Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: ahUx7ReucIb2h/j6arCG2R7P3LCgYk81wJm2YHHhasY=
Subject key identifier: 76:94:91:6C:3E:52:D8:A2:2A:A9:B3:7F:31:61:6E:18:C0:16:05:EF
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019F92EE025B3D216ADF5DF64A53AA3ACBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0DF1
Signing time: Fri 24 Jul 2026 07:01:39 +0000
Manifest this update: Fri 24 Jul 2026 07:01:39 +0000
Manifest next update: Sat 25 Jul 2026 07:01:39 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: 6AN/nvk6xVXNqugi440FozqFzjzs7UauJLvn44bOHUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:02:5b:3d:21:6a:df:5d:f6:4a:53:aa:3a:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jul 24 07:01:39 2026 GMT
Not After : Jul 25 07:01:39 2026 GMT
Subject: CN=7694916c3e52d8a22aa9b37f31616e18c01605ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:38:b1:0c:f5:f8:c5:8b:4b:d7:97:9d:4e:
6a:80:e2:cc:ba:78:f0:07:27:49:1b:38:90:e5:2c:
a0:cf:72:77:d1:e1:23:9a:42:b3:94:95:2f:26:e3:
ec:28:e9:fb:cc:80:51:fb:a6:b7:9b:d7:d4:5b:9d:
7e:6f:23:59:44:73:2c:98:b1:47:81:ab:2c:0d:2f:
ad:6f:2f:4a:1c:8b:2c:a2:62:1d:fe:9b:af:51:35:
58:c1:b8:18:3a:36:85:82:ce:46:63:09:2f:f5:0c:
f5:6a:1c:75:65:3d:47:6a:5b:2e:05:08:64:21:c2:
67:5a:73:dc:a5:e1:ef:5b:f5:60:b9:c7:af:46:07:
af:66:65:96:65:8d:f2:ac:c2:16:6d:48:b2:9e:56:
4a:e8:54:e7:4d:49:22:d9:bf:96:f9:f9:3f:48:c8:
24:b5:5c:fb:10:f3:56:74:2e:5a:db:c2:7f:3b:36:
6f:32:47:72:76:24:af:d1:84:7d:0e:df:50:6a:78:
85:9e:97:18:59:a1:fe:24:a7:df:ca:4a:3d:db:15:
a6:0e:1f:2c:46:d6:a1:0b:d4:94:e2:36:7a:66:08:
39:e8:63:b4:f9:06:9e:46:ef:a5:df:2b:00:a8:f4:
f5:b7:33:a7:c9:57:94:83:6a:8f:77:23:bc:ed:c7:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:91:6C:3E:52:D8:A2:2A:A9:B3:7F:31:61:6E:18:C0:16:05:EF
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3a:ab:84:c7:71:d7:4e:d9:c7:d8:ee:38:b8:e3:07:fa:9b:
16:8f:e5:08:15:54:aa:63:7f:49:ee:86:ba:63:3b:a6:eb:1e:
4c:82:73:55:e4:5e:89:9c:06:a2:e0:95:e8:03:43:a5:42:4d:
be:26:f5:39:eb:30:f2:9c:72:54:a3:a9:17:9b:d0:a1:a2:72:
c2:c5:ae:a8:42:8b:f7:05:87:23:a7:77:65:b9:7c:df:90:88:
77:58:fc:f9:23:3e:4b:88:79:13:77:d0:f6:a0:8e:70:c7:c8:
41:98:f3:bd:d6:5f:1c:07:a1:e0:8b:2c:58:92:08:e7:42:e0:
cc:c7:06:fa:e6:5c:d3:c6:be:36:71:d3:d3:3c:16:61:27:5e:
b3:30:8b:e3:1e:52:94:3c:a1:3f:5a:ae:d4:1b:df:0f:70:eb:
04:0d:2d:06:27:48:9c:20:15:48:4d:47:1a:de:d8:77:40:d3:
8a:a3:2c:f1:98:a4:c0:64:a3:fe:01:6d:da:a9:a9:4a:5d:8b:
40:0e:3b:d9:fc:43:4a:11:12:df:ba:0f:b4:29:5e:d5:e4:90:
51:f4:67:8e:34:2e:24:5c:c6:d5:98:c6:ca:0b:ad:ea:e3:62:
93:1c:49:bc:3a:2b:3d:4e:a0:d5:26:0b:48:24:65:05:18:c1:
30:6b:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:02:09 2026 by rpki-client