Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: I9ndMnvCF2ieu4K/oiHF3kBdaWwOIsMuic/9d2pOBZQ=
Subject key identifier: 75:53:2E:3D:35:C6:13:AA:02:23:5F:CD:F3:AF:F7:2A:C1:FA:2F:C7
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01A0024B501BB11B2E8C6AB6771DB1E3C4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0B7F
Signing time: Fri 14 Aug 2026 22:01:25 +0000
Manifest this update: Fri 14 Aug 2026 22:01:25 +0000
Manifest next update: Sat 15 Aug 2026 22:01:25 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: 0gXDP0EEYoDrkloze6N7ERiSgkNH1UqyO31ERFdZCJM=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:50:1b:b1:1b:2e:8c:6a:b6:77:1d:b1:e3:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Aug 14 22:01:25 2026 GMT
Not After : Aug 15 22:01:25 2026 GMT
Subject: CN=75532e3d35c613aa02235fcdf3aff72ac1fa2fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:c3:a2:00:b9:13:66:60:4d:3c:6f:8d:0c:
78:3f:dd:0d:c9:89:dd:9b:e6:ac:9b:28:37:cc:93:
ad:4b:8c:3e:c7:34:06:e5:34:87:50:ed:32:f0:5f:
a9:39:bc:d6:f5:0a:0e:8e:28:4d:8c:33:c1:12:81:
56:4c:d0:69:db:42:ac:52:0d:f0:45:07:67:1d:5c:
06:31:3d:a4:43:6a:71:5d:39:03:34:9e:c7:2a:5f:
85:f3:0b:df:37:69:3d:f0:4f:40:97:07:13:28:fb:
6e:04:a1:ab:46:b6:35:26:52:98:64:dc:02:51:17:
0e:2e:15:b4:e4:11:83:13:e5:90:0d:45:9a:fc:9e:
48:8e:c4:02:6c:46:82:50:92:ac:8a:e6:17:f0:31:
81:e7:93:69:24:65:b5:06:94:bc:f0:aa:7e:0d:81:
ca:cd:62:5c:30:cb:c8:17:a8:57:65:de:49:c0:79:
4e:aa:c4:f7:e5:77:56:a7:af:0e:37:c7:e0:69:10:
1a:74:cb:6f:f6:3c:32:cf:0e:da:31:db:95:77:f5:
b1:15:b0:ab:b1:a2:41:0e:e3:06:ed:53:48:cd:2b:
b8:f8:c1:a4:e0:0a:40:bb:66:62:27:3a:94:77:95:
19:90:28:fc:88:9a:dc:34:d6:a0:51:29:e4:05:7c:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:2E:3D:35:C6:13:AA:02:23:5F:CD:F3:AF:F7:2A:C1:FA:2F:C7
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:20:b6:96:07:a3:76:88:66:c3:49:84:06:cc:d7:37:33:
a9:a2:72:9b:a0:50:71:4b:11:dd:7e:ef:c3:a0:67:78:b6:d3:
77:39:e9:9d:68:6e:bb:30:74:2e:cb:88:35:79:76:6f:72:e8:
0c:98:04:f8:18:3a:43:5f:a8:53:c3:9b:0b:bc:8b:c9:7a:80:
98:f6:fb:d7:09:63:15:fa:c4:96:48:7a:93:0e:63:e6:17:51:
7d:71:ec:b3:b2:6c:86:33:42:07:40:d3:ac:76:53:aa:b8:20:
08:b2:92:ae:28:d0:9d:65:bb:d1:98:22:cc:29:bd:e5:8d:64:
ff:f4:66:78:9b:72:f1:a4:df:7b:6f:d0:a9:f2:a9:4a:9a:f5:
0d:71:bd:3f:e3:76:40:79:f1:06:f3:b4:23:87:39:40:8a:99:
43:77:2d:03:50:32:b9:49:27:40:07:ce:00:14:14:82:54:61:
8a:8d:b7:42:e8:93:32:fd:9a:00:ff:35:34:79:95:fb:39:e5:
39:b5:47:a4:f8:51:64:f7:e8:95:f6:ec:9d:83:d6:ed:18:3e:
64:4d:5b:d6:6c:fd:2e:55:ba:c9:a8:5a:00:7d:74:72:25:06:
ed:e2:42:52:c9:93:42:12:e0:05:b5:3f:6b:6d:99:83:ad:a4:
36:aa:0b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS1AbsRsujGq2dx2x48THMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy
NDc3OGIwHhcNMjYwODE0MjIwMTI1WhcNMjYwODE1MjIwMTI1WjAzMTEwLwYDVQQD
Eyg3NTUzMmUzZDM1YzYxM2FhMDIyMzVmY2RmM2FmZjcyYWMxZmEyZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIrDogC5E2ZgTTxvjQx4P90NyYnd
m+asmyg3zJOtS4w+xzQG5TSHUO0y8F+pObzW9QoOjihNjDPBEoFWTNBp20KsUg3w
RQdnHVwGMT2kQ2pxXTkDNJ7HKl+F8wvfN2k98E9AlwcTKPtuBKGrRrY1JlKYZNwC
URcOLhW05BGDE+WQDUWa/J5IjsQCbEaCUJKsiuYX8DGB55NpJGW1BpS88Kp+DYHK
zWJcMMvIF6hXZd5JwHlOqsT35XdWp68ON8fgaRAadMtv9jwyzw7aMduVd/WxFbCr
saJBDuMG7VNIzSu4+MGk4ApAu2ZiJzqUd5UZkCj8iJrcNNagUSnkBXw8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVTLj01xhOqAiNfzfOv9yrB+i/HMB8GA1UdIwQY
MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt
Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh
LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5cgtpYH
o3aIZsNJhAbM1zczqaJym6BQcUsR3X7vw6BneLbTdznpnWhuuzB0LsuINXl2b3Lo
DJgE+Bg6Q1+oU8ObC7yLyXqAmPb71wljFfrElkh6kw5j5hdRfXHss7JshjNCB0DT
rHZTqrggCLKSrijQnWW70ZgizCm95Y1k//RmeJty8aTfe2/QqfKpSpr1DXG9P+N2
QHnxBvO0I4c5QIqZQ3ctA1AyuUknQAfOABQUglRhio23QuiTMv2aAP81NHmV+znl
ObVHpPhRZPfolfbsnYPW7Rg+ZE1b1mz9LlW6yahaAH10ciUG7eJCUsmTQhLgBbU/
a22Zg62kNqoLQg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:29:42 2026 by rpki-client