Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: WWBDJcSP/W4EWJqkSBT3Ho9NuKiRLVLHTeZya6twgs4=
Subject key identifier: 49:83:45:E0:AB:A8:E3:65:38:5E:75:17:16:B6:2C:BF:30:F3:03:E7
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019D2772E38D5CAEA9D03D3D876FE0630A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: Tz1-N59sSfd-X1uanpY0uE0n3Z8.roa (hash: TjI9Conr3Wy1dhn8UqIMqHZ2WlgAzdiybMSutLCTCzk=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: xqGobFAoMdjc2jLyYgTMIkioG6pNv7rhwbNOCEltZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e3:8d:5c:ae:a9:d0:3d:3d:87:6f:e0:63:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=498345e0aba8e365385e751716b62cbf30f303e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:51:2b:e6:25:09:93:68:24:cb:db:d4:89:
e6:80:dd:93:6b:67:ae:89:c4:4b:cb:b0:43:df:b6:
32:9b:65:fb:5f:93:01:31:6f:c0:6d:f1:fb:f4:2a:
6a:80:2a:b4:29:0d:97:9f:68:70:7b:ac:a2:38:83:
2d:a2:3f:f0:46:91:ba:d1:d1:52:b5:bb:58:38:86:
fa:0b:26:d1:0c:71:de:ab:9a:83:15:6d:b4:d4:c9:
f3:df:eb:a9:e7:6f:ba:06:e4:a4:4b:59:ad:2a:27:
68:80:b2:11:21:60:17:ed:da:f3:93:76:16:50:df:
ed:4e:d0:25:07:e7:63:7f:30:8c:35:8f:68:8e:56:
c8:db:28:02:68:17:f6:e0:e1:d2:cd:0d:f1:15:2f:
f6:2f:3e:9d:57:4b:32:fd:ac:b2:e6:68:da:97:45:
cb:84:0a:45:af:19:16:38:d9:95:2b:af:2c:73:24:
0e:79:b2:e1:60:b8:6e:73:3b:ef:98:75:3a:2d:16:
0a:66:1d:c3:a5:5f:8f:3a:73:10:4f:39:ee:2f:90:
93:6b:6f:bc:89:9a:a7:a5:14:64:0f:6a:8e:f8:fc:
1b:ff:b3:f9:08:76:4e:d1:20:65:d3:61:b6:98:51:
69:42:11:e4:1f:a9:ef:26:52:5b:fc:c9:2f:1c:08:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:45:E0:AB:A8:E3:65:38:5E:75:17:16:B6:2C:BF:30:F3:03:E7
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:20:00:00:d8:7c:63:56:bb:0c:08:f8:67:c8:8b:d1:30:
44:75:a2:07:ed:1c:65:1f:71:89:fb:33:8e:2a:23:4f:29:0c:
69:3c:3d:34:33:fd:54:5d:48:88:59:7e:50:00:cf:00:7e:f7:
73:37:5f:af:00:08:0c:8c:91:30:92:4e:3d:42:29:67:57:fa:
8d:e4:81:40:d6:27:de:39:66:8f:ad:d4:63:dd:97:e4:e2:11:
b7:c4:6c:dd:5d:7d:0d:14:a5:38:35:10:d9:86:44:48:22:82:
f0:f6:cc:68:a1:4a:c6:4c:05:60:39:6b:6f:6d:8a:12:79:a7:
05:13:c2:74:d6:86:a9:0c:23:ad:be:12:43:ed:d6:70:6e:ff:
43:d7:2b:3c:b8:3a:fb:fc:29:b3:b6:5e:20:d4:14:0d:ec:10:
cf:5d:bd:12:d1:d8:97:e9:eb:25:ca:09:c0:3b:b0:10:02:20:
aa:6d:fb:8e:9a:41:86:05:5d:f0:a3:80:81:35:63:ce:fc:02:
bf:ef:fb:08:fc:0c:8a:5c:f9:fc:df:aa:aa:4d:fd:4c:1b:1d:
71:95:c1:b3:40:80:6e:79:32:64:cb:a6:83:72:4c:ee:65:a6:
82:f3:cf:b4:98:bf:f6:c7:4b:1e:92:51:eb:e2:30:9a:fe:d3:
15:15:e7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuONXK6p0D09h2/gYwpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx
OTliZmYwHhcNMjYwMzI2MDAwMjEzWhcNMjYwMzI3MDAwMjEzWjAzMTEwLwYDVQQD
Eyg0OTgzNDVlMGFiYThlMzY1Mzg1ZTc1MTcxNmI2MmNiZjMwZjMwM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1JRK+YlCZNoJMvb1InmgN2Ta2eu
icRLy7BD37Yym2X7X5MBMW/AbfH79CpqgCq0KQ2Xn2hwe6yiOIMtoj/wRpG60dFS
tbtYOIb6CybRDHHeq5qDFW201Mnz3+up52+6BuSkS1mtKidogLIRIWAX7drzk3YW
UN/tTtAlB+djfzCMNY9ojlbI2ygCaBf24OHSzQ3xFS/2Lz6dV0sy/ayy5mjal0XL
hApFrxkWONmVK68scyQOebLhYLhuczvvmHU6LRYKZh3DpV+POnMQTznuL5CTa2+8
iZqnpRRkD2qO+Pwb/7P5CHZO0SBl02G2mFFpQhHkH6nvJlJb/MkvHAieywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmDReCrqONlOF51Fxa2LL8w8wPnMB8GA1UdIwQY
MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt
OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl
LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnsgAADY
fGNWuwwI+GfIi9EwRHWiB+0cZR9xifszjiojTykMaTw9NDP9VF1IiFl+UADPAH73
czdfrwAIDIyRMJJOPUIpZ1f6jeSBQNYn3jlmj63UY92X5OIRt8Rs3V19DRSlODUQ
2YZESCKC8PbMaKFKxkwFYDlrb22KEnmnBRPCdNaGqQwjrb4SQ+3WcG7/Q9crPLg6
+/wps7ZeINQUDewQz129EtHYl+nrJcoJwDuwEAIgqm37jppBhgVd8KOAgTVjzvwC
v+/7CPwMilz5/N+qqk39TBsdcZXBs0CAbnkyZMumg3JM7mWmgvPPtJi/9sdLHpJR
6+Iwmv7TFRXnBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:22 2026 by rpki-client