Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: Ms+rLmD8eiDelnf0wRnBifWH5iTf7pDYTX4h0LbUWfI=
Subject key identifier: AC:19:F6:E5:EF:D8:06:DB:4A:B0:5C:25:13:98:A5:FC:D7:7F:3A:4A
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019E99CD7F832C93AEF8AC557C63EE194F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0D70
Signing time: Fri 05 Jun 2026 22:00:41 +0000
Manifest this update: Fri 05 Jun 2026 22:00:41 +0000
Manifest next update: Sat 06 Jun 2026 22:00:41 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: osO/ecL/gRDhgYzuDDH6w1M62JN3hXIdL4uN/W83lLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:cd:7f:83:2c:93:ae:f8:ac:55:7c:63:ee:19:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jun 5 22:00:41 2026 GMT
Not After : Jun 6 22:00:41 2026 GMT
Subject: CN=ac19f6e5efd806db4ab05c251398a5fcd77f3a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:fa:fc:9b:2e:fc:20:76:90:68:85:33:92:
c4:9c:ff:e1:7d:2d:27:b9:f1:2b:fb:e0:e4:f4:5b:
8d:cc:d8:34:f9:a9:30:ba:84:30:59:49:96:c4:c4:
ce:17:0d:22:6b:e4:35:75:a2:1b:70:6a:c2:f7:2f:
13:fc:ee:da:0a:93:c9:e8:8c:66:d0:9f:10:97:3b:
bd:bf:00:ab:69:2a:5c:05:fc:18:b7:77:2c:65:f7:
ce:25:de:b8:f6:be:1c:15:4c:b7:25:6b:db:61:6f:
c7:35:db:13:29:9c:3b:11:ae:6f:63:86:06:36:f8:
98:4e:ac:39:a3:4d:84:17:5e:ce:52:92:1d:d4:2c:
67:99:81:3e:b6:dc:57:9d:ad:9a:97:59:bf:0e:22:
1f:d5:35:a5:17:16:34:c9:a8:9f:af:0f:e1:f2:fe:
8a:82:52:5d:7e:d5:f9:1e:15:a8:46:9f:35:11:45:
f4:31:d0:1e:dc:b7:4a:80:78:f8:aa:e8:e7:cb:2a:
a7:27:6f:c2:05:95:82:d3:b1:de:84:f4:05:69:4a:
ec:ee:53:ff:07:f3:59:33:d4:ac:03:84:b9:b4:da:
7f:2f:9e:3e:6e:ab:7f:b3:54:81:ab:33:62:1b:28:
7e:03:03:ea:60:88:d1:ed:54:4f:f2:bd:e3:f8:de:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:F6:E5:EF:D8:06:DB:4A:B0:5C:25:13:98:A5:FC:D7:7F:3A:4A
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fb:e0:1d:24:d1:6f:aa:9f:fc:74:b6:26:4b:19:16:ab:fa:
d7:da:dc:d0:14:60:99:3a:47:96:e4:c3:c8:b3:b0:d5:b1:ca:
5e:77:74:e9:19:bf:07:7f:6f:a8:84:d7:5f:f6:7c:12:a5:79:
51:fa:3f:97:40:dc:8c:c6:ed:69:b2:33:a0:d2:78:ca:9a:ff:
e6:03:7e:b6:24:95:68:7f:cc:a1:9c:c6:a9:34:e9:e6:ee:0a:
21:6f:00:0f:e7:8c:a8:7e:0a:56:e6:83:18:00:f0:cf:a5:d1:
1d:3e:d2:be:aa:b9:a7:c7:4d:2f:ed:61:6e:79:ce:df:3c:a1:
2f:7f:37:32:db:fd:c4:a6:81:4e:14:d4:cd:6c:3f:c3:39:05:
c4:0b:f8:b1:4b:5f:ee:e7:b4:6f:07:03:5c:7a:8d:19:81:04:
72:7a:c8:a3:f2:5f:79:10:f2:7e:86:f8:5a:7b:fe:78:9f:8e:
30:c6:79:e5:ab:42:cc:c6:4b:3e:07:d2:2b:08:0d:78:a6:5b:
96:a4:a1:dc:f7:10:0e:63:9a:52:04:cc:96:c6:21:8a:ff:4b:
5a:f9:8d:16:7c:fd:a4:00:62:db:96:1b:2e:84:58:52:4d:91:
8d:5e:15:f1:34:9d:c5:ac:ed:f4:e7:2c:08:a5:dd:d8:6a:a3:
af:57:da:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6ZzX+DLJOu+KxVfGPuGU9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjYwNjA1MjIwMDQxWhcNMjYwNjA2MjIwMDQxWjAzMTEwLwYDVQQD
EyhhYzE5ZjZlNWVmZDgwNmRiNGFiMDVjMjUxMzk4YTVmY2Q3N2YzYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7v6/Jsu/CB2kGiFM5LEnP/hfS0n
ufEr++Dk9FuNzNg0+akwuoQwWUmWxMTOFw0ia+Q1daIbcGrC9y8T/O7aCpPJ6Ixm
0J8Qlzu9vwCraSpcBfwYt3csZffOJd649r4cFUy3JWvbYW/HNdsTKZw7Ea5vY4YG
NviYTqw5o02EF17OUpId1CxnmYE+ttxXna2al1m/DiIf1TWlFxY0yaifrw/h8v6K
glJdftX5HhWoRp81EUX0MdAe3LdKgHj4qujnyyqnJ2/CBZWC07HehPQFaUrs7lP/
B/NZM9SsA4S5tNp/L54+bqt/s1SBqzNiGyh+AwPqYIjR7VRP8r3j+N4hawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwZ9uXv2AbbSrBcJROYpfzXfzpKMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPvgHSTR
b6qf/HS2JksZFqv619rc0BRgmTpHluTDyLOw1bHKXnd06Rm/B39vqITXX/Z8EqV5
Ufo/l0DcjMbtabIzoNJ4ypr/5gN+tiSVaH/MoZzGqTTp5u4KIW8AD+eMqH4KVuaD
GADwz6XRHT7Svqq5p8dNL+1hbnnO3zyhL383Mtv9xKaBThTUzWw/wzkFxAv4sUtf
7ue0bwcDXHqNGYEEcnrIo/JfeRDyfob4Wnv+eJ+OMMZ55atCzMZLPgfSKwgNeKZb
lqSh3PcQDmOaUgTMlsYhiv9LWvmNFnz9pABi25YbLoRYUk2RjV4V8TSdxazt9Ocs
CKXd2Gqjr1fa3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:41 2026 by rpki-client