Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: ZSVmNw+8ths3fkcU9A3I9MySCuBhN5b02lHqZ7YwKVw=
Subject key identifier: 74:36:DC:59:80:12:2B:14:E0:43:53:2F:A7:49:48:A7:7C:96:5F:4F
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019CC6752AFF9C12505E39AF7C1636520D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0C7E
Signing time: Sat 07 Mar 2026 04:01:33 +0000
Manifest this update: Sat 07 Mar 2026 04:01:33 +0000
Manifest next update: Sun 08 Mar 2026 04:01:33 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: J3KSNXBkLjknCQAN07dGfPyZma6CdC5OCiUHt7WWuYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:75:2a:ff:9c:12:50:5e:39:af:7c:16:36:52:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Mar 7 04:01:33 2026 GMT
Not After : Mar 8 04:01:33 2026 GMT
Subject: CN=7436dc5980122b14e043532fa74948a77c965f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:32:cd:63:89:46:30:60:ee:38:ce:86:8c:
5f:eb:27:a1:4f:8c:00:43:16:57:d9:85:17:fd:87:
eb:01:c7:7e:ed:53:bb:f2:5b:ba:a5:86:a9:b5:ee:
6f:1d:24:82:04:65:cd:24:6a:aa:33:32:bb:c3:df:
bd:b2:bb:ea:09:29:22:8e:0d:c2:5c:7c:db:d5:3c:
5c:6f:1f:c9:21:38:f2:c6:f6:51:e5:ab:06:ab:86:
97:71:84:81:91:b1:b0:ce:dc:34:fe:dc:e8:a6:90:
f5:44:a2:95:00:1a:c2:1b:b5:4f:20:54:f9:35:fe:
c2:03:a9:1c:48:3c:20:dc:61:1d:e0:06:a4:10:e2:
51:5a:1e:f1:33:bd:26:4f:8f:aa:a0:21:cb:b5:e5:
ce:b7:3b:9b:58:ea:dd:82:41:4e:35:d3:b5:2b:9a:
28:b0:75:3d:87:83:e1:8c:52:2c:1b:cd:f3:06:6f:
2f:d1:13:32:89:7d:d5:58:89:4f:70:d4:f9:22:2a:
a9:b8:3c:7a:3d:b1:3f:d2:75:85:73:e6:65:60:57:
4f:5b:09:db:95:19:b3:45:50:5e:c9:ca:d0:f9:72:
f6:74:ed:ed:0a:42:38:9a:62:9c:85:18:88:18:d7:
5c:0a:97:57:87:31:cd:8a:1d:92:3d:64:b2:0a:f6:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:DC:59:80:12:2B:14:E0:43:53:2F:A7:49:48:A7:7C:96:5F:4F
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:80:4d:ce:5f:d2:60:8e:17:19:03:78:0d:ce:c2:32:1d:c9:
4e:1f:32:67:8c:9a:2b:0d:e9:0c:60:1c:6b:8e:7a:b0:82:8c:
f6:ad:82:f8:71:c0:be:a8:b6:e4:42:9b:15:ce:3c:46:e1:46:
e9:5a:3b:66:b4:76:34:e0:ab:21:04:f1:59:fd:04:46:13:08:
f2:5a:64:b9:a0:b5:08:69:8d:80:b5:33:ca:6b:b8:17:42:02:
47:57:b2:7c:cb:63:88:eb:76:0b:82:f5:61:98:9b:60:fc:b7:
68:e4:1a:ee:c2:63:35:93:4b:16:f0:0e:b7:b8:93:91:da:f9:
b9:4d:02:6b:eb:64:57:4d:a0:ea:9f:0e:27:eb:21:50:c4:10:
9a:42:4a:3c:7b:ec:3e:80:4d:cc:45:00:18:a2:15:a6:d2:ee:
0a:8e:9f:7e:2a:0d:6d:bd:94:35:14:c5:5b:48:0e:8a:33:a7:
b2:c0:8e:8d:e9:3f:e9:e3:bd:50:4b:5c:67:39:97:af:c2:ba:
16:6a:b8:6b:84:7c:d8:aa:b0:22:ac:98:07:d4:42:5e:1b:0b:
af:5f:86:26:64:fd:6e:61:32:4a:00:cd:94:ac:ba:22:4c:9a:
96:b9:e2:13:0e:9d:19:32:3a:84:24:80:20:b0:6c:bd:73:81:
d0:96:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:15 2026 by rpki-client