Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: YfQ1LcYsjmNhYA7eIq9csDkWhMgQ3H/1/U5rm94NMZs=
Subject key identifier: 47:C5:10:7B:C4:95:B0:38:19:F3:25:28:58:C3:1D:86:2F:B9:72:EE
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019EB6C56BC236E866CCCC88E7503AFD04A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 13:00:51 +0000
Manifest this update: Thu 11 Jun 2026 13:00:51 +0000
Manifest next update: Fri 12 Jun 2026 13:00:51 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: AZUqB2U4e2/29bJfhyk3hBfgt34G7ICuPXZBpxruad4=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:6b:c2:36:e8:66:cc:cc:88:e7:50:3a:fd:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jun 11 13:00:51 2026 GMT
Not After : Jun 12 13:00:51 2026 GMT
Subject: CN=47c5107bc495b03819f3252858c31d862fb972ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:d5:e0:f7:67:44:f4:b0:a1:10:6e:2c:53:
70:4b:98:dd:fb:9f:c0:49:3b:7f:3b:47:8a:c7:50:
2a:17:09:73:7e:a2:b5:06:cf:0d:c8:3c:aa:ba:c0:
de:7c:8a:5f:d3:8a:ad:3d:e2:06:9e:5b:20:bb:db:
4c:4b:d8:6c:ec:99:d8:27:2c:41:b3:f0:ba:26:3d:
3a:b6:32:75:66:90:ab:31:90:4b:b3:db:f0:12:52:
6e:40:f1:e0:7e:e7:7a:35:1a:6e:42:f0:26:82:c0:
0f:fe:10:41:45:11:89:1a:24:6f:96:e4:92:53:07:
65:c5:d5:17:58:12:cd:a0:86:67:8e:4e:c0:1a:fa:
f6:17:ab:17:c5:c6:c2:41:fd:3e:b6:47:6a:ac:80:
04:91:e4:ec:80:b7:d3:bb:c9:04:cd:f3:6b:3a:8e:
88:85:a5:0e:ae:ed:68:7e:93:e8:6e:0f:5e:98:9b:
81:c9:96:d5:00:4e:b8:00:7b:45:c0:ed:79:97:55:
84:cf:dc:eb:ff:27:73:a1:be:a3:12:8c:46:6a:c1:
31:2a:cc:28:12:fe:94:d5:15:2e:3f:89:49:40:15:
ca:bb:09:1b:49:17:ac:77:23:86:ce:15:67:9b:7c:
62:fe:03:b0:67:e0:b7:28:18:d9:e0:5e:8b:44:9f:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:10:7B:C4:95:B0:38:19:F3:25:28:58:C3:1D:86:2F:B9:72:EE
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:26:42:cc:31:19:b8:5b:0b:e9:6a:78:32:96:e2:9e:af:3f:
1c:51:70:47:23:ab:af:65:03:d9:e7:c9:51:35:8a:c9:d5:5d:
29:29:9e:68:4e:6c:57:d2:fb:09:c3:b4:25:70:5d:41:cc:c9:
5a:57:bb:fe:16:e6:fd:cf:6a:08:62:74:9b:bb:e4:66:70:43:
27:c8:c5:00:cf:12:82:0c:b2:f5:79:c1:a3:b9:92:6d:91:06:
47:9c:3d:1e:9f:13:d4:35:8b:9f:9c:91:ed:3e:d3:68:54:ea:
44:76:b9:9d:8b:1f:b0:3e:c3:5d:41:cb:32:4c:c5:61:7c:b1:
1d:5a:ea:d3:c5:8d:80:64:fa:46:23:8b:93:f7:81:ba:e0:ba:
65:22:b1:61:64:0c:59:f6:dc:eb:b4:e0:c2:f6:15:36:4d:ac:
04:9b:1a:83:c0:11:53:3e:f5:bf:3e:73:80:d8:9d:a8:91:56:
b5:33:0c:ac:9c:61:4b:c0:45:33:bc:a1:eb:8e:e3:b9:12:12:
3b:9e:7a:56:c0:e1:62:9b:b1:c4:3a:10:9f:3e:02:73:88:2d:
aa:18:78:27:b3:05:e5:c5:5e:83:ad:48:69:3a:04:bb:a4:0c:
84:bd:72:27:85:23:88:a5:a0:40:d5:20:83:1f:a5:8b:e6:4d:
7e:e2:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:15 2026 by rpki-client