Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: nC6vB0cywwSxF/5004OuQ1tcKH4hbsNG7CgvNCgpMB0=
Subject key identifier: C2:AA:FC:74:6B:E1:77:12:EB:B7:DF:FD:41:15:36:09:87:64:E3:3B
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019E1E350F55670895D1D3D0CB25ADAF9FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0D30
Signing time: Tue 12 May 2026 22:00:54 +0000
Manifest this update: Tue 12 May 2026 22:00:54 +0000
Manifest next update: Wed 13 May 2026 22:00:54 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: VteH5qFhPK6CcsOHYQbdn/s/l2/+Kj4OtxUQKo8oofA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:0f:55:67:08:95:d1:d3:d0:cb:25:ad:af:9f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: May 12 22:00:54 2026 GMT
Not After : May 13 22:00:54 2026 GMT
Subject: CN=c2aafc746be17712ebb7dffd411536098764e33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:7a:85:35:ce:8c:b3:95:8c:4f:96:04:f7:
9a:76:f9:b2:d0:48:05:15:e0:8c:22:7b:71:00:cb:
8e:48:55:90:a1:35:77:03:0a:d5:93:c0:0f:94:35:
53:5f:6a:92:6a:0c:b7:1f:bc:bd:04:3a:f9:80:71:
08:b6:59:7b:80:c0:60:33:be:db:68:ff:c2:bc:6f:
e6:77:f4:40:99:17:24:5d:6c:3e:01:8b:e6:df:63:
c9:e9:20:66:81:66:38:2a:21:13:84:2f:45:9a:34:
fe:60:f3:6f:92:ea:f2:db:fe:b1:9e:36:af:cd:54:
6c:78:3a:22:e8:43:f3:ff:69:5a:fc:2f:82:a5:24:
a8:36:4b:e9:18:42:7a:7b:84:1c:66:6d:34:72:ec:
55:c9:2f:d7:86:ab:d7:72:0d:f0:6e:c5:37:db:4a:
a5:02:2f:35:e0:6f:fc:04:d5:8d:e8:59:f7:51:77:
55:32:ca:d5:31:96:d8:35:2e:03:58:67:d4:d6:46:
25:ef:98:ca:d6:ab:48:63:c0:a5:d3:fe:14:51:7d:
56:aa:38:07:3e:32:10:3d:1b:7f:1b:9a:e2:3f:b5:
94:6e:75:3c:d2:2f:33:6b:3a:42:17:f2:4e:ad:2e:
62:71:12:a7:54:6a:e7:4b:12:a4:90:8e:26:4c:46:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AA:FC:74:6B:E1:77:12:EB:B7:DF:FD:41:15:36:09:87:64:E3:3B
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b4:03:1d:ab:b5:ac:a1:14:a3:44:5c:d8:05:46:ba:04:84:
1a:96:f1:f7:6f:56:60:47:a7:d8:ad:b2:0f:52:1f:ac:11:6a:
db:c4:ea:c3:2b:41:3b:bc:3c:3f:c2:e4:cf:51:e7:5b:ac:cf:
0c:e3:a3:1b:77:0b:5e:1d:21:2e:54:02:35:fd:5b:9a:78:c1:
f4:4b:db:94:9a:49:18:9f:42:69:ce:08:8f:7f:13:b3:e0:60:
d9:c4:0e:3e:33:77:92:a2:eb:a6:f9:2b:50:a5:5b:8c:7b:22:
84:56:7e:32:71:77:c8:03:eb:e0:de:22:78:f9:3a:e1:12:51:
4d:53:9f:a9:b4:ce:b0:a0:15:e8:5c:ee:97:b2:10:2a:44:4e:
18:69:c5:d6:46:ab:0b:76:20:9f:3d:e5:fc:d4:5b:6b:74:86:
c6:6f:b1:fe:68:fd:3e:46:f0:b0:14:ed:3e:4f:1f:16:05:72:
77:fa:06:12:00:36:44:ca:de:d9:d3:16:b7:90:c8:2d:fa:ba:
bf:2b:aa:a7:1b:0c:97:a0:3d:c5:b1:e4:15:85:ad:60:7f:be:
77:91:99:cb:7c:f8:4c:35:10:6d:b3:4e:94:a6:cc:92:e4:e1:
87:03:ad:10:6a:7f:48:79:3a:6c:15:57:d1:20:f0:23:43:b3:
23:71:f4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNQ9VZwiV0dPQyyWtr5+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjYwNTEyMjIwMDU0WhcNMjYwNTEzMjIwMDU0WjAzMTEwLwYDVQQD
EyhjMmFhZmM3NDZiZTE3NzEyZWJiN2RmZmQ0MTE1MzYwOTg3NjRlMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1d6hTXOjLOVjE+WBPeadvmy0EgF
FeCMIntxAMuOSFWQoTV3AwrVk8APlDVTX2qSagy3H7y9BDr5gHEItll7gMBgM77b
aP/CvG/md/RAmRckXWw+AYvm32PJ6SBmgWY4KiEThC9FmjT+YPNvkury2/6xnjav
zVRseDoi6EPz/2la/C+CpSSoNkvpGEJ6e4QcZm00cuxVyS/XhqvXcg3wbsU320ql
Ai814G/8BNWN6Fn3UXdVMsrVMZbYNS4DWGfU1kYl75jK1qtIY8Cl0/4UUX1WqjgH
PjIQPRt/G5riP7WUbnU80i8zazpCF/JOrS5icRKnVGrnSxKkkI4mTEaThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKq/HRr4XcS67ff/UEVNgmHZOM7MB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7QDHau1
rKEUo0Rc2AVGugSEGpbx929WYEen2K2yD1IfrBFq28TqwytBO7w8P8Lkz1HnW6zP
DOOjG3cLXh0hLlQCNf1bmnjB9EvblJpJGJ9Cac4Ij38Ts+Bg2cQOPjN3kqLrpvkr
UKVbjHsihFZ+MnF3yAPr4N4iePk64RJRTVOfqbTOsKAV6Fzul7IQKkROGGnF1kar
C3Ygnz3l/NRba3SGxm+x/mj9PkbwsBTtPk8fFgVyd/oGEgA2RMre2dMWt5DILfq6
vyuqpxsMl6A9xbHkFYWtYH++d5GZy3z4TDUQbbNOlKbMkuThhwOtEGp/SHk6bBVX
0SDwI0OzI3H03A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:26 2026 by rpki-client