Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: W2JxzXqAjteaca9Nc85Wdb8gED2uXHKuG0OSQxhZCrk=
Subject key identifier: 14:15:72:BA:F1:C2:14:6D:AD:92:E2:6B:09:C1:0B:5F:F2:21:6E:5D
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019D2816C97CA184DCACC9302DB91086AFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: +J0cx8TZbVTeeMYJZK85zBhaOIPrHVaeqeyX2SxJFCc=)
2: lV6i9HMGJoauyywXtNVMngtUYcw.roa (hash: 12sx9g61Ie6Zxf7JQ+oShflzzu8hN9b9J5QtxLChp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c9:7c:a1:84:dc:ac:c9:30:2d:b9:10:86:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=141572baf1c2146dad92e26b09c10b5ff2216e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:03:01:35:07:b9:fa:ed:5b:d0:1f:95:b4:
cd:ce:46:de:9f:0a:12:31:7d:aa:c0:50:e0:c5:0c:
a5:7b:cc:05:1a:a7:11:c5:60:6d:70:52:66:1a:00:
e1:fd:e9:e1:ac:d9:ae:f4:df:9b:16:46:2a:cd:3a:
0f:e5:82:10:45:50:c5:99:7d:ad:b4:d4:98:84:e7:
a7:24:1f:40:a9:94:7a:a7:0d:6f:af:ca:67:36:84:
ac:50:0e:ea:58:91:83:8b:c4:c4:33:3c:f0:b2:68:
a1:b0:6f:65:fe:86:79:93:7b:83:43:3a:87:c6:ef:
88:24:28:d9:67:dc:56:84:1c:3d:09:97:63:6c:b4:
d7:3b:4f:cd:2f:a4:64:f7:d9:d2:2d:fb:44:ff:66:
1f:6c:9f:ee:02:58:f7:7a:9e:a5:1e:bc:ff:ff:eb:
98:35:42:0c:3b:71:3a:81:75:6a:8a:73:fb:97:dd:
ad:ef:16:15:e6:10:f8:0c:a5:14:8f:a8:06:ac:b7:
b9:a7:1f:f4:06:80:a1:c4:c2:43:6b:15:95:3f:84:
43:34:4a:d9:5e:e5:ab:f9:73:68:22:e4:c9:81:45:
60:a1:74:d5:2d:84:5e:90:1c:d8:3d:f9:8e:82:47:
01:51:c7:99:47:2d:0d:15:ff:1a:d6:9c:3d:e4:57:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:72:BA:F1:C2:14:6D:AD:92:E2:6B:09:C1:0B:5F:F2:21:6E:5D
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c0:0f:bd:06:a2:4a:e4:a0:25:a6:d0:a7:9a:c2:e9:84:61:
74:57:b9:74:e3:e9:6e:89:c9:5e:5a:9c:3a:d5:2b:a2:69:5b:
20:cb:8f:05:f3:84:53:e4:aa:a6:fa:2e:71:b0:23:b3:0d:5a:
52:00:1e:28:e9:fd:50:02:c5:c8:81:e7:ce:5e:b4:ca:59:e5:
e4:2d:36:7b:9b:da:71:4e:9d:55:d8:5b:0a:3f:4d:b2:a1:01:
b4:e1:f9:2c:db:28:86:54:83:cc:1c:68:3b:0b:fe:0e:e2:81:
0e:40:b7:45:b8:b0:3d:be:e6:5e:0a:fe:39:ba:aa:d2:fd:1e:
cb:72:92:83:d8:84:cf:20:b5:cd:fe:9a:79:ea:d6:9a:f9:35:
b8:12:b6:20:46:89:36:fc:26:d5:fc:7c:0f:20:b5:65:d7:cb:
99:81:3a:5c:72:8c:51:b8:02:74:99:c1:8c:27:89:1a:68:f3:
4f:5f:82:8e:e8:56:54:f9:3f:13:b2:d4:c1:42:8a:a4:0e:3c:
14:bc:26:22:d3:0d:1b:c2:e9:e7:4b:f0:17:29:6a:97:37:c8:
c6:ec:bc:74:c2:e0:b7:3f:1a:cf:0a:64:e3:a2:8a:ce:49:2f:
c1:4a:87:ea:1d:2b:40:33:88:d0:9a:67:6e:ce:14:c5:89:54:
1e:98:a1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsl8oYTcrMkwLbkQhq/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTY5MjE0ZDZmZDU1ZTc1MDUwYmE4MTFiZjdjMTI0Mzkx
MDlmZWUwHhcNMjYwMzI2MDMwMTE1WhcNMjYwMzI3MDMwMTE1WjAzMTEwLwYDVQQD
EygxNDE1NzJiYWYxYzIxNDZkYWQ5MmUyNmIwOWMxMGI1ZmYyMjE2ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuUDATUHufrtW9AflbTNzkbenwoS
MX2qwFDgxQyle8wFGqcRxWBtcFJmGgDh/enhrNmu9N+bFkYqzToP5YIQRVDFmX2t
tNSYhOenJB9AqZR6pw1vr8pnNoSsUA7qWJGDi8TEMzzwsmihsG9l/oZ5k3uDQzqH
xu+IJCjZZ9xWhBw9CZdjbLTXO0/NL6Rk99nSLftE/2YfbJ/uAlj3ep6lHrz//+uY
NUIMO3E6gXVqinP7l92t7xYV5hD4DKUUj6gGrLe5px/0BoChxMJDaxWVP4RDNErZ
XuWr+XNoIuTJgUVgoXTVLYRekBzYPfmOgkcBUceZRy0NFf8a1pw95FdXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQVcrrxwhRtrZLiawnBC1/yIW5dMB8GA1UdIwQY
MBaAFILmkhTW/VXnUFC6gRv3wSQ5EJ/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xNzNmYzUtMzQzYi00OTc2LWIyYTEt
OTZiYzZiYWE1NjNiLzEvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xNzNmYzUtMzQzYi00OTc2LWIyYTEtOTZiYzZiYWE1NjNi
LzEvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisAPvQai
SuSgJabQp5rC6YRhdFe5dOPpbonJXlqcOtUromlbIMuPBfOEU+SqpvoucbAjsw1a
UgAeKOn9UALFyIHnzl60ylnl5C02e5vacU6dVdhbCj9NsqEBtOH5LNsohlSDzBxo
Owv+DuKBDkC3RbiwPb7mXgr+Obqq0v0ey3KSg9iEzyC1zf6aeerWmvk1uBK2IEaJ
Nvwm1fx8DyC1ZdfLmYE6XHKMUbgCdJnBjCeJGmjzT1+CjuhWVPk/E7LUwUKKpA48
FLwmItMNG8Lp50vwFylqlzfIxuy8dMLgtz8azwpk46KKzkkvwUqH6h0rQDOI0Jpn
bs4UxYlUHpih9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:47 2026 by rpki-client