Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: I4mBBPrBejuTKml3aSERNp7qdHVc1ITO4dCCuW4kQcY=
Subject key identifier: 98:9A:DB:96:90:2E:8C:77:F4:B0:45:77:3B:72:0B:C6:70:26:15:CA
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01A0E10751DFDA4D7BEA8EDA5280D7E1B977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0E9E
Signing time: Sun 27 Sep 2026 04:02:28 +0000
Manifest this update: Sun 27 Sep 2026 04:02:28 +0000
Manifest next update: Mon 28 Sep 2026 04:02:28 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: gNZEKtCvI1o044jbK+HoI6e7jcK98GYySSbl3KL8bAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:51:df:da:4d:7b:ea:8e:da:52:80:d7:e1:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Sep 27 04:02:28 2026 GMT
Not After : Sep 28 04:02:28 2026 GMT
Subject: CN=989adb96902e8c77f4b045773b720bc6702615ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:8e:5b:79:68:27:0b:66:91:ce:d9:fc:b5:
79:19:57:be:a9:10:03:80:d1:d0:22:74:ed:3a:5d:
89:05:c7:14:ef:4f:b2:04:6e:0c:e0:ff:b2:65:67:
58:74:70:00:5b:55:ed:5c:74:2e:b6:24:56:bf:18:
a8:ea:dd:55:0d:89:f2:20:70:50:34:34:1e:39:24:
e7:10:e8:30:94:3e:65:94:c7:a2:c2:ac:d8:49:1e:
7c:53:50:fc:88:a5:df:08:3e:92:01:68:53:0c:6a:
d6:c9:17:d1:5a:91:8f:c8:52:7c:dd:8e:94:64:22:
48:f2:97:2f:e0:c8:2f:f4:0b:d6:43:f8:62:ed:bc:
f4:b9:1c:26:6a:33:38:b3:10:9a:d2:fb:23:ca:1b:
e9:93:70:66:2d:48:a8:df:d8:f6:d2:04:31:92:8d:
f6:05:0b:4c:51:a2:ca:7c:fa:52:b4:65:47:47:ee:
af:11:23:84:1a:b6:9d:15:47:9b:c1:0c:b1:2c:c9:
fe:30:f6:97:55:9b:cb:73:10:b6:e2:ac:29:01:12:
fe:e6:26:8c:53:00:7f:5a:0d:86:53:bb:5e:48:cf:
60:53:72:b9:49:c7:87:fa:b2:8a:a0:e5:63:23:a4:
bc:aa:6e:f1:c6:a7:2a:1f:7b:1f:1d:d3:45:b9:1f:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:DB:96:90:2E:8C:77:F4:B0:45:77:3B:72:0B:C6:70:26:15:CA
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d6:53:3f:20:ac:8f:6f:c5:a4:67:f9:a1:5d:6c:c0:13:5e:
57:a0:24:0f:9b:26:f9:35:a7:dd:0a:3b:1d:66:b1:16:ea:25:
39:1b:9a:88:33:e5:cd:29:cb:2c:9f:8f:9d:ee:d0:85:35:05:
43:4f:dd:d1:5b:cf:6c:8d:c7:71:46:86:47:1e:c5:91:ba:e1:
66:d1:19:0f:b7:6d:d4:ce:11:47:e3:9c:d2:c3:b5:51:f5:dc:
18:59:46:89:ae:a7:57:f0:2f:10:77:7d:d2:d0:f5:0e:7c:c9:
e6:52:1c:e8:15:63:af:c6:f7:c0:bd:bc:fd:8a:e4:b7:31:b8:
a0:83:b1:81:87:7a:22:b6:c6:68:19:42:13:97:51:97:f9:5e:
7f:30:e9:0c:6f:13:2a:05:31:71:3b:a0:ed:2b:e4:a0:07:36:
7e:46:68:80:09:a8:3a:91:48:78:a4:9c:7a:55:e0:db:e8:79:
ef:4d:2c:ec:64:ea:23:37:30:14:45:42:ae:d2:0c:df:0d:ae:
27:36:89:8a:70:0f:8a:35:ba:93:89:de:4d:e9:6f:96:5d:7d:
7b:41:4a:7d:dc:45:fd:7d:69:64:77:09:6b:6b:b4:7a:37:58:
4f:67:97:76:b7:66:eb:52:46:56:7d:b1:36:e5:32:f8:e9:39:
46:23:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:18:28 2026 by rpki-client