:
ce:83:13:74:5c:70:e2:4e:83:66:c4:69:26:e8:93:
56:2a:f5:06:fb:c2:51:3f:16:81:b1:67:88:0b:07:
e0:90:3f:fe:ff:0e:de:ab:f8:a3:d0:bd:a0:68:4b:
bc:ac:de:29:3d:a5:86:e3:a0:02:a2:cd:1d:db:a3:
ab:a6:af:44:2d:54:d8:b9:b4:cd:05:f2:8f:85:6a:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:E8:57:01:2D:DC:69:52:D7:E9:35:D1:52:FE:4C:9B:90:6C:7E
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:a6:ef:6a:d5:c8:c4:ac:2c:a3:2b:3f:8a:ac:7f:0a:90:
f7:42:23:b7:98:c0:97:fa:ae:67:66:c8:59:ab:a1:25:20:cb:
ba:f1:87:d7:b6:7a:37:b5:86:47:99:c8:fe:f0:20:93:47:6e:
85:b0:d6:43:a2:e7:1b:fb:cc:c5:3e:af:44:91:77:c0:fd:b3:
70:2d:30:88:bd:55:4e:72:14:5a:b0:c6:5e:45:dc:0d:4a:22:
03:38:b4:80:79:c4:e1:c7:35:00:66:2a:84:3b:00:e5:df:1a:
a7:5e:08:61:a0:8f:2d:cf:99:a1:4c:1c:39:89:97:ee:df:ef:
33:0a:64:c3:7c:d3:d3:73:26:83:1e:ac:08:33:a5:c6:b5:c3:
1d:63:9f:9c:b7:8b:07:49:1c:69:f4:07:e4:cb:93:00:2c:45:
17:60:2b:70:d9:11:df:08:05:07:6d:38:87:52:93:9b:35:8b:
63:af:ba:f0:9d:03:7e:d0:d6:9f:d1:27:74:c8:e6:91:5a:50:
0e:5f:5f:7d:50:c1:df:59:f2:3d:30:9f:8d:8a:84:e9:f6:01:
c6:5b:aa:51:64:b7:b1:7f:7d:6e:df:31:b3:07:b6:6a:0e:b4:
e6:10:ec:f1:7e:bb:e8:11:e1:2f:18:8b:4a:e3:60:50:3d:2a:
ee:74:e4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:22:16 2026 by rpki-client