Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: AWoMwx+3h2dM9XS1Q78bjW00Ldfv0JK1U6spTAbqngU=
Subject key identifier: B6:CC:B2:04:D6:DD:D3:AE:7C:CA:08:8C:12:16:74:A4:30:B7:1F:31
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 019D382E379312A894A20DE3324BBABEBCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 108C
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: JpmAbUUjgdGj6qAIyyJytHhitKc.roa (hash: CcEuObSxm5FzQn0dVTtYmBf1361NVKZ22QzUQfSvlR8=)
2: _DjjSU3BAoPGedf4mI0XCD0mbWo.roa (hash: qwdJ+lJOWsnxPjxpN0M5u6G8sfxnyYF02VcN5oTvQUA=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: og0bd5Nq4XLxGA1m2v6IbrBl9CM/HR2fz5t5bO3B38s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:37:93:12:a8:94:a2:0d:e3:32:4b:ba:be:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=b6ccb204d6ddd3ae7cca088c121674a430b71f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:0c:22:85:e3:bf:d8:d8:24:19:59:e1:28:
56:6b:56:a8:a5:5f:4f:51:56:2d:50:32:cc:8a:c4:
54:e0:71:6f:63:51:da:49:7d:a2:e2:00:4a:ef:a0:
d4:ea:47:55:87:3f:66:3a:81:33:59:6c:70:c2:f3:
30:cb:77:67:1c:f2:5f:77:b1:10:6d:4a:f0:50:fe:
a2:0a:cb:b2:58:c0:67:62:fe:3c:a9:31:04:f8:ea:
8d:26:a8:04:75:01:f2:13:0c:15:05:4c:fb:52:3e:
5e:0f:80:48:5f:8b:88:af:13:45:d3:d4:af:3a:bc:
ce:b4:ae:e5:2e:23:48:6e:df:c2:d7:46:b7:69:a4:
e0:83:ed:35:61:7b:d8:a6:6f:ee:f4:67:0d:8e:9b:
eb:bf:f6:fe:6f:2e:49:07:71:ab:10:8f:7a:82:19:
07:b4:94:09:3b:63:63:11:d3:a9:50:0e:ec:9f:c1:
13:80:a1:ab:52:d9:f8:44:50:de:78:fe:d7:fb:3d:
6d:7f:1e:ea:95:b0:a1:11:93:13:42:64:9a:f2:72:
6a:64:58:ae:a6:de:a1:6d:6e:17:d0:4d:46:26:83:
a3:8b:06:4a:d4:1a:3e:bb:92:7f:df:c8:40:27:8e:
f7:02:a3:c8:95:0a:e5:78:c1:fb:e8:16:48:35:a0:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:B2:04:D6:DD:D3:AE:7C:CA:08:8C:12:16:74:A4:30:B7:1F:31
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4c:3b:00:e6:b5:52:16:34:c0:c2:dd:ab:05:80:db:3a:b2:
0e:41:95:a2:f5:58:14:3c:0f:b6:37:37:f0:76:48:7c:51:ac:
f4:16:a6:b2:00:4d:14:26:1f:90:ba:93:ff:12:a8:3f:c1:89:
99:ee:83:87:e1:2d:51:aa:83:92:4b:ca:b0:27:77:b4:ad:97:
b9:d9:68:f8:b7:f1:70:0c:29:1e:45:80:f8:23:18:62:31:ea:
85:b6:11:8e:79:ad:01:71:5d:b8:a9:cd:01:f3:9f:e4:69:c1:
c9:92:c7:a6:ad:1d:3d:b7:b7:17:7d:a2:7b:46:61:c5:2e:68:
08:92:38:df:95:7e:4b:90:cd:49:4b:d6:ed:da:af:cc:95:29:
48:3e:49:c3:b2:b9:3e:61:55:83:93:51:9f:fb:df:5c:a3:5a:
ac:bf:3d:97:09:f8:2c:7e:c3:9a:f9:33:b0:94:f6:71:f9:11:
9c:04:91:02:da:27:14:c1:5e:8e:2d:0a:1e:75:86:19:0a:5a:
1f:8d:e9:63:1a:ba:c3:eb:5b:ef:53:81:6a:a0:5b:3a:11:f2:
a0:d4:b5:86:83:f6:16:e0:f3:0d:a1:d8:74:8f:9a:f4:0a:7f:
4c:0e:fa:ec:1f:cd:fd:c5:2f:b9:09:1d:37:e3:aa:14:4b:35:
7e:f4:fd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjeTEqiUog3jMku6vrypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjYwMzI5MDYwMDQ2WhcNMjYwMzMwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhiNmNjYjIwNGQ2ZGRkM2FlN2NjYTA4OGMxMjE2NzRhNDMwYjcxZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUEMIoXjv9jYJBlZ4ShWa1aopV9P
UVYtUDLMisRU4HFvY1HaSX2i4gBK76DU6kdVhz9mOoEzWWxwwvMwy3dnHPJfd7EQ
bUrwUP6iCsuyWMBnYv48qTEE+OqNJqgEdQHyEwwVBUz7Uj5eD4BIX4uIrxNF09Sv
OrzOtK7lLiNIbt/C10a3aaTgg+01YXvYpm/u9GcNjpvrv/b+by5JB3GrEI96ghkH
tJQJO2NjEdOpUA7sn8ETgKGrUtn4RFDeeP7X+z1tfx7qlbChEZMTQmSa8nJqZFiu
pt6hbW4X0E1GJoOjiwZK1Bo+u5J/38hAJ473AqPIlQrleMH76BZINaBnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbMsgTW3dOufMoIjBIWdKQwtx8xMB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkw7AOa1
UhY0wMLdqwWA2zqyDkGVovVYFDwPtjc38HZIfFGs9BamsgBNFCYfkLqT/xKoP8GJ
me6Dh+EtUaqDkkvKsCd3tK2Xudlo+LfxcAwpHkWA+CMYYjHqhbYRjnmtAXFduKnN
AfOf5GnByZLHpq0dPbe3F32ie0ZhxS5oCJI435V+S5DNSUvW7dqvzJUpSD5Jw7K5
PmFVg5NRn/vfXKNarL89lwn4LH7DmvkzsJT2cfkRnASRAtonFMFeji0KHnWGGQpa
H43pYxq6w+tb71OBaqBbOhHyoNS1hoP2FuDzDaHYdI+a9Ap/TA767B/N/cUvuQkd
N+OqFEs1fvT9aA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:19 2026 by rpki-client