Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: 97RwkTvLw3g7ijmQKKOPb1eP6XCZkz7rBKcXklBIp8o=
Subject key identifier: EE:09:C1:CC:94:6F:3C:E6:59:42:9A:2D:5A:70:97:5C:53:C9:D4:3E
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019DCD188AE726FE7F86DF83B868EB847A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 04:00:30 +0000
Manifest this update: Mon 27 Apr 2026 04:00:30 +0000
Manifest next update: Tue 28 Apr 2026 04:00:30 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: ZgH4rx1sT1WmdNCl6pM+UQQXQOXvCfXjnCh4TkZ4Y78=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:8a:e7:26:fe:7f:86:df:83:b8:68:eb:84:7a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Apr 27 04:00:30 2026 GMT
Not After : Apr 28 04:00:30 2026 GMT
Subject: CN=ee09c1cc946f3ce659429a2d5a70975c53c9d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:bf:7e:03:5d:98:4d:ca:44:2e:da:8f:9c:
ea:83:29:6c:05:83:4b:d5:6d:77:a1:7a:27:c5:3a:
ef:b6:07:ad:e6:d8:8f:89:a6:f2:d3:b6:5b:b5:0e:
48:57:97:0a:39:e1:fa:a7:15:f4:22:59:2b:11:5f:
2b:f4:09:fb:ba:87:fb:29:52:d1:f7:ad:64:ba:9f:
a4:ad:14:d8:1d:03:21:d1:75:78:53:44:ff:1b:48:
1f:45:b7:59:80:88:c3:17:65:d6:9e:91:c8:4d:52:
38:3f:b3:fe:21:5b:07:01:08:39:6f:57:66:c6:3c:
ae:08:49:15:b1:d7:af:95:35:5d:1b:94:aa:27:e7:
3e:f7:85:ed:be:e7:10:66:e2:0e:17:48:ab:a7:e3:
1a:b6:a0:bc:04:0d:1c:cd:29:6f:82:13:c2:a3:24:
86:f2:35:cf:8a:73:c2:46:d2:79:df:8d:bb:81:61:
99:d7:57:f3:c6:10:4a:f1:ca:1c:63:87:5b:d0:99:
8f:0e:27:a0:23:ca:30:26:90:e6:47:ab:13:58:0e:
c8:75:a5:f9:56:2a:3e:fe:35:69:18:81:10:2a:dd:
6a:ed:a2:64:e7:4d:4b:58:ea:19:69:0d:03:54:6c:
0a:ee:aa:c1:2f:dd:16:e0:d0:65:db:32:b6:5d:cc:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:C1:CC:94:6F:3C:E6:59:42:9A:2D:5A:70:97:5C:53:C9:D4:3E
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:ff:c0:d6:60:61:21:44:ed:d1:d9:d8:c3:dd:5a:60:1a:
3d:fe:8a:1b:a8:b9:7b:8d:ff:f7:27:56:61:85:d4:54:3d:11:
88:c9:2f:fe:a5:fe:2e:e4:89:26:44:24:6d:e2:07:51:ed:71:
3a:77:e1:a3:df:70:f1:e6:b9:38:b4:2b:d0:d0:57:96:1c:4f:
67:0e:c8:26:11:1f:4b:30:39:1d:76:2d:45:02:33:90:65:f0:
b5:00:f6:f9:92:9e:3b:78:f5:58:2f:96:74:03:0c:fc:9f:88:
7b:9c:cb:f7:3f:6e:9f:17:b6:35:eb:29:8c:5d:a6:f8:29:54:
e4:72:7e:ef:c9:29:ff:ad:8b:bd:5f:8e:bb:02:51:c5:ef:84:
3c:27:ec:ff:59:90:97:4b:7e:54:26:22:6b:f9:d1:1a:62:af:
13:73:c6:67:dc:b3:1a:35:aa:6c:29:54:6c:91:d7:c0:5e:a5:
31:18:ac:56:b9:ba:60:ca:5b:b2:5f:0f:b2:71:98:9a:1c:08:
91:ad:e6:ae:37:44:cb:46:7a:84:57:a3:eb:95:d9:08:d2:3d:
d9:c5:51:53:fd:24:91:1f:8e:8b:76:60:25:d2:b1:e7:5c:50:
92:7b:24:3a:ab:0a:17:86:f9:4a:96:1e:8e:dd:54:24:0b:ee:
d9:9f:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:19 2026 by rpki-client