Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: k+AiLNIrZGtw3kStR97w8nxbx9Fz4ge28HiZcL1XwAg=
Subject key identifier: 04:4E:04:34:5C:7C:A2:72:AA:28:CE:6E:6C:9D:8E:6C:35:52:ED:D1
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019D25F1189D569BFBAA17DAC6B68304CE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: Q5FhHS_MVZGd1l2ZO9zRacw2QxY.roa (hash: Wzi4Lz9Dn9AJ7LwWcDDviF0pPsw/FGU4vgm1EN+k6No=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: VRhw3zIgsFCg0T0j+r8+29or0KV/tKgZ4MIg0y/Zy2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:18:9d:56:9b:fb:aa:17:da:c6:b6:83:04:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=044e04345c7ca272aa28ce6e6c9d8e6c3552edd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:cd:71:4b:b0:fd:12:77:3e:b5:54:53:89:
ec:63:ca:d2:3b:c7:ab:c3:c6:36:79:e0:e0:73:3c:
4a:cd:1d:a8:07:d8:9c:a9:b4:60:b8:a5:40:13:7d:
3d:6f:7e:d7:7a:74:cc:90:70:0b:9a:fd:42:97:65:
f3:a2:ba:db:35:d6:99:db:85:53:8a:99:80:1d:2a:
24:29:8e:a3:00:f6:42:72:63:c3:38:1b:28:96:17:
95:ec:97:a7:cc:31:ac:55:0f:da:ad:57:21:2c:b8:
43:f2:aa:d2:07:1e:dc:2c:ed:4b:29:d5:ec:d4:ed:
1f:ab:a6:bf:a4:97:0e:4d:be:95:6a:d2:67:0d:46:
35:67:fe:7c:f1:10:ab:27:97:4d:2d:40:77:a2:0a:
32:36:c9:6b:8a:3d:3e:cc:31:2f:1b:3e:94:bc:93:
67:e6:bf:9c:b7:bf:85:cc:ea:3c:0e:ee:34:b9:dc:
cd:ce:fd:27:0e:f5:16:43:01:86:b1:1f:71:c3:74:
20:41:22:76:76:c1:7e:87:81:6d:c4:3d:85:23:37:
a2:19:be:26:22:01:7b:cb:cf:53:2a:f8:61:87:7a:
46:c3:30:05:bc:dc:74:55:34:f1:25:b1:61:75:2c:
2b:51:e7:d8:d1:5a:e2:03:40:93:66:71:7a:12:41:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4E:04:34:5C:7C:A2:72:AA:28:CE:6E:6C:9D:8E:6C:35:52:ED:D1
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:aa:ee:c5:20:e8:46:12:ad:36:e5:f4:75:b1:cb:2f:78:
f7:d0:a1:e8:ee:55:f1:cd:8a:ac:a5:2b:cf:ce:9f:1f:6d:65:
34:54:64:10:10:77:97:3c:f0:a7:f2:82:6e:4a:55:71:bb:11:
80:90:5d:d6:45:a2:78:63:87:e6:63:64:12:de:8a:16:e8:7b:
a3:53:f5:c3:bb:43:cf:bc:52:22:59:a6:c0:de:d0:b7:4d:26:
de:19:89:9e:ca:be:27:78:b1:b8:31:ce:c6:41:40:84:ef:5f:
a9:4c:b5:c0:a2:29:eb:ba:07:03:e2:0d:53:01:5d:60:f0:d8:
3c:00:04:1a:96:96:6e:7b:b6:8b:1d:0c:e5:fa:d6:84:63:3a:
41:70:6e:a0:8a:3b:6c:0f:fd:05:6c:28:47:5a:37:23:82:8a:
7a:97:d9:8f:5a:27:d7:60:78:99:33:fd:ab:1a:7c:f1:1a:1f:
d5:68:f1:3e:5a:c1:79:20:85:bf:4e:de:a8:0b:60:c5:44:00:
9e:1f:c9:ed:28:3f:51:30:2a:b1:af:20:5d:37:c3:e5:40:da:
97:3c:f3:10:74:c7:79:4b:aa:27:fd:02:80:38:d5:89:33:02:
98:c7:ff:b0:9c:e8:c5:53:34:85:0f:ba:e5:2c:de:e3:34:cd:
6b:17:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:08 2026 by rpki-client