Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: hpM1p913EIUPJNPq9WkXoBp/0akwp2mo5DWG+zCNZD4=
Subject key identifier: 8E:DD:46:63:95:48:7C:97:C0:2C:69:B3:D6:A7:1F:ED:C1:FF:4F:03
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019E1F7F1F3B9AD96765B4EA3E9E9605CB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0A85
Signing time: Wed 13 May 2026 04:01:25 +0000
Manifest this update: Wed 13 May 2026 04:01:25 +0000
Manifest next update: Thu 14 May 2026 04:01:25 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: n62Kiog2sK9tkDDzy7g+mOn61bkZj0RkdYrpkEw9ZLk=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1f:3b:9a:d9:67:65:b4:ea:3e:9e:96:05:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: May 13 04:01:25 2026 GMT
Not After : May 14 04:01:25 2026 GMT
Subject: CN=8edd466395487c97c02c69b3d6a71fedc1ff4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:70:ba:83:7e:1d:5a:fe:bd:6a:06:7d:b7:
28:2c:ad:d8:fb:41:75:83:d0:c9:99:56:cc:33:b3:
5b:40:12:28:b6:45:f1:6d:4e:20:67:86:f0:ae:2d:
14:0a:43:04:46:44:ed:ea:f6:8b:e1:5f:73:5c:14:
98:18:88:7c:2a:b8:3f:ea:0d:5a:44:3a:dc:9b:38:
c9:21:69:5b:85:c4:03:1a:f8:b2:72:92:03:80:13:
6f:4f:44:5b:07:f5:0b:95:f8:ce:c8:25:57:0e:cc:
a1:b1:4d:3c:be:8a:a4:b6:55:1b:a1:5e:bd:62:ed:
c7:1e:22:da:21:9a:f2:41:7a:f6:b7:81:d8:5b:67:
a5:2d:98:9f:9e:7b:13:55:36:82:cb:9f:40:2e:69:
2d:46:d1:c3:8c:09:f2:a2:7c:2d:9e:b5:22:f7:ff:
d4:f3:95:42:48:37:58:3f:4b:bb:2a:9c:06:83:c4:
0a:ac:d9:b5:20:78:d0:88:af:13:b0:41:4b:3e:b2:
7d:11:24:2b:dc:0a:e8:05:ef:76:0e:b6:ba:00:6b:
6e:ca:3a:9a:b1:69:e5:29:63:22:bf:b9:9d:28:08:
55:2f:dd:d2:de:a9:5e:01:5c:79:41:8a:e3:67:85:
56:0a:d1:85:ee:22:26:5f:e0:0d:2e:00:82:8d:20:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:46:63:95:48:7C:97:C0:2C:69:B3:D6:A7:1F:ED:C1:FF:4F:03
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a9:01:b7:5b:93:bb:30:ae:8a:a3:5e:e3:2e:7b:12:ea:03:
d4:af:d5:57:1b:5e:13:5d:0b:28:59:12:81:5a:91:27:e5:7e:
21:9d:ca:58:7f:60:ee:5e:fe:87:c4:d3:69:3f:aa:36:e7:ee:
1e:70:64:be:92:a4:35:9d:ae:4a:4a:b5:e8:68:85:44:a6:02:
2f:4e:bd:f1:86:a8:d4:25:c5:c2:e3:59:f9:28:29:63:f3:95:
e3:0c:16:5f:b1:8c:fa:fb:40:29:3d:27:86:6c:bd:5b:4f:a3:
c0:7e:08:f3:8a:32:93:b8:78:f9:4b:70:9a:c2:1e:b4:72:0a:
85:5f:27:a3:03:c5:bf:7b:a6:a5:3f:28:e8:5d:fb:12:26:44:
08:f6:27:f1:93:89:bd:5e:6f:29:bc:82:d8:de:eb:6a:41:29:
d4:e8:09:1d:c9:e6:89:40:95:c3:61:82:fe:39:b9:98:3e:7e:
0b:36:24:6d:26:cf:b7:8b:59:df:8e:e4:52:c9:54:79:79:c0:
f4:54:53:18:2a:e4:a6:9c:32:5c:f8:5e:06:04:27:a1:af:5d:
6c:46:9e:66:31:ac:eb:e9:dc:83:05:ff:a6:a2:84:65:bb:7d:
78:d7:d8:b4:b4:16:d1:69:1b:8d:68:92:e9:fb:b5:c2:f8:e7:
52:4e:10:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffx87mtlnZbTqPp6WBctwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy
NDc3OGIwHhcNMjYwNTEzMDQwMTI1WhcNMjYwNTE0MDQwMTI1WjAzMTEwLwYDVQQD
Eyg4ZWRkNDY2Mzk1NDg3Yzk3YzAyYzY5YjNkNmE3MWZlZGMxZmY0ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGhwuoN+HVr+vWoGfbcoLK3Y+0F1
g9DJmVbMM7NbQBIotkXxbU4gZ4bwri0UCkMERkTt6vaL4V9zXBSYGIh8Krg/6g1a
RDrcmzjJIWlbhcQDGviycpIDgBNvT0RbB/ULlfjOyCVXDsyhsU08voqktlUboV69
Yu3HHiLaIZryQXr2t4HYW2elLZifnnsTVTaCy59ALmktRtHDjAnyonwtnrUi9//U
85VCSDdYP0u7KpwGg8QKrNm1IHjQiK8TsEFLPrJ9ESQr3AroBe92Dra6AGtuyjqa
sWnlKWMiv7mdKAhVL93S3qleAVx5QYrjZ4VWCtGF7iImX+ANLgCCjSCSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7dRmOVSHyXwCxps9anH+3B/08DMB8GA1UdIwQY
MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt
Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh
LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6kBt1uT
uzCuiqNe4y57EuoD1K/VVxteE10LKFkSgVqRJ+V+IZ3KWH9g7l7+h8TTaT+qNufu
HnBkvpKkNZ2uSkq16GiFRKYCL0698Yao1CXFwuNZ+SgpY/OV4wwWX7GM+vtAKT0n
hmy9W0+jwH4I84oyk7h4+UtwmsIetHIKhV8nowPFv3umpT8o6F37EiZECPYn8ZOJ
vV5vKbyC2N7rakEp1OgJHcnmiUCVw2GC/jm5mD5+CzYkbSbPt4tZ347kUslUeXnA
9FRTGCrkppwyXPheBgQnoa9dbEaeZjGs6+ncgwX/pqKEZbt9eNfYtLQW0WkbjWiS
6fu1wvjnUk4QBg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:21 2026 by rpki-client