Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: dwVhBRssGv4WjtQbxNfimb58Y6tj+2JuAbskLN7Z6vc=
Subject key identifier: 87:8F:7B:B8:A3:46:9E:AE:01:2C:3A:CD:79:36:43:C9:F9:C3:AD:17
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019FAA1A40454F983A829600A7BC52360768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:01:14 +0000
Manifest this update: Tue 28 Jul 2026 19:01:14 +0000
Manifest next update: Wed 29 Jul 2026 19:01:14 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: DuU0TjFoCe4cTSW8PMpRdxtpDjWmvgfk8Kl/WCYVg10=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:40:45:4f:98:3a:82:96:00:a7:bc:52:36:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jul 28 19:01:14 2026 GMT
Not After : Jul 29 19:01:14 2026 GMT
Subject: CN=878f7bb8a3469eae012c3acd793643c9f9c3ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:7c:73:df:c2:f2:fa:5d:45:5e:71:4b:d8:
22:83:de:48:19:2f:93:64:f6:de:6d:22:88:9b:10:
c9:e4:fd:a1:e0:93:29:42:b4:eb:42:fd:20:e9:d6:
10:1d:bb:53:56:a5:5b:40:66:4e:c1:80:12:24:25:
a7:41:e4:54:89:87:88:af:46:52:e5:c2:ac:a8:9f:
59:89:b4:97:3e:c0:d1:70:fc:14:e5:67:1f:7d:13:
0f:f8:48:72:ce:88:c6:ba:83:1e:62:4f:86:9c:75:
37:17:01:80:f0:20:b7:d2:5f:97:9a:8a:5c:28:91:
ec:69:b2:ef:90:11:09:40:e3:a0:a4:4e:33:85:50:
83:7d:93:cc:89:c6:09:8b:3e:b3:d2:40:e3:48:4e:
41:56:d5:74:4b:8c:30:93:a8:11:ae:c0:3a:1c:b7:
83:1e:f9:63:3d:09:6b:f4:8b:14:a5:9e:92:e5:73:
77:75:73:46:e6:95:2b:29:48:39:65:92:28:eb:5a:
b1:62:0b:7f:0c:f4:dc:fe:ff:bf:d4:29:83:a9:fe:
69:17:4a:2f:9c:b3:74:52:97:4c:a5:e9:83:02:f6:
22:1a:bf:54:b2:9d:f2:cb:cb:18:29:e2:e0:ed:2b:
af:8d:0c:50:b2:50:f7:85:28:d9:9f:c8:54:07:46:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:7B:B8:A3:46:9E:AE:01:2C:3A:CD:79:36:43:C9:F9:C3:AD:17
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:b2:34:5a:b0:b4:df:36:00:e9:b0:ae:c6:72:03:8b:4c:
ea:57:03:db:be:6b:4c:91:d5:41:41:6d:01:9a:09:b3:1d:3a:
49:45:d3:18:af:3b:ae:58:16:9c:17:23:fb:28:b7:c3:f3:80:
cf:7e:37:41:93:8f:9a:8d:a1:d2:9d:da:c6:b4:46:48:06:ed:
e3:41:fb:fa:07:fa:72:df:aa:3d:5a:25:6d:ce:8d:c7:f4:24:
14:e6:39:9f:cc:29:c2:ad:f8:ac:c4:11:43:ff:9a:86:39:d9:
ed:2e:80:fd:e7:8d:80:d3:1d:59:71:56:1c:8a:2a:06:dd:e9:
62:93:0b:5e:e2:33:33:ea:6b:d1:25:61:b0:66:c9:8a:02:14:
c6:ec:52:1d:ff:af:1d:27:16:02:35:1a:87:33:18:13:71:bf:
34:6a:55:8b:55:ba:8f:07:ea:3e:d4:2e:ac:ff:97:fd:e9:14:
e0:98:af:7f:0b:33:45:8c:de:ac:0f:13:11:5c:fc:b9:94:08:
52:4b:7c:4b:83:10:df:60:1d:a3:fa:1f:ce:c6:ff:96:a3:3c:
26:f0:f3:22:41:ed:dc:8f:e1:db:92:15:8a:b1:e0:92:76:ce:
68:96:a3:5b:9e:7b:79:4a:70:3d:bb:de:5b:aa:1f:d6:d2:cc:
3a:cc:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:42 2026 by rpki-client