Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: nh64BqAhFNZTDk5idOw1ta02AmHIGYU1+4HUvCjEnzY=
Subject key identifier: 43:81:5F:3D:53:F1:36:01:A0:E4:2D:69:D7:22:9E:A0:1C:AA:B7:3E
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01A06D26D91BEE2F3187215885743805A434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0E62
Signing time: Fri 04 Sep 2026 16:00:57 +0000
Manifest this update: Fri 04 Sep 2026 16:00:57 +0000
Manifest next update: Sat 05 Sep 2026 16:00:57 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: j6R4PBCVCfK+1sg+oBF+ZsXtq0Mz9nCA1K3kucSoT58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:d9:1b:ee:2f:31:87:21:58:85:74:38:05:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Sep 4 16:00:57 2026 GMT
Not After : Sep 5 16:00:57 2026 GMT
Subject: CN=43815f3d53f13601a0e42d69d7229ea01caab73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:9d:2c:9f:da:17:0d:e9:89:7d:76:ef:90:
5e:1e:02:84:b5:94:3d:d2:58:46:8f:0f:aa:49:e1:
2b:2e:2a:1f:54:f2:b8:ec:d0:86:ed:17:ec:e0:ca:
09:1b:52:08:49:a7:9e:1d:06:5d:c0:57:9f:36:e9:
20:7b:eb:67:b0:88:a9:39:41:d4:88:f3:07:26:9f:
fb:6d:f5:58:d7:63:c6:90:39:fd:44:8b:49:68:ca:
98:81:4d:d5:f8:4a:a3:1c:c2:e7:61:df:00:28:f4:
ec:0d:91:df:d9:9c:35:5f:37:df:e9:3f:97:3c:95:
22:4b:ce:18:dc:65:f7:44:84:d7:23:61:f8:d2:0a:
21:4a:25:f9:d1:72:ee:5e:31:36:24:d4:28:c2:9a:
bd:76:d3:3e:12:39:07:86:80:b2:bf:02:c3:43:d2:
52:50:a5:24:61:26:4c:b2:fa:86:9f:d1:c2:82:0d:
d3:49:32:a0:17:8b:a0:ff:86:52:5f:bf:af:7e:df:
b9:aa:73:e4:60:2c:0d:af:7d:78:d4:d5:d8:b4:f8:
95:c9:28:e7:c0:88:e0:c1:45:d9:ad:9e:46:f9:59:
e1:96:08:b0:7d:f5:9b:c0:07:93:6e:54:b0:b7:c0:
5d:e1:f3:33:e1:74:3b:a7:ff:dc:e4:53:8e:5e:8f:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:5F:3D:53:F1:36:01:A0:E4:2D:69:D7:22:9E:A0:1C:AA:B7:3E
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:75:fe:59:87:46:b6:6a:17:0b:90:8b:bf:18:01:c4:00:
6c:26:22:d4:45:0b:00:62:4d:49:91:a5:c7:80:4d:66:e2:ed:
f7:77:40:15:93:d0:09:92:a8:6e:18:df:65:f7:c1:e5:53:6e:
67:49:bd:5e:53:48:4a:e9:df:1c:25:0e:2f:29:c1:36:3b:7c:
26:8e:3a:e2:a6:24:a3:c9:f8:59:75:1d:2e:3e:53:67:a4:f7:
46:b5:e5:09:e7:63:43:1d:3d:c3:70:c6:60:02:19:3a:c9:a7:
78:15:db:53:49:c1:bf:9b:0f:99:45:06:b0:cd:84:20:2d:01:
d3:c9:4e:37:e5:5e:89:20:ba:c3:ae:30:7b:70:f2:31:69:8a:
11:ef:23:f8:32:f1:fc:62:ed:e0:16:34:df:c1:81:18:a7:ca:
36:e9:2f:dc:19:7f:82:20:d4:8b:5a:42:96:6f:5f:06:c2:1d:
c2:e4:2c:fc:97:ce:41:d9:24:83:9f:c7:b8:76:4f:55:25:1a:
ea:7e:6b:bf:eb:0a:70:ec:49:b7:4e:5b:46:a3:c0:89:95:dc:
9e:a5:f6:2e:b5:47:c4:da:c9:9d:95:49:ce:c2:cc:fb:6f:fd:
70:12:61:2e:ca:ed:bc:20:52:74:3e:af:c7:03:97:3c:55:2b:
a7:72:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:12 2026 by rpki-client