Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: Jht/EyfBTEBkZoyiU8RqxVPpkDXpb/XeoI6zdfDeas0=
Subject key identifier: FF:5F:F9:3C:72:96:B1:2B:CC:80:C0:1F:BB:52:BD:EF:E8:A1:C1:25
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01A132C73554BAE7AAA49C2A6B995064355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 01:01:18 +0000
Manifest this update: Tue 13 Oct 2026 01:01:18 +0000
Manifest next update: Wed 14 Oct 2026 01:01:18 +0000
Files and hashes: 1: C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (hash: PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: 0iGo1ttPKXrs+Pg8GVQNJNmGCxlCIPKSLqe1c3ob2wQ=)
3: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (hash: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c7:35:54:ba:e7:aa:a4:9c:2a:6b:99:50:64:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Oct 13 01:01:18 2026 GMT
Not After : Oct 14 01:01:18 2026 GMT
Subject: CN=ff5ff93c7296b12bcc80c01fbb52bdefe8a1c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:42:fc:6d:46:fc:37:c4:02:bf:96:0d:02:
6a:d2:1b:38:db:5e:f7:80:60:7b:e8:03:19:2c:90:
fd:88:59:69:01:d2:2d:97:77:46:ec:2e:a0:39:e5:
de:b0:bd:97:39:f7:bd:a6:cd:34:aa:bf:a6:36:74:
ee:46:5c:5e:ae:75:d3:b2:79:d6:36:8b:b8:f7:4d:
3e:73:39:40:5f:b6:a4:90:16:71:27:bd:04:0a:01:
1c:20:7e:ed:4b:74:71:24:4b:c5:d3:4e:c7:94:ad:
24:56:58:c7:ab:b5:f3:02:da:98:b2:90:7f:3e:74:
00:ee:07:f5:d7:9e:5c:66:c1:d0:dc:fa:1e:bc:f2:
33:e7:97:ec:15:b3:10:9c:6c:21:cc:20:32:dc:8a:
c4:e6:ad:4d:9b:e6:66:ce:5b:dd:b3:6b:b5:c7:5d:
5d:f5:28:65:cd:39:2d:c6:c6:fe:20:e0:52:c7:06:
31:14:cd:22:0d:7c:a8:99:2d:54:03:1f:99:7e:63:
65:58:9f:a1:11:2b:f6:21:b2:4c:7e:ea:54:87:f7:
57:9d:e7:aa:03:06:29:0b:f0:a3:8f:28:f9:3a:01:
e4:68:9b:3f:7e:3f:8b:83:f2:b0:19:6c:ea:07:bf:
aa:7b:46:e6:78:30:dd:96:06:59:c9:bd:ad:f9:a5:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:F9:3C:72:96:B1:2B:CC:80:C0:1F:BB:52:BD:EF:E8:A1:C1:25
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:09:a2:d2:74:4a:e1:ec:69:64:9b:d0:b6:4e:8a:44:93:
b2:c9:77:78:ff:03:4f:94:5c:3a:1a:fc:80:aa:cc:16:61:55:
3e:a2:33:60:6d:e2:ef:9f:e2:5a:0a:74:c9:23:28:92:3f:36:
21:95:a3:fe:55:4f:f3:7e:31:b2:b5:ad:40:0a:23:31:01:65:
cb:db:55:25:5b:f7:25:12:8e:db:f5:55:88:7f:19:3d:33:a5:
91:32:0f:d7:c1:ec:50:e5:c6:5f:ac:3b:80:9c:b0:48:4c:37:
f5:fe:ab:9e:a2:72:aa:47:b5:0c:5e:ba:8b:1c:82:ab:52:fd:
de:88:9d:ec:ed:5d:ca:c5:1c:b2:91:7c:63:b0:b2:7e:31:24:
2f:c0:c6:dc:dc:40:6d:e6:f0:51:b2:6e:37:2a:81:1c:e3:13:
94:d2:84:b4:67:22:12:26:e9:57:01:cd:7d:b3:4a:92:c8:96:
e8:35:21:d1:91:85:3a:8c:01:5d:a6:93:df:92:7f:b5:73:0f:
be:2b:7e:63:1a:56:b8:3a:c3:1b:f1:4d:c5:e6:50:09:23:5e:
e1:80:f4:9c:b3:1c:4b:9b:a5:99:97:18:39:01:ab:bf:43:68:
f4:5b:1b:cb:70:e5:3a:95:75:aa:68:c6:02:12:b6:b1:6c:1f:
a1:3d:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:38:44 2026 by rpki-client