
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
File: GuwRjCU363UtdoXMGf0-xDD1Bfw.mft (raw, json)
Hash identifier: FVFOTkTh/jat8yjqVhJw9mA21GENFIhvKhRs8OQGJ2g=
Subject key identifier: 5D:D6:FD:13:00:05:DC:21:B7:B7:35:1C:D0:E4:47:B9:BE:49:26:19
Authority key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Certificate issuer: /CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Certificate serial: 01A1C2F8F4E2F5DCE84D96F95A95F12ECF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
Manifest number: 0288
Signing time: Tue 10 Nov 2026 01:00:57 +0000
Manifest this update: Tue 10 Nov 2026 01:00:57 +0000
Manifest next update: Wed 11 Nov 2026 01:00:57 +0000
Files and hashes: 1: GuwRjCU363UtdoXMGf0-xDD1Bfw.crl (hash: 7a6ewF3t/7rJUc2Y0C2cXpIWvr7CvLHyrDFywvgNh8c=)
2: fyrwpSpHOQ51MD8HtpifeJqSkG4.roa (hash: o8gKMzDK7KI5j5Qki30gQMXdbKnHqlaCMrDbLfOew8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f8:f4:e2:f5:dc:e8:4d:96:f9:5a:95:f1:2e:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Validity
Not Before: Nov 10 01:00:57 2026 GMT
Not After : Nov 11 01:00:57 2026 GMT
Subject: CN=5dd6fd130005dc21b7b7351cd0e447b9be492619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:bb:71:d3:df:2e:44:6d:8f:33:2f:4b:18:
57:18:ae:8d:42:de:80:cb:17:92:56:50:1e:65:6b:
ac:b2:76:49:1e:0a:d0:eb:a9:63:00:ce:61:d8:79:
16:5d:4a:4e:f8:d6:ae:49:4f:19:ae:77:94:82:b8:
8c:25:e6:ad:fc:a8:56:f6:06:e6:57:b7:30:09:49:
13:f2:d6:11:fb:54:e5:3c:89:98:30:8c:1b:f2:41:
22:03:17:c4:82:3b:c9:45:d2:e1:52:e2:40:03:82:
6a:7e:5e:d0:05:14:3e:19:90:fd:17:d1:77:8a:72:
16:36:71:dc:87:4c:c2:38:77:08:17:bb:c9:dd:7d:
27:94:e5:16:9a:75:bd:3a:27:a2:7d:ae:bd:6c:9e:
3f:3f:57:b8:54:c1:2b:50:c1:61:20:50:7a:40:53:
e2:29:87:23:54:6d:b1:2c:71:6d:15:b9:c9:b9:a0:
08:48:a3:b4:46:a7:54:c0:e3:e0:f1:c3:52:2a:7d:
84:14:f0:19:ef:4e:23:52:16:23:aa:2f:b2:24:e2:
e3:59:4e:22:ad:0c:29:c8:c6:2e:51:6e:b9:2a:2a:
99:1b:f6:e8:0e:d8:d8:f0:22:51:13:1c:cb:4c:cd:
fe:40:d7:82:c5:10:63:0f:c0:65:f0:5f:7e:31:70:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:FD:13:00:05:DC:21:B7:B7:35:1C:D0:E4:47:B9:BE:49:26:19
X509v3 Authority Key Identifier:
keyid:1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:2e:b5:c8:a9:fd:34:2d:6d:57:aa:9d:ff:ea:70:76:75:
91:b5:41:e7:9a:d2:2e:c7:5c:51:5c:a8:62:14:36:63:e2:a0:
d3:ae:f2:4c:f3:51:bb:0e:eb:17:4a:b9:a2:fa:2e:b2:5f:1c:
ab:07:cf:51:f9:38:0f:cb:f2:7c:f5:63:80:8c:33:43:eb:59:
bd:2e:f2:94:b8:51:76:9e:94:e0:05:24:4f:46:1c:bc:db:12:
e0:a2:ca:b1:6e:2d:68:ed:e8:a9:5b:30:52:c5:88:45:df:4f:
1a:be:15:4e:ea:e4:87:cd:f6:6c:3c:08:4b:e5:87:e0:e0:b0:
00:ef:a4:f6:8d:16:76:b7:17:a5:2d:8d:2f:45:ce:cd:f0:07:
7f:8a:09:55:73:0a:d0:b3:eb:32:33:04:5d:42:0d:b0:ef:84:
dc:c0:ae:3a:4a:27:47:07:04:f7:ec:fa:b7:e1:ec:c6:af:ca:
8d:38:54:95:4a:c4:23:c1:de:ef:32:62:53:46:77:e3:ce:dd:
a2:54:60:95:30:d4:a2:fd:83:85:45:a4:86:60:31:9a:8e:65:
ed:0a:10:50:84:2b:45:80:ae:b7:69:a5:cc:e7:24:d0:8e:a0:
29:9d:e9:1a:f6:56:0d:54:04:89:25:5b:c2:65:12:2e:2d:30:
19:19:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:25:37 2026 by rpki-client