Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: 66p27n6BNLdaGTLSsACVeUqVuMbV8iWC4X10uKxBvxI=
Subject key identifier: AF:D9:B5:72:BA:40:B2:0E:DD:55:A2:5C:31:36:7D:AC:DD:DD:46:97
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019F837AE5E403F50389CCAE5B0DF7C3BD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0DE9
Signing time: Tue 21 Jul 2026 07:01:37 +0000
Manifest this update: Tue 21 Jul 2026 07:01:37 +0000
Manifest next update: Wed 22 Jul 2026 07:01:37 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: IxQnbsXgCuOuqgLssKitiSZzirlUFlUzBXeYHtCqGSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:e5:e4:03:f5:03:89:cc:ae:5b:0d:f7:c3:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jul 21 07:01:37 2026 GMT
Not After : Jul 22 07:01:37 2026 GMT
Subject: CN=afd9b572ba40b20edd55a25c31367dacdddd4697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:03:ad:97:51:60:bb:09:1d:f9:b4:eb:8b:
74:49:4e:d3:4d:f8:33:28:ed:f2:81:19:a7:f3:d3:
17:27:f2:c0:50:c8:28:5d:f7:7a:15:34:e7:d2:d5:
e3:5c:9d:aa:f3:42:45:ff:22:68:f6:32:98:5f:eb:
b5:d4:3c:cd:83:0d:87:ba:e5:36:6c:e8:9d:d5:7f:
b1:fe:3f:04:31:51:87:b7:6e:54:7e:d9:cc:ba:9e:
09:80:80:97:32:6c:bc:81:30:0c:4e:77:ca:50:68:
78:5b:5c:84:29:15:d2:e6:9f:c0:0f:3a:2f:03:ff:
54:31:54:5b:c9:89:3a:7e:7c:c0:36:f5:8c:54:fa:
1b:de:d8:c2:3b:1e:ae:cd:47:ad:33:9c:28:8d:66:
df:49:48:f6:29:a2:93:04:a2:48:72:ad:eb:66:ad:
81:43:ac:91:f1:df:79:2f:79:74:66:7d:79:f2:2b:
98:16:46:12:74:11:c5:e0:9e:81:33:e6:a9:a5:f0:
5e:fa:2b:89:ea:42:96:5b:20:ac:0c:15:c3:68:fb:
fe:80:5b:77:65:f6:e9:6d:c4:a4:73:68:13:80:5b:
56:3a:9d:c1:69:24:54:71:5f:6a:7b:5d:84:8b:c6:
28:ae:b7:e1:67:5c:46:11:90:55:cd:9c:44:d5:ea:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:B5:72:BA:40:B2:0E:DD:55:A2:5C:31:36:7D:AC:DD:DD:46:97
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:c6:c5:e8:0c:f2:91:b9:e0:36:32:b7:11:0a:7b:37:91:
ea:20:ed:1f:00:07:46:43:bf:ec:cb:d1:0d:71:43:d6:3c:6f:
c4:f4:2b:02:af:2c:4f:41:c5:77:51:17:12:f7:cd:b8:d7:32:
a1:5d:9c:ab:43:be:39:ed:97:2c:06:14:94:c9:c2:06:84:ba:
cd:5b:68:c5:49:c9:73:95:5b:03:ef:f8:b6:3a:6e:2e:5f:33:
55:0a:f7:0e:44:e3:63:0b:28:af:e8:d8:de:66:62:86:c7:2f:
07:22:fd:ae:3b:15:7d:6c:e1:0e:3b:ed:27:fe:3a:db:0d:41:
fa:25:0c:23:65:cb:a2:1b:55:85:d6:ec:f1:2d:90:92:3c:15:
e9:f5:3b:d5:e1:bc:7a:33:b7:6c:82:41:05:af:08:fd:28:00:
2c:31:1e:ae:0c:73:05:b2:0a:95:d6:f0:49:03:1c:a8:d2:1d:
30:7a:9d:ec:cd:d8:74:5c:86:b6:ac:9a:f6:cb:d9:af:6f:24:
89:bd:2b:12:0b:c4:96:76:20:fc:ab:e2:f7:1f:11:f9:9c:fc:
6f:2f:e9:09:18:08:35:e6:89:18:38:de:d8:49:52:fa:4e:a5:
70:b4:70:85:64:d2:3f:88:9e:4a:85:d4:23:5b:91:60:8b:5c:
74:f1:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:31 2026 by rpki-client