Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: 7AECTdsD4P1UjQJimu9ImiZ2Uzd5LmfRXi6SgJs4thM=
Subject key identifier: B5:C5:EC:79:50:0E:F2:99:73:38:7C:D2:0C:5E:AD:D0:CF:12:CE:E3
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019D27049077FDB3308964D56208D83051E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0CB0
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: lnoxONYOJM/mMNdtaH1Y5cPqKG7aQy0AKFuNbJmVIfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:90:77:fd:b3:30:89:64:d5:62:08:d8:30:51:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=b5c5ec79500ef29973387cd20c5eadd0cf12cee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:c5:23:b2:09:48:cc:1d:28:64:0a:2d:fb:
b9:b1:bd:c8:55:bd:2f:80:19:7d:e9:50:86:e9:29:
d1:78:a2:81:ac:e1:1e:ab:93:3f:56:46:35:5c:12:
dc:8f:cd:9c:82:37:20:1b:e6:4c:f4:db:b3:1e:c9:
4a:49:01:6a:3e:74:d4:08:b4:aa:e0:b2:74:32:fa:
86:c3:19:17:5f:c8:22:8e:b7:96:07:ce:24:83:be:
c1:3c:9d:1b:91:6c:1c:de:e6:85:3c:8f:37:7b:36:
92:22:83:1a:bd:0a:2c:44:a0:24:a3:60:68:ad:25:
22:25:7b:09:ae:a3:15:0f:56:10:1e:4c:46:e5:05:
54:5a:a0:6d:88:4b:dd:82:02:ad:90:06:af:0a:d4:
af:ed:80:ed:b1:cf:40:34:75:97:ea:d7:9a:39:d2:
8b:9f:40:6c:e5:e4:9e:70:b4:81:a3:4f:d4:bd:f2:
ba:a9:fc:08:4c:26:92:91:37:c0:cd:14:e2:9e:82:
71:4b:5c:fa:a4:92:ba:9d:a2:ac:52:fc:9e:6c:cf:
2c:6f:e4:33:c6:86:b9:fd:f0:91:b6:75:83:a7:ed:
5c:cc:6a:68:04:0c:54:66:a4:be:22:c2:4d:13:75:
60:ec:c3:a2:40:3a:c3:7b:f1:cc:79:28:40:3b:fb:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:EC:79:50:0E:F2:99:73:38:7C:D2:0C:5E:AD:D0:CF:12:CE:E3
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:14:78:32:6a:85:30:52:cc:dc:30:0b:73:82:26:e0:ff:cd:
29:7e:ac:9d:ab:19:ea:72:6a:7a:38:d6:cd:f7:b7:74:82:fd:
ae:48:49:52:ff:5e:c0:93:a7:88:b3:f1:90:a6:c0:f9:a2:04:
cb:f0:79:53:a9:81:b7:9a:6b:8d:dd:34:23:3e:de:cd:24:d2:
c2:19:69:f5:2d:57:75:df:b2:17:d2:ef:a5:2d:3c:e7:72:93:
1f:b5:55:73:26:0d:20:1c:4d:df:61:e9:10:e7:df:58:88:4d:
1b:3b:bb:85:6d:33:1d:a4:07:ee:fa:d0:11:45:05:87:95:77:
9b:90:4d:30:4f:07:02:dc:90:8e:d3:ca:5e:32:d7:16:0d:7b:
94:26:ed:18:55:fc:cc:ad:84:1d:4f:79:03:9c:ef:e4:86:b0:
93:6e:81:ef:15:ab:44:e8:5d:52:36:5a:eb:d0:c4:bf:99:dd:
58:9f:43:53:ce:ab:c3:3a:25:3d:60:51:83:ce:90:d9:51:bb:
41:e8:e6:e2:d3:bb:dc:d7:f1:d4:00:46:3c:59:80:12:62:9c:
ae:44:15:ea:85:ff:94:ca:ea:af:17:1c:bc:d9:a8:3b:1e:ba:
c9:0a:19:37:33:d9:87:c9:60:8e:04:59:8c:36:76:b0:ff:9a:
6d:c9:d2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJB3/bMwiWTVYgjYMFHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjYwMzI1MjIwMTQzWhcNMjYwMzI2MjIwMTQzWjAzMTEwLwYDVQQD
EyhiNWM1ZWM3OTUwMGVmMjk5NzMzODdjZDIwYzVlYWRkMGNmMTJjZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkrFI7IJSMwdKGQKLfu5sb3IVb0v
gBl96VCG6SnReKKBrOEeq5M/VkY1XBLcj82cgjcgG+ZM9NuzHslKSQFqPnTUCLSq
4LJ0MvqGwxkXX8gijreWB84kg77BPJ0bkWwc3uaFPI83ezaSIoMavQosRKAko2Bo
rSUiJXsJrqMVD1YQHkxG5QVUWqBtiEvdggKtkAavCtSv7YDtsc9ANHWX6teaOdKL
n0Bs5eSecLSBo0/UvfK6qfwITCaSkTfAzRTinoJxS1z6pJK6naKsUvyebM8sb+Qz
xoa5/fCRtnWDp+1czGpoBAxUZqS+IsJNE3Vg7MOiQDrDe/HMeShAO/t83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXF7HlQDvKZczh80gxerdDPEs7jMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBR4MmqF
MFLM3DALc4Im4P/NKX6snasZ6nJqejjWzfe3dIL9rkhJUv9ewJOniLPxkKbA+aIE
y/B5U6mBt5prjd00Iz7ezSTSwhlp9S1Xdd+yF9LvpS0853KTH7VVcyYNIBxN32Hp
EOffWIhNGzu7hW0zHaQH7vrQEUUFh5V3m5BNME8HAtyQjtPKXjLXFg17lCbtGFX8
zK2EHU95A5zv5Iawk26B7xWrROhdUjZa69DEv5ndWJ9DU86rwzolPWBRg86Q2VG7
Qejm4tO73Nfx1ABGPFmAEmKcrkQV6oX/lMrqrxccvNmoOx66yQoZNzPZh8lgjgRZ
jDZ2sP+abcnS/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:47 2026 by rpki-client