Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: qckhjGJ9C7tVQzC4TRX2mVWnEDPXasAKWXxCoOCD5oM=
Subject key identifier: 17:86:1B:89:79:86:27:EE:E3:17:E0:48:3A:4C:F7:4F:D3:9A:9B:3C
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01A17D732EAD9FDCD0B45E37394143B354E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 13:01:02 +0000
Manifest this update: Tue 27 Oct 2026 13:01:02 +0000
Manifest next update: Wed 28 Oct 2026 13:01:02 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: TJRa+VloLfuZ+EJhEa4qAsDQzbNUCWwRTEUGYTQqdgA=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:2e:ad:9f:dc:d0:b4:5e:37:39:41:43:b3:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Oct 27 13:01:02 2026 GMT
Not After : Oct 28 13:01:02 2026 GMT
Subject: CN=17861b89798627eee317e0483a4cf74fd39a9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:26:91:09:3c:73:25:42:68:bc:13:9e:3d:
32:5c:7b:39:df:75:02:da:58:59:d7:34:31:36:4b:
a5:d1:5b:70:84:65:78:4d:15:20:b8:af:10:1b:48:
86:68:69:fb:30:c5:e6:13:6a:35:95:0e:7d:c3:ac:
de:c8:03:8e:f4:e3:df:44:c3:7e:80:16:18:27:93:
a0:4a:e7:27:39:02:15:d0:7b:a2:b4:49:37:96:8d:
51:4a:e0:fa:19:42:e5:4c:ed:47:82:3d:c7:87:d2:
6f:e2:5a:89:c4:e2:44:ee:95:4b:64:9b:f5:3f:0a:
41:02:7a:a9:7c:1a:f5:c2:5d:0e:47:42:50:60:95:
ed:1e:48:db:95:7a:fd:64:30:1c:f8:22:5e:d3:6d:
a8:87:38:ed:06:77:6c:c9:f5:28:cd:70:20:ce:56:
2f:75:c1:62:1f:cf:3a:18:bb:86:73:dc:ac:40:51:
5e:ba:7e:c5:3a:ac:53:5d:f0:f9:98:44:a4:fb:c0:
cd:5d:28:6a:78:e4:93:a0:76:90:ba:f2:a4:bc:cb:
e5:b5:d9:9f:bd:b8:36:3d:0c:23:61:39:e5:cd:1d:
8a:b4:a5:e8:6c:55:44:a8:e5:08:92:7e:e1:0c:90:
82:1b:ee:e2:34:85:99:c6:9c:57:7f:a5:07:95:5d:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:86:1B:89:79:86:27:EE:E3:17:E0:48:3A:4C:F7:4F:D3:9A:9B:3C
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a2:0d:a0:58:7e:26:0b:0c:9c:fe:a4:12:c6:c5:a4:88:68:
02:c5:60:71:49:c2:c5:9b:e9:75:b5:dc:73:11:f2:6e:3a:87:
c3:70:38:24:13:ee:0b:e7:f3:de:3b:cc:7f:31:4d:ac:a3:50:
72:ad:7a:56:64:ee:ba:56:42:bd:56:fd:dc:f8:38:9d:f8:6b:
05:33:cd:0a:dc:58:36:c5:9c:d4:e9:a4:40:fc:04:f1:e1:d1:
67:0e:24:6f:96:15:45:7f:db:01:60:d8:36:48:34:50:6c:1e:
e8:36:26:8c:67:38:50:52:94:11:d9:6c:d6:67:7f:d8:5f:4d:
ec:c0:0b:79:b5:32:9a:c2:ab:12:65:3b:1e:84:73:b7:17:2e:
ec:c4:1f:a2:3f:3f:67:0f:c6:8e:7c:d7:db:e6:ce:99:27:ab:
86:21:e8:c2:f5:8c:4f:18:fd:f8:76:af:d1:0f:bf:43:46:3b:
97:66:af:7a:fa:6d:6c:85:4b:10:d9:5c:3d:28:a4:2f:62:a1:
af:05:e3:81:19:aa:31:04:d7:82:ab:2c:6f:0b:71:ad:62:a5:
0a:c3:c8:cc:70:78:df:8b:bb:06:47:12:47:2b:e2:a2:a9:6c:
d3:f4:64:01:77:53:6d:de:fd:e1:ab:83:9c:49:17:d2:f1:c7:
07:f2:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:00 2026 by rpki-client