Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: O1rtUSi2U2WGTSHzSD/SE8QRyfYGmB7twf9D5N2cZ/M=
Subject key identifier: 84:A5:88:F3:7E:D9:05:7E:95:49:2C:E6:DD:78:AC:64:05:C6:B2:25
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 019D2A72463B4481E42404E9CDBFD20E5099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:25 +0000
Manifest this update: Thu 26 Mar 2026 14:00:25 +0000
Manifest next update: Fri 27 Mar 2026 14:00:25 +0000
Files and hashes: 1: 9QydodLxK9rUXP9S5hg2oY8e164.roa (hash: 9FAzjdLFT8fn52nXr1/CoNt7SxfwNxZtFTZWh8c6oZI=)
2: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: JZYzEiQAN3l2zqnXoc4H2gQVHhPKArVPJgk1e0NvzS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:46:3b:44:81:e4:24:04:e9:cd:bf:d2:0e:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Mar 26 14:00:25 2026 GMT
Not After : Mar 27 14:00:25 2026 GMT
Subject: CN=84a588f37ed9057e95492ce6dd78ac6405c6b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:13:c8:ed:80:05:d1:f5:61:43:a3:6b:b5:
f5:f8:7c:34:2c:b3:1a:8a:4c:6c:fc:a3:9c:55:18:
88:d2:00:74:05:0b:ac:45:1a:a1:ec:1f:8f:ba:59:
6e:05:62:34:96:10:2f:c8:18:46:b1:b3:6d:e3:96:
fd:be:28:30:bc:a3:ff:5a:ca:2d:8b:4c:36:95:de:
c1:fd:5a:23:20:58:92:f7:4c:8e:14:22:47:da:94:
76:9c:2e:78:e6:0b:80:ce:6d:78:de:14:70:7b:0a:
f3:b3:93:ec:db:23:da:c1:e0:27:5a:d6:00:20:bc:
ba:59:3d:87:aa:a5:4f:6b:18:38:3a:03:d4:97:c3:
f4:f3:d7:a7:70:8f:de:5c:16:a1:21:89:de:b3:75:
fe:96:de:c9:ac:8c:c2:2b:42:9a:23:3d:24:9d:d9:
cf:1f:33:94:47:45:17:76:7c:ce:cc:3b:33:80:e4:
ed:b1:19:91:11:bc:e7:98:55:53:25:fd:3c:41:76:
91:bd:05:ae:b3:05:79:e2:cf:c7:5e:59:5c:9f:91:
d1:fa:80:0c:b2:09:f4:ad:53:d2:fc:16:04:7f:49:
4e:41:0d:5b:68:81:01:9a:27:95:a5:38:05:f9:0a:
67:0b:da:16:68:1b:a0:35:83:67:c1:64:79:4a:7d:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:88:F3:7E:D9:05:7E:95:49:2C:E6:DD:78:AC:64:05:C6:B2:25
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:a7:11:2d:6b:3b:86:21:56:2d:87:c7:e5:d2:72:8c:51:
5d:f5:d1:7a:94:e7:dd:17:38:28:75:37:24:f1:90:12:74:df:
3b:d6:69:49:33:d0:a3:0b:b7:76:bc:72:a2:76:d5:e3:1b:9d:
9e:93:bc:fd:b4:6f:84:f6:45:24:29:79:fd:2e:56:3d:f2:2d:
d5:33:b0:28:47:60:cb:5f:1c:32:9c:34:2f:4c:bf:59:50:c9:
6f:c0:55:55:a4:9b:9b:e6:51:3e:39:eb:21:cb:70:2e:83:c0:
90:09:70:27:89:08:67:b3:6f:1a:c5:40:f8:74:18:85:0d:18:
1d:a9:12:cb:ee:39:41:32:ef:90:2f:21:9f:ea:e6:47:dc:2e:
26:e4:5d:d7:c5:02:6c:39:43:f0:89:25:b6:f9:a6:29:01:62:
38:fa:54:87:a4:53:65:d4:b8:78:33:ee:1e:3d:44:a5:74:6c:
04:5f:52:e3:23:d0:39:96:f8:c8:97:1c:2d:76:78:76:4e:0d:
73:ac:36:ab:1c:27:9e:b4:c9:92:59:b1:96:9b:87:8f:4d:a2:
55:85:9f:5f:a5:18:be:66:b3:c2:4f:c0:91:15:f9:a0:0f:f2:
da:de:20:3b:bc:41:5a:d6:26:9a:3b:33:29:97:ae:07:42:ab:
6b:81:ec:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qckY7RIHkJATpzb/SDlCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjYwMzI2MTQwMDI1WhcNMjYwMzI3MTQwMDI1WjAzMTEwLwYDVQQD
Eyg4NGE1ODhmMzdlZDkwNTdlOTU0OTJjZTZkZDc4YWM2NDA1YzZiMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhATyO2ABdH1YUOja7X1+Hw0LLMa
ikxs/KOcVRiI0gB0BQusRRqh7B+PulluBWI0lhAvyBhGsbNt45b9vigwvKP/Wsot
i0w2ld7B/VojIFiS90yOFCJH2pR2nC545guAzm143hRwewrzs5Ps2yPaweAnWtYA
ILy6WT2HqqVPaxg4OgPUl8P089encI/eXBahIYnes3X+lt7JrIzCK0KaIz0kndnP
HzOUR0UXdnzOzDszgOTtsRmREbznmFVTJf08QXaRvQWuswV54s/HXllcn5HR+oAM
sgn0rVPS/BYEf0lOQQ1baIEBmieVpTgF+QpnC9oWaBugNYNnwWR5Sn3U9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISliPN+2QV+lUks5t14rGQFxrIlMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNunES1r
O4YhVi2Hx+XScoxRXfXRepTn3Rc4KHU3JPGQEnTfO9ZpSTPQowu3drxyonbV4xud
npO8/bRvhPZFJCl5/S5WPfIt1TOwKEdgy18cMpw0L0y/WVDJb8BVVaSbm+ZRPjnr
IctwLoPAkAlwJ4kIZ7NvGsVA+HQYhQ0YHakSy+45QTLvkC8hn+rmR9wuJuRd18UC
bDlD8IkltvmmKQFiOPpUh6RTZdS4eDPuHj1EpXRsBF9S4yPQOZb4yJccLXZ4dk4N
c6w2qxwnnrTJklmxlpuHj02iVYWfX6UYvmazwk/AkRX5oA/y2t4gO7xBWtYmmjsz
KZeuB0Kra4HsFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:31 2026 by rpki-client