Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: MJJOp6KnstbToEkcIIowpf9KZrV/9HiJY8+JGy+FlVo=
Subject key identifier: 5B:DC:7D:38:0A:0B:CF:23:82:F1:77:84:7C:A4:49:F8:CE:CC:FF:3F
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01A08C0DA16D9B554C0A861A75F5FCD3D47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 16:01:38 +0000
Manifest this update: Thu 10 Sep 2026 16:01:38 +0000
Manifest next update: Fri 11 Sep 2026 16:01:38 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: mdbUb92UnD0gTkmYIDv7PejrtEHIf9QglgUHHmtSE7M=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:a1:6d:9b:55:4c:0a:86:1a:75:f5:fc:d3:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Sep 10 16:01:38 2026 GMT
Not After : Sep 11 16:01:38 2026 GMT
Subject: CN=5bdc7d380a0bcf2382f177847ca449f8ceccff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:a6:e8:17:cf:56:5a:5d:1b:87:2d:8a:07:
22:c5:da:23:70:b6:e4:9d:c6:b9:66:fe:8b:c6:f8:
e1:80:3f:a6:50:ff:2e:71:d4:d8:ce:04:96:82:2b:
4b:b6:9b:62:d8:d5:33:cc:24:85:b2:24:e8:db:eb:
45:ef:57:c6:1f:10:60:38:7b:e7:1f:c4:48:2f:d8:
e4:75:79:cc:08:d9:c1:85:6d:0c:37:de:51:92:4d:
8d:6f:1d:5a:3a:7f:ec:85:af:47:e2:58:f2:4a:17:
b5:93:ef:91:e0:14:34:f6:b2:8b:3d:24:da:10:3f:
60:27:65:2b:53:33:61:04:ea:bd:32:6d:80:72:eb:
44:54:d8:28:3d:50:fc:d0:a3:a4:9a:60:7c:ef:62:
6d:ca:8e:bc:43:12:1a:ce:d5:0c:fd:76:a3:e2:b7:
75:7d:c7:d6:1f:3b:3a:a4:2d:4f:fa:4d:fc:06:7b:
02:2b:38:7d:2a:4b:07:e4:1d:54:9e:01:7f:dd:e2:
5a:fa:8b:4d:02:a7:85:0d:92:7b:85:0c:e9:e5:b6:
53:14:ab:ec:93:9a:27:53:7b:52:da:af:26:30:a4:
32:f8:65:cf:56:23:8a:84:6b:c7:e2:d7:07:8f:80:
10:1e:1c:0b:8b:ad:33:33:04:a5:53:7b:1d:da:18:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:7D:38:0A:0B:CF:23:82:F1:77:84:7C:A4:49:F8:CE:CC:FF:3F
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:f9:3f:e0:cc:33:f9:9c:a6:1d:d0:5b:7e:d8:73:5a:d4:
d1:76:e1:ca:88:77:8c:b5:d8:7e:b0:9d:45:6c:09:0d:53:51:
07:d6:ce:60:45:af:70:12:c8:f8:aa:5b:c0:5a:1c:2d:eb:4c:
a0:02:e9:38:71:06:0c:0b:2d:21:8c:4b:7b:06:39:ad:06:eb:
a8:26:39:e9:a1:24:e2:1e:c4:f6:9d:ee:d1:47:66:ea:3f:1a:
f1:42:20:5e:1e:fc:22:58:6a:41:0f:80:a7:5e:56:3d:c8:6a:
04:9f:0e:e7:3a:d6:9c:6e:20:86:a8:39:ca:90:41:97:8f:a5:
2e:a6:4c:bf:b2:a0:db:5d:fb:c9:a8:2b:be:09:2b:d2:05:95:
82:aa:0b:2b:9c:ef:83:aa:e1:38:d3:53:08:30:c0:bf:0d:c2:
03:46:46:f2:71:15:ff:ed:1c:b4:88:aa:89:c6:8e:54:a3:f5:
b8:9d:4e:59:83:82:80:fe:76:a0:a6:98:4c:3b:bb:90:0d:2e:
6b:e8:97:1a:1b:1b:c6:58:c1:c6:6e:d8:31:68:55:89:b5:9f:
b0:96:65:93:d0:16:74:be:09:df:3c:e1:19:e6:b2:29:5a:53:
84:2b:e6:0d:a5:a7:7b:f1:a5:68:c5:1b:fd:a4:21:cc:20:30:
b0:dc:82:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDaFtm1VMCoYadfX809R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjYwOTEwMTYwMTM4WhcNMjYwOTExMTYwMTM4WjAzMTEwLwYDVQQD
Eyg1YmRjN2QzODBhMGJjZjIzODJmMTc3ODQ3Y2E0NDlmOGNlY2NmZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYqm6BfPVlpdG4ctigcixdojcLbk
nca5Zv6LxvjhgD+mUP8ucdTYzgSWgitLtpti2NUzzCSFsiTo2+tF71fGHxBgOHvn
H8RIL9jkdXnMCNnBhW0MN95Rkk2Nbx1aOn/sha9H4ljyShe1k++R4BQ09rKLPSTa
ED9gJ2UrUzNhBOq9Mm2AcutEVNgoPVD80KOkmmB872Jtyo68QxIaztUM/Xaj4rd1
fcfWHzs6pC1P+k38BnsCKzh9KksH5B1UngF/3eJa+otNAqeFDZJ7hQzp5bZTFKvs
k5onU3tS2q8mMKQy+GXPViOKhGvH4tcHj4AQHhwLi60zMwSlU3sd2hjgqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvcfTgKC88jgvF3hHykSfjOzP8/MB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUj5P+DM
M/mcph3QW37Yc1rU0Xbhyoh3jLXYfrCdRWwJDVNRB9bOYEWvcBLI+KpbwFocLetM
oALpOHEGDAstIYxLewY5rQbrqCY56aEk4h7E9p3u0Udm6j8a8UIgXh78IlhqQQ+A
p15WPchqBJ8O5zrWnG4ghqg5ypBBl4+lLqZMv7Kg2137yagrvgkr0gWVgqoLK5zv
g6rhONNTCDDAvw3CA0ZG8nEV/+0ctIiqicaOVKP1uJ1OWYOCgP52oKaYTDu7kA0u
a+iXGhsbxljBxm7YMWhVibWfsJZlk9AWdL4J3zzhGeayKVpThCvmDaWne/GlaMUb
/aQhzCAwsNyCbQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:23 2026 by rpki-client