Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: dRWX42dTAFtaEsFoVj6Uw6m1patDdax2cgXMKhslO1s=
Subject key identifier: 7C:71:08:5D:A1:0D:23:5A:45:BC:C6:BC:1C:15:BA:68:06:7A:63:10
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01A1084A65F152CEC39120992EEF5AF833F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 19:00:55 +0000
Manifest this update: Sun 04 Oct 2026 19:00:55 +0000
Manifest next update: Mon 05 Oct 2026 19:00:55 +0000
Files and hashes: 1: C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (hash: PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: Y6bXGIekbOEQyHk0czX+w0Nfrp5MOIhnZG+rNoEYqpo=)
3: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (hash: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:65:f1:52:ce:c3:91:20:99:2e:ef:5a:f8:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Oct 4 19:00:55 2026 GMT
Not After : Oct 5 19:00:55 2026 GMT
Subject: CN=7c71085da10d235a45bcc6bc1c15ba68067a6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:3f:83:04:e9:f7:25:d8:bf:96:40:a1:cf:
2e:bf:f0:5d:77:ed:4d:4d:c7:d9:96:65:ce:0d:70:
c1:07:83:99:04:8e:20:a6:4f:d2:0d:4c:48:7d:22:
c8:99:50:5b:56:ef:b1:3b:57:06:cd:65:6d:e9:3b:
a7:d6:63:be:86:9b:2b:b5:1f:b7:92:07:da:1f:c1:
99:49:83:9a:93:ca:af:e9:c1:cd:ae:a9:e7:95:40:
e6:43:e1:d0:25:82:8e:33:01:53:ed:d5:63:84:f9:
02:37:b5:46:3d:cd:d2:b6:58:83:02:fd:f7:97:60:
e8:35:06:11:cc:a2:32:3f:67:ee:70:ee:4f:1a:76:
2e:27:80:eb:c6:62:29:8e:f8:fb:a4:7a:43:13:45:
ca:85:1f:2c:e0:3b:be:50:89:ec:5d:eb:00:b4:da:
a2:dd:a1:a0:28:28:eb:57:73:91:f2:45:c6:ba:e4:
e7:51:d4:d5:26:9a:04:90:52:4a:80:27:37:aa:bc:
c8:7d:83:9e:b7:f5:c8:ba:4c:00:8c:96:03:4c:66:
aa:11:c6:61:d0:ec:78:62:f6:59:64:38:18:81:43:
c4:b5:a8:f3:b6:aa:7f:4e:b3:45:8f:84:8c:76:f4:
09:b9:85:f2:33:11:0a:b5:a4:93:aa:61:aa:bc:70:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:08:5D:A1:0D:23:5A:45:BC:C6:BC:1C:15:BA:68:06:7A:63:10
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:df:25:6d:54:90:a3:4b:f0:52:98:d5:69:1b:24:e4:ce:
4d:de:b1:76:4f:6c:64:3a:89:8c:d9:cc:4c:fa:5e:26:a8:38:
01:67:15:fc:76:87:c1:2a:ac:1c:dd:f1:e3:30:ef:31:d8:a0:
06:09:e3:c5:2c:88:20:28:41:3c:3d:15:59:c6:8f:3a:5b:3f:
f9:8e:ac:1a:56:41:87:ff:21:84:42:29:d8:0e:ce:3a:b9:33:
65:e5:36:bf:aa:be:b9:c4:f1:d9:4f:96:d6:b0:9e:77:72:86:
dc:c4:cc:2d:2d:6e:e1:18:53:a7:db:39:91:3a:1b:8b:e9:a8:
91:f5:d4:66:cc:43:cb:89:b3:74:5e:6f:44:5c:3f:f6:ee:0f:
8a:38:40:02:30:b3:cf:5c:a0:e6:2a:96:05:62:79:8f:c3:7b:
f8:3a:de:4a:7c:ee:24:4b:fc:5c:74:2e:ca:08:57:f6:7e:3d:
2f:ce:fd:c1:2e:d8:20:c9:81:f5:20:f8:3e:d6:07:a7:28:70:
42:c1:62:26:1a:37:ab:68:f9:d4:9c:26:c7:32:4a:20:83:75:
c2:9e:b1:f3:16:dd:6c:c4:72:fb:fd:b7:a4:ab:0b:7c:bc:a0:
76:25:54:fa:1d:d3:1d:a9:bd:30:29:14:88:04:56:14:4e:74:
ca:0e:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:47:34 2026 by rpki-client