Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: MPxaDRTAF8pU7zwFldf0+7BRW7tpsE0tZawk1BggKHQ=
Subject key identifier: DB:F0:23:84:19:C6:2D:C0:3E:86:AC:3E:59:FE:43:F8:95:5B:72:12
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 019D37F729AFE23EE0E2A446AE689D76EFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 9QydodLxK9rUXP9S5hg2oY8e164.roa (hash: 9FAzjdLFT8fn52nXr1/CoNt7SxfwNxZtFTZWh8c6oZI=)
2: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: wDzgnZaMKYQlKyGKrRAR7jMTlq+I2LkkYHuObgfmSZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:29:af:e2:3e:e0:e2:a4:46:ae:68:9d:76:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=dbf0238419c62dc03e86ac3e59fe43f8955b7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:dc:c6:e8:53:5a:96:9a:24:13:92:ad:78:
5b:d9:b1:3a:28:e5:71:a0:41:83:18:26:d4:19:dd:
82:fc:ad:11:da:48:16:63:94:95:f8:64:a6:a2:20:
d2:75:a2:b7:5d:f2:0c:0b:0e:e1:a8:f5:eb:b6:61:
b3:7d:fa:cb:d7:f9:cd:27:eb:5c:75:91:7c:74:06:
29:c4:09:e8:46:ea:75:eb:84:80:8e:17:93:24:6a:
ee:56:80:0d:4d:32:92:b2:bb:6b:a8:d1:66:de:30:
dd:96:c0:75:7e:79:7d:ea:2a:1b:a4:46:b1:e3:15:
4b:98:a8:a1:72:30:82:c2:82:c9:d3:d0:8e:28:98:
4f:90:a8:db:50:36:7b:75:01:9f:14:d1:62:56:48:
47:f5:d9:fe:cb:e1:02:25:99:2c:6b:f8:75:b1:9b:
b3:f4:bf:c7:25:08:40:2c:d3:9e:fb:8c:a3:89:d4:
c2:ac:e4:89:97:0b:2a:2c:98:11:8a:d6:94:c1:cc:
f5:ed:d1:0d:dd:67:12:45:10:84:2f:05:e0:76:2d:
f1:1c:ee:66:44:d0:2f:9f:72:3f:27:84:b9:ba:ea:
94:82:05:8a:e7:2e:3c:9d:d6:82:4f:b1:7f:55:91:
e9:35:71:f2:a3:9b:61:0c:28:54:8b:8d:81:e7:5a:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:23:84:19:C6:2D:C0:3E:86:AC:3E:59:FE:43:F8:95:5B:72:12
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:ba:93:fa:46:58:ee:60:cd:e0:47:63:31:cf:a3:b5:b5:
a2:9d:40:49:d2:a5:3d:fa:b0:5c:0e:15:b1:ad:07:02:40:fb:
9d:20:a3:cc:31:37:4b:da:3a:17:05:e4:da:fe:8a:aa:3d:bd:
8f:dc:3f:26:52:7c:7b:d7:52:9e:0b:d3:86:be:65:4f:2a:a3:
eb:05:ab:92:80:b4:f3:a2:80:82:24:ed:b2:44:8b:04:de:01:
5e:08:70:43:25:29:b7:ed:4e:c5:f4:2d:81:cd:c0:cd:68:ad:
45:e2:75:2e:9b:c5:ec:55:af:7f:b7:84:44:8a:32:50:1b:bd:
58:b4:67:71:97:3d:c5:d1:fe:67:b3:cf:15:16:81:0b:e5:a5:
15:38:34:bf:f7:ff:84:30:8d:a9:88:72:7a:38:e4:a7:81:2a:
eb:51:a6:8a:9e:6a:cc:39:19:d2:7b:fa:60:a5:60:37:a1:0e:
3d:ce:02:56:be:cf:0b:46:98:30:7d:66:0e:a5:6c:ec:c0:50:
77:93:07:3f:f9:a2:59:4b:23:e4:49:2d:20:7e:26:5d:be:8f:
f3:c2:5b:03:75:41:8a:4b:d2:40:1e:9f:40:d3:92:27:4e:89:
36:f4:81:1a:a8:b6:0a:6c:2e:37:24:62:ab:45:69:b4:bb:ad:
3e:65:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client