Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: 0G35KxgbP3Ebay8Ox8NFl4HghGHYh4kZF3F/QTgRZ7k=
Subject key identifier: A3:7C:FB:73:86:6E:81:45:ED:BE:D2:44:A8:29:E9:14:4D:8C:A9:FA
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 019D26CD6023C229F6BB12CF68341F7D1252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 16B3
Signing time: Wed 25 Mar 2026 21:01:26 +0000
Manifest this update: Wed 25 Mar 2026 21:01:26 +0000
Manifest next update: Thu 26 Mar 2026 21:01:26 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: nsBp4Y6afWFUR7MSEyQ7qErYkmanIRTjMdcv/dakIjc=)
2: W-RHkKjfkrIHhhnfjojvtv5e4JE.roa (hash: r2MnvbbzWy/csgN5/dHbWJgH2I2PBFo2lC7v+snNF3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:60:23:c2:29:f6:bb:12:cf:68:34:1f:7d:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Mar 25 21:01:26 2026 GMT
Not After : Mar 26 21:01:26 2026 GMT
Subject: CN=a37cfb73866e8145edbed244a829e9144d8ca9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:1b:94:5f:af:6d:d5:0f:89:64:1e:3c:5d:
cb:da:9c:f8:35:90:86:03:76:0c:e9:61:4b:38:33:
5f:22:69:53:f0:12:36:dc:1f:2d:a6:da:dc:56:c2:
f6:e2:64:f7:79:c7:dc:33:62:ef:18:f1:0e:e9:17:
8e:4d:ce:e0:e6:87:25:a0:1d:a4:54:13:4a:80:a1:
b1:39:e3:ec:da:4d:e0:4b:67:39:24:8e:13:22:b0:
32:2d:47:0a:57:c5:ff:96:35:6d:6b:97:af:dd:98:
44:f2:09:a8:41:ca:e5:37:7c:3e:f4:73:43:f5:02:
69:43:86:d9:e1:ba:a3:fe:ed:fa:1c:90:2a:13:64:
fa:53:5a:d6:f6:16:e3:a7:6f:50:7b:68:d2:f5:36:
dc:10:fa:da:a8:a7:12:37:cb:a8:df:8c:58:ba:ab:
50:57:49:23:df:2f:7f:ec:5e:4f:95:2f:78:0c:30:
4a:e3:37:2e:b8:c8:4a:b8:00:e5:78:0a:7b:38:b3:
af:6f:c0:94:00:13:84:0f:ad:eb:1a:d4:41:02:2d:
00:fb:97:f5:38:90:3a:f3:40:e1:01:27:2c:c0:dc:
3f:79:ec:74:de:a4:fb:3e:26:64:2d:7d:47:09:ef:
d8:98:ec:a9:f5:75:64:1c:24:cc:5e:e3:a0:d9:31:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:FB:73:86:6E:81:45:ED:BE:D2:44:A8:29:E9:14:4D:8C:A9:FA
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:1a:77:10:1c:1d:3e:50:29:2a:f8:02:7c:99:40:66:b9:
f3:59:36:9f:f3:47:8d:0c:f8:1b:2f:5b:2d:58:46:ce:5d:13:
31:64:60:f3:e3:50:76:35:34:f8:44:8a:ba:87:ff:13:1f:42:
51:8d:59:a2:29:ec:9d:55:8a:80:b1:c4:5b:52:82:cc:e4:de:
c1:36:b4:b8:d7:bc:e9:01:4c:e1:c0:5b:13:ba:3b:7e:cb:af:
f4:42:65:07:20:15:0b:54:0b:fc:a8:6f:bb:29:b8:f7:aa:28:
7c:2c:1f:9e:48:9f:30:2b:8f:65:48:e3:59:18:84:a6:91:c7:
24:28:84:ae:e5:91:7e:cc:a0:b2:d0:7f:3a:e2:13:12:16:58:
3c:27:43:41:ec:0a:3c:70:29:2b:88:65:94:d0:92:58:e4:d6:
00:98:0d:e0:5b:4e:b6:b0:f0:d1:70:69:cd:dd:37:23:19:a4:
3f:11:26:47:5a:b7:5f:3d:6c:c8:22:10:dc:ec:4e:dd:c5:1a:
b4:d7:cf:99:f3:e1:ff:12:65:d9:a5:66:f2:59:71:90:b3:1e:
e0:87:ed:17:fd:ce:ba:b0:9c:20:b7:ec:7d:b7:b7:af:8b:72:
a9:b6:fe:5a:10:aa:d1:a8:36:60:94:41:db:31:4f:bd:46:13:
3c:1d:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:52 2026 by rpki-client