Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: hREV1wbSvJwvbmhlZiBOVAX9LS1mzy6B6ZZ3HQRHT58=
Subject key identifier: F9:F0:18:29:5D:5E:4B:EE:50:3B:01:17:35:0A:B6:85:1B:36:4E:34
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019DB020F50E999347C9A1E20E5237C8F5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0CF7
Signing time: Tue 21 Apr 2026 13:00:43 +0000
Manifest this update: Tue 21 Apr 2026 13:00:43 +0000
Manifest next update: Wed 22 Apr 2026 13:00:43 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: OKSJ0CuzpUrg2hm2IQXblHMOsGZvjceok6g/SlqD4ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:20:f5:0e:99:93:47:c9:a1:e2:0e:52:37:c8:f5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Apr 21 13:00:43 2026 GMT
Not After : Apr 22 13:00:43 2026 GMT
Subject: CN=f9f018295d5e4bee503b0117350ab6851b364e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:fd:2d:c9:c8:ff:18:55:21:9b:6f:76:ff:
18:60:c2:ef:ec:16:10:46:58:12:2f:71:0f:d7:fa:
1d:a4:06:46:9c:22:0d:81:0b:fa:50:39:68:92:0c:
a8:49:0f:f0:0f:7f:3a:d7:97:4c:47:3d:94:88:3b:
8f:d1:21:08:ff:94:21:9f:67:5d:b7:cb:7c:06:be:
5d:b5:ba:c1:88:29:98:51:7f:16:14:f4:6d:6a:ed:
65:6c:7f:0f:5c:ce:34:54:bd:c0:e8:b4:60:08:de:
ec:35:22:7c:49:bc:47:ed:18:b8:80:85:f3:b8:d7:
16:b2:8a:04:f5:b1:c5:69:66:55:30:11:c7:0a:5a:
89:9f:b5:f1:58:77:c5:4e:6d:58:68:01:43:3e:20:
e1:2e:4e:f3:b6:03:6b:d5:57:ca:7e:d6:96:ae:c6:
a0:78:1f:d7:a0:51:be:bd:b3:94:87:de:e8:3c:ce:
81:6a:ab:ba:34:41:93:ac:78:0e:e0:10:aa:79:0e:
b0:12:c4:39:eb:8a:f1:30:c8:d2:57:65:46:db:2a:
e0:6e:63:d4:db:48:c1:7b:ee:4c:e4:e2:3e:cb:28:
4b:8a:ca:55:4d:e1:66:5c:d5:0c:14:cf:27:09:86:
da:e2:12:57:14:51:7e:b0:98:c4:55:b4:2d:d1:73:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:18:29:5D:5E:4B:EE:50:3B:01:17:35:0A:B6:85:1B:36:4E:34
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:c9:a0:48:ea:26:a6:47:b1:81:ea:b3:d4:27:75:81:9f:
88:b0:46:fc:25:e7:ff:64:e4:62:de:94:0d:69:66:04:47:37:
62:dc:2d:10:05:24:75:a4:86:1c:97:dc:55:c8:6e:e2:f4:cd:
85:c1:99:f5:e8:6d:07:e3:64:bf:a2:52:05:d3:2f:55:f3:d8:
1e:fd:73:3c:27:e0:cf:d9:4b:10:95:22:ef:36:22:31:4d:4c:
63:e9:7b:ab:55:13:1c:a7:46:5b:de:e9:cd:21:46:7f:d0:d1:
4f:c0:da:18:db:b2:3f:73:52:bf:7d:c6:c9:95:b4:f9:ff:b7:
f0:fa:f8:d5:16:9f:5c:85:d7:e6:d1:cc:98:19:13:18:f1:40:
cc:5e:f6:08:b9:a0:1c:67:71:8b:45:27:d1:fc:f0:6f:d8:fa:
25:80:15:7b:71:52:c4:b6:48:ff:25:43:9e:7a:68:57:9f:34:
c7:12:72:86:bd:25:5b:27:bc:da:62:ad:8d:be:2e:7f:71:98:
24:9a:b6:0c:98:86:34:34:ad:f5:fd:ad:3f:49:d5:71:9e:a6:
43:ce:d6:42:c2:42:eb:ee:bd:39:70:3e:15:39:88:14:23:1c:
17:1f:84:69:1d:bd:61:a7:e7:48:28:d6:93:ff:49:45:96:21:
c5:9a:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:09:10 2026 by rpki-client