Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: UrHNQNxyZoA6ZJCu1cLEZ6B/qwB9v2EZ7IImhdHTFV8=
Subject key identifier: 10:77:6E:FD:32:48:26:CA:0D:CC:76:B9:16:8E:F2:77:42:C1:7E:27
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01A02657D1E24A806098FC361740949284E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1A16
Signing time: Fri 21 Aug 2026 22:01:24 +0000
Manifest this update: Fri 21 Aug 2026 22:01:24 +0000
Manifest next update: Sat 22 Aug 2026 22:01:24 +0000
Files and hashes: 1: C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (hash: PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: ubRP1dmI1uQUbpaRljDgWlmmuIYAeSfh3dHer1TZQyw=)
3: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (hash: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:d1:e2:4a:80:60:98:fc:36:17:40:94:92:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Aug 21 22:01:24 2026 GMT
Not After : Aug 22 22:01:24 2026 GMT
Subject: CN=10776efd324826ca0dcc76b9168ef27742c17e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:c1:ee:97:8e:9c:78:d3:66:de:ce:71:3d:
61:2e:c2:0b:b1:fb:37:92:d4:19:22:f0:01:fc:bb:
39:97:7b:6e:05:ef:53:43:1d:72:a1:7a:cc:a6:62:
ec:02:69:e1:b1:44:b6:2a:e4:06:48:71:b2:c3:53:
02:8e:b2:b0:68:5b:9a:bf:c9:18:12:1f:ab:bb:7d:
0f:2d:25:61:1b:5a:f1:6e:f6:30:0a:31:a8:3a:76:
69:94:c3:11:60:1a:c0:a7:9d:49:3e:3b:14:32:12:
af:cc:1b:be:6a:e9:09:57:11:04:88:7b:fd:e2:52:
5c:a4:e3:f2:58:08:ea:4b:c7:70:69:3c:02:1c:a6:
85:cf:a9:40:1d:9d:06:a1:18:1d:4d:5e:70:ee:24:
12:25:5b:5c:7b:ba:04:3d:60:8a:21:fe:ac:de:8c:
05:cd:41:7d:3c:80:b1:87:d0:35:c8:d2:d2:5e:d7:
f6:07:af:06:5f:8b:85:02:fd:38:30:80:5a:bb:61:
c6:ce:b6:4e:40:5b:60:a8:c1:eb:b0:e6:7c:13:7a:
df:7e:ee:ef:fa:20:53:41:11:46:e3:ce:12:b0:3c:
ef:86:8c:21:b8:bd:bd:8f:e9:5a:3b:43:e0:63:da:
24:02:49:c1:41:4b:9d:95:ce:9f:a2:c4:59:5e:91:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:6E:FD:32:48:26:CA:0D:CC:76:B9:16:8E:F2:77:42:C1:7E:27
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:7e:90:60:c1:25:3b:8b:f1:5c:d4:af:9c:7a:a9:ef:c1:
89:0f:83:2f:84:a9:04:a2:25:eb:a0:ce:f6:c5:21:c5:85:21:
c7:37:09:e1:c3:d7:9c:b6:c7:8a:f8:05:79:70:6a:92:35:53:
49:8e:95:3b:99:58:cf:27:8b:a6:59:1a:34:97:a9:6d:7f:8d:
04:20:01:c0:f2:2a:6a:e0:d9:8d:7f:44:b5:23:15:83:20:cf:
84:31:32:25:46:3c:2b:d7:62:15:d2:0f:d1:a8:92:c7:a4:2a:
23:2a:66:b1:d8:06:39:5c:1c:7d:f8:54:8b:16:46:60:24:cc:
44:d0:74:1a:2b:b6:3e:6f:f2:df:3f:35:b4:bf:86:1a:93:0c:
64:c6:4c:62:af:84:99:a8:71:43:3e:8e:b2:ae:2e:2a:e6:d0:
47:0a:f7:a6:63:ea:40:3a:c4:4f:5f:a1:10:94:a6:d6:9d:31:
e9:ab:5e:44:c2:46:68:d7:11:67:73:09:f8:0e:16:5c:ed:6d:
60:6a:0e:b6:e8:b9:9c:ac:df:ce:4a:8b:73:45:ba:38:ce:ce:
fd:b6:ec:be:ef:a7:80:f3:66:25:87:26:36:2c:4e:99:5e:90:
e1:db:84:b5:10:66:3c:86:76:fe:73:ab:f3:4d:5a:31:f3:b3:
44:87:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:30 2026 by rpki-client