Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: B4CYUtAnHMMA38wu6Hp8outzPJRigNjUiuLtbYwDZS8=
Subject key identifier: 4E:72:62:76:22:00:B5:D4:E9:A3:BF:46:2B:FE:16:CC:E1:95:3C:18
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019D3752E2A51AD0C024C0104263072D3D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: Q5FhHS_MVZGd1l2ZO9zRacw2QxY.roa (hash: Wzi4Lz9Dn9AJ7LwWcDDviF0pPsw/FGU4vgm1EN+k6No=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: gxDu6rUSslIXj/ftX8pVadNGW0G3wAwaTRAVbMh/F6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e2:a5:1a:d0:c0:24:c0:10:42:63:07:2d:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=4e7262762200b5d4e9a3bf462bfe16cce1953c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:51:d6:4e:e2:a3:d7:b2:fe:7e:6d:f0:3f:
b9:53:9a:c5:9f:98:25:54:d7:21:9c:ad:68:5e:48:
81:8a:b6:2b:50:28:a4:6a:78:94:34:80:73:86:7f:
16:7f:bc:54:4c:cb:55:ef:f7:fa:53:20:d5:f7:79:
6d:4d:5f:c3:56:57:f0:65:7b:aa:d0:33:05:b1:54:
df:92:12:5e:c3:e4:a6:4c:0f:7f:39:f3:39:dd:e5:
ce:a0:0c:a8:c9:3c:3b:9e:fe:0c:d1:8e:1f:a8:bc:
71:6b:a4:69:ba:fb:64:34:a3:2f:ca:24:e6:75:2c:
41:9a:68:17:2a:ed:57:d2:8e:d9:bc:c4:11:17:0e:
60:d2:28:29:25:ee:d0:a5:1d:db:ee:04:2b:4f:5b:
16:17:a4:1a:4e:5b:d1:cb:d3:7a:49:38:4f:f8:9d:
b2:c0:55:4b:4d:9d:2c:fb:29:fb:22:56:c6:83:6b:
b4:85:a7:fe:0b:58:4e:4a:21:dc:00:4b:c5:50:75:
57:b7:2c:86:76:91:61:e5:ac:af:5a:53:38:39:bc:
8d:8c:84:b8:c2:2c:d5:3d:5a:cc:f9:34:aa:dc:c2:
28:99:7c:54:3d:7b:04:1b:a3:f3:b7:fb:9c:e2:a5:
93:d7:83:18:73:28:5e:3e:44:27:5a:41:8c:2d:d7:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:62:76:22:00:B5:D4:E9:A3:BF:46:2B:FE:16:CC:E1:95:3C:18
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:04:36:9a:92:90:d3:a0:b4:c6:c0:7a:3c:46:44:5d:93:
09:1c:f2:4e:59:91:93:ec:5a:7e:73:57:bd:ca:75:90:e1:32:
72:4f:1a:fd:1c:30:28:59:06:de:ea:f6:85:99:a0:dd:f7:ff:
ca:f1:67:b9:e5:27:7d:2c:49:da:18:ec:8c:7b:ec:e9:aa:21:
23:97:e3:a2:d4:14:12:69:aa:4e:5d:e9:71:3e:b2:ed:47:77:
64:9a:d8:93:d5:dd:58:d8:55:77:dd:4b:01:82:3d:02:d6:f2:
b1:ad:6d:16:b7:4c:43:79:d2:d6:98:bf:cf:aa:99:cb:e9:ea:
37:18:50:af:b1:c1:87:12:50:f4:78:e0:4a:51:1b:4c:02:de:
3f:01:20:e9:8e:6b:07:f3:6e:80:41:e7:0f:b4:04:ed:2d:e2:
4a:36:31:bb:b2:55:5e:80:25:d6:e3:a5:b9:7c:d5:65:6e:64:
9f:24:22:79:e7:0f:9f:01:4c:72:53:8c:97:97:d8:93:e1:10:
7f:b4:79:3e:69:35:ef:2a:00:4f:2c:00:09:19:6d:39:6c:1e:
60:9b:ef:33:de:bb:b0:38:c5:5c:49:aa:7c:a4:d2:fd:11:97:
38:30:9c:d6:f9:51:95:55:c8:57:28:a9:42:af:d6:99:5b:39:
5f:c5:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client