Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: dH/MoHgvaHR8y47KAG/M9+PtAEEqGpscL6BpLOuUW38=
Subject key identifier: 9F:DE:AD:13:76:9F:DF:11:83:15:79:AA:00:22:D7:D4:A4:CD:60:96
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019FA0724F136AADF1431891D455AB73E806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 22:01:13 +0000
Manifest this update: Sun 26 Jul 2026 22:01:13 +0000
Manifest next update: Mon 27 Jul 2026 22:01:13 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 2m5KU3CvrVmu4K1/juDj0urcuHRUMWjy9jm/L3cyp3Y=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:4f:13:6a:ad:f1:43:18:91:d4:55:ab:73:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jul 26 22:01:13 2026 GMT
Not After : Jul 27 22:01:13 2026 GMT
Subject: CN=9fdead13769fdf11831579aa0022d7d4a4cd6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:1d:51:ab:b9:d1:c9:49:a0:aa:6e:83:d6:
ec:b1:89:34:95:ea:77:cd:28:69:06:d9:bf:13:11:
3c:9d:b8:6e:9a:56:a5:a6:3f:94:3c:99:8f:a4:9f:
5d:78:88:07:89:bb:5a:76:8f:99:65:ca:48:10:3f:
60:36:f1:a3:df:2a:7f:de:cf:bd:52:88:18:a9:94:
52:3b:a9:a7:98:d0:14:5a:ca:77:f2:f8:b5:ac:11:
70:c2:4b:c6:67:ef:42:88:39:e7:ba:d7:7b:c4:06:
85:6a:8e:e8:2d:5c:ea:37:a4:83:c4:80:d3:1f:84:
27:9d:4d:3c:0f:c8:6d:2c:97:f9:9b:ad:26:72:2c:
f1:be:8f:eb:d5:28:74:dd:22:e7:1b:56:fd:cf:15:
eb:64:1e:c4:a4:da:92:72:c5:a2:fe:c2:56:f1:13:
32:5c:04:eb:a4:31:46:34:88:8d:70:d1:3c:41:9c:
33:18:77:e3:70:d3:be:7a:fa:04:48:98:9a:27:80:
f7:78:f7:85:2c:5d:1a:89:45:e0:79:87:43:c0:00:
48:21:e3:e5:27:74:e7:af:d3:c3:33:17:b8:9c:2b:
86:f6:4e:55:98:0c:29:0b:52:2c:03:2a:05:2e:06:
1f:be:2a:04:c6:38:32:20:a9:dc:67:95:14:6b:1b:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:AD:13:76:9F:DF:11:83:15:79:AA:00:22:D7:D4:A4:CD:60:96
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:65:70:91:14:68:52:dd:da:77:19:e0:12:d8:aa:97:a8:62:
52:50:67:d1:97:38:f9:d2:89:ec:2f:2c:43:af:ef:53:8b:4a:
b2:13:41:7b:a1:47:06:35:d8:2a:3b:e4:30:0f:fd:da:02:42:
58:42:74:8c:8a:86:de:2f:3f:63:fb:19:5d:73:a4:d2:47:6c:
23:ee:df:94:4a:8b:6e:2d:45:60:b7:6f:cd:8b:e5:01:61:6f:
25:c3:19:fd:bd:da:21:52:3b:e0:94:14:b9:04:d1:80:b1:50:
95:1a:01:77:27:21:39:4d:49:8c:86:83:f4:5b:35:e5:33:66:
76:54:9b:2b:50:19:2b:34:03:f5:99:5a:1c:e2:7f:46:48:cf:
66:ae:7d:a8:3b:b5:b4:62:a2:8f:a1:bb:d4:bd:12:45:d8:9a:
2d:2a:b6:c4:9b:ad:1d:75:95:2a:0b:59:fc:ec:59:af:2e:bc:
6a:b2:d3:63:71:ee:46:53:9b:3f:e6:77:0c:6a:30:fa:97:88:
28:ba:69:51:3a:32:e6:a6:4b:88:af:9f:5d:2a:73:9d:3d:65:
3e:d6:9b:0f:0f:d7:8a:81:56:df:b9:12:19:3f:42:20:85:c2:
f4:77:04:3a:fe:9e:da:57:08:b2:9b:d4:55:30:3e:26:6f:8c:
af:95:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:04 2026 by rpki-client