Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: dhXx/aLTAS3KAWp8J3oo81rBp1QkmdI8xRlYcV0mO80=
Subject key identifier: F2:70:49:C9:BA:EC:84:9B:AE:02:6E:56:AE:F5:0C:6A:72:2F:DA:96
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01A14DD06F54651408787E2C0D8C957A8F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1AAF
Signing time: Sun 18 Oct 2026 07:01:07 +0000
Manifest this update: Sun 18 Oct 2026 07:01:07 +0000
Manifest next update: Mon 19 Oct 2026 07:01:07 +0000
Files and hashes: 1: C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (hash: PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: 7q67S7+Z2bAPg+kppU9Mn/VfRQ9APBywLV1ANhw2ieM=)
3: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (hash: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:d0:6f:54:65:14:08:78:7e:2c:0d:8c:95:7a:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Oct 18 07:01:07 2026 GMT
Not After : Oct 19 07:01:07 2026 GMT
Subject: CN=f27049c9baec849bae026e56aef50c6a722fda96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:a1:41:91:a4:f6:47:d4:27:62:05:78:3a:
a7:b9:f3:b0:f1:67:4e:e6:46:de:bc:f9:6e:a2:23:
b7:65:c6:19:de:1e:68:5e:32:27:08:ad:32:4b:9a:
73:19:61:cc:c1:5d:de:ce:bc:d9:45:c6:4b:48:0f:
12:d5:3d:b9:cf:6e:5f:30:29:76:49:26:a3:e5:dc:
99:de:21:2a:b1:9b:58:93:36:c9:53:fe:18:95:32:
ff:dd:2f:ed:39:73:4f:47:3d:76:83:6b:f8:ab:80:
df:41:a6:01:9a:ca:d1:56:02:78:e3:56:90:73:bb:
71:bb:40:e3:8a:6c:d6:57:30:58:e6:bc:f8:d8:a9:
3c:13:da:9d:9e:2a:96:6f:88:22:97:57:7e:43:73:
a6:c5:ea:aa:c4:c8:02:02:f6:af:64:ff:03:a5:aa:
ab:b7:7a:fe:3c:bd:06:a4:01:c5:d0:3f:f2:b5:06:
e6:f1:a7:fb:aa:14:5d:de:c1:95:00:84:59:8f:87:
ff:e0:bf:95:66:a5:de:d4:14:ed:c1:8c:c3:d7:3f:
b0:32:c8:8b:98:70:6d:08:a5:af:7a:14:15:f9:be:
a9:1a:68:d9:fc:05:6a:2f:97:22:2f:eb:d1:32:f8:
c5:cc:35:68:8a:76:9f:e7:c5:0b:48:83:b7:34:25:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:49:C9:BA:EC:84:9B:AE:02:6E:56:AE:F5:0C:6A:72:2F:DA:96
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6b:11:5e:7b:92:5f:b2:b7:86:b1:f9:47:c4:dc:86:15:0f:
7a:eb:e7:d1:cd:5e:a4:18:aa:8e:d8:9b:77:79:8c:08:45:53:
f7:8d:08:d6:ab:5e:bc:77:5a:3a:f8:dc:37:ba:9e:98:26:06:
f8:15:a4:79:fb:6a:b2:1a:69:de:01:d1:6a:e1:d0:af:15:c1:
2a:b7:01:fc:0d:24:58:1e:ed:9b:e0:97:f6:a0:f6:ed:1d:de:
d2:9d:da:8e:eb:7b:33:3b:e8:e9:60:dc:b7:26:7b:07:97:af:
89:7a:f2:2c:a3:17:02:ee:b4:98:5e:23:29:34:c2:24:d6:d6:
56:9f:1e:14:14:65:96:c5:cc:d4:98:5b:b2:61:b9:0a:c9:91:
5d:ba:a8:05:42:04:99:fb:7d:f0:d7:37:53:87:68:26:52:98:
98:0a:eb:0a:ba:e8:90:66:11:72:ed:34:25:9c:66:03:83:24:
98:48:84:52:96:55:df:7f:eb:8a:6a:48:b3:60:89:70:1e:1d:
76:93:33:88:8c:ad:71:b8:d2:32:7d:8e:46:f6:dc:e7:b8:e6:
a2:8f:e3:94:97:cd:83:60:84:4a:69:95:b3:25:32:53:a8:19:
81:8f:d0:95:c1:1a:ef:90:02:a8:9f:41:ac:26:0c:12:c6:42:
f2:48:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:20:56 2026 by rpki-client