Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: MUndbaBHZGFJqOULu1dMG1mt/0D/pHgJmmQoz5fxhyc=
Subject key identifier: 1B:16:0E:0F:07:90:7C:1B:01:A9:B4:49:90:5C:5B:3F:7D:26:B1:7E
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019CAB6BAD298B4A99A11C246EC224ABD5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: AHEpegzCN7Q1IeGcy3XWoByPkitCkfSQr1muTbu59rg=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ad:29:8b:4a:99:a1:1c:24:6e:c2:24:ab:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=1b160e0f07907c1b01a9b449905c5b3f7d26b17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:48:5c:7e:42:7e:e2:27:db:c3:cd:84:b7:
90:cc:1e:56:d8:54:ea:e6:15:47:e0:f0:9b:ae:94:
17:e5:5c:11:48:66:f0:b7:8e:d2:8e:39:c3:2a:3d:
1d:ac:13:52:ac:b2:d9:09:9c:f4:11:a5:2d:c1:5d:
ff:95:74:ce:89:95:16:a7:03:83:9c:06:63:57:7f:
48:49:62:58:de:03:14:df:73:8e:1f:70:2f:85:e8:
28:f7:76:0b:9f:27:d7:c1:1d:c7:39:ca:26:14:03:
fe:33:3e:55:92:69:0f:c8:fe:24:c8:9d:4a:26:ba:
7a:f5:fe:0e:b2:4a:5c:c7:ab:c8:18:64:07:aa:07:
a4:b7:98:76:10:a8:be:de:43:fb:d7:77:ad:74:12:
35:d1:dd:ae:e7:dc:8d:d6:af:7d:dc:e6:e6:a5:16:
7f:9f:aa:19:aa:ab:bf:f3:c6:55:be:54:f3:ab:7e:
e2:3f:78:bb:d3:5d:58:be:5f:c0:d3:c8:fd:ba:24:
66:9a:f2:ba:ee:9f:82:76:3b:29:00:b1:c5:05:cd:
7e:4c:86:40:e8:26:0e:ad:e6:de:20:f9:67:7c:e4:
2a:90:21:23:7b:45:5f:95:6d:12:6a:d2:71:96:94:
06:fd:51:c5:03:47:cc:14:36:d0:aa:ca:78:4c:82:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:0E:0F:07:90:7C:1B:01:A9:B4:49:90:5C:5B:3F:7D:26:B1:7E
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:80:0a:7f:f0:b3:c2:a0:9e:8a:57:9b:6e:c4:2c:53:17:29:
73:29:42:5f:28:40:88:85:0c:7f:b7:be:0f:ce:f8:98:ea:af:
7a:0a:70:90:b7:a7:48:ea:26:78:df:c3:03:76:75:03:f3:60:
be:d6:4d:7d:80:b2:76:fa:c8:9a:a2:49:4a:43:c9:07:fb:6f:
1c:41:de:09:55:0d:7e:72:9a:41:20:13:64:0f:f7:b6:a5:2c:
8f:8d:85:f8:e2:a8:89:d9:54:85:ea:1e:f2:de:02:bf:36:19:
c8:59:09:7d:db:cd:29:59:2a:b5:70:45:eb:a9:2b:11:c6:04:
64:e0:ba:68:c7:fe:63:37:e2:32:c2:22:4f:ad:7b:46:c2:54:
c9:b8:17:23:66:78:c3:b0:fc:b2:7c:3e:30:32:39:ae:12:b9:
24:81:b4:52:30:85:39:db:48:06:52:f6:dd:36:80:63:2e:5b:
69:d1:7f:9e:d7:ca:b1:77:e5:b2:03:9c:f3:14:66:90:17:6f:
71:58:73:23:19:8f:6f:a3:3e:82:b6:5e:21:3f:81:a5:bf:0a:
f3:5f:fe:bf:2b:da:a2:5f:7c:df:a3:c4:85:1f:36:f5:b0:70:
9a:be:d1:86:f7:cb:63:2b:b6:13:e5:bb:f6:4c:7f:8e:9a:0f:
20:f9:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:27 2026 by rpki-client