Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: k85VPcIhMPfneKJ0ZWbzz2VOUgjtXkJA0yUc+6BYN4M=
Subject key identifier: 57:03:C5:6F:74:7A:08:5B:A9:C1:A0:DB:C6:61:3A:F3:73:A3:70:D5
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019F8F108BD76634B7E227DBB8B403DA0E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 13:00:53 +0000
Manifest this update: Thu 23 Jul 2026 13:00:53 +0000
Manifest next update: Fri 24 Jul 2026 13:00:53 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: YjuVAPjYfj/Xt+is8ZR9zUEjDbCpF+KXtPcnxZnKYpI=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:8b:d7:66:34:b7:e2:27:db:b8:b4:03:da:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jul 23 13:00:53 2026 GMT
Not After : Jul 24 13:00:53 2026 GMT
Subject: CN=5703c56f747a085ba9c1a0dbc6613af373a370d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:1b:7f:b2:f8:46:f0:87:50:1b:83:9c:18:
b7:2e:b5:cf:23:cb:8d:6c:1d:2d:c3:bc:e8:37:18:
2f:8a:79:ae:9d:8f:39:30:fb:f9:cc:59:38:6f:1a:
45:9d:0c:65:4d:fc:04:5b:e8:da:4d:ab:ea:07:6e:
de:fe:37:fb:fb:94:6a:7c:8d:35:a1:61:72:b5:ba:
82:ee:4a:b0:bb:9f:1c:d2:16:d2:5f:f1:73:78:0e:
29:56:3d:89:5b:28:87:d0:1e:67:39:e5:cb:bd:ed:
79:bb:4d:c0:b1:78:3e:4a:91:c4:d9:37:bc:3f:65:
30:0e:c1:53:31:3e:23:5c:e3:75:6f:4c:4a:5a:5c:
fd:8a:4d:df:d6:63:37:14:b1:36:5f:92:c3:fd:6e:
fc:26:be:16:de:54:93:d8:65:98:44:10:39:ac:9c:
3c:25:c5:55:97:a0:0c:e0:cb:95:42:1e:b5:5e:ce:
ce:ff:ed:58:07:bc:b4:b5:ac:f5:fd:9e:24:4a:1e:
5b:1a:da:91:2f:bd:15:d3:4d:24:ed:db:c7:8e:a8:
34:44:69:4b:1e:89:ae:e5:79:06:7e:4a:e6:e2:9b:
22:34:62:84:27:13:b8:78:9c:a7:87:13:61:c8:3d:
03:13:8e:99:3b:2a:8a:41:7f:51:68:cf:1e:e7:d7:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:C5:6F:74:7A:08:5B:A9:C1:A0:DB:C6:61:3A:F3:73:A3:70:D5
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:ad:a8:43:f7:9f:d8:cf:cb:9b:ec:b9:2e:4e:ba:fc:5d:
bf:c6:9c:ee:6f:a2:d1:0a:f4:2e:f3:92:93:1d:00:19:43:74:
a6:14:67:6b:73:39:bc:7e:a6:2c:d7:52:f1:78:5a:11:06:f4:
f0:df:ba:a7:54:42:5a:ce:0c:b7:f1:b9:44:af:26:12:07:97:
a2:8e:63:f1:a3:a4:0a:ab:a7:36:0b:3e:db:eb:6f:b5:cc:01:
51:05:48:67:c1:3d:6f:65:ac:17:5b:e6:06:dc:3b:94:1e:55:
4d:7f:c2:b0:bf:f5:e2:38:1c:b8:af:4f:c1:ba:de:5c:02:ca:
0d:d0:92:d5:f2:ab:35:92:bc:91:b0:26:be:64:0a:de:87:7b:
35:83:ff:2a:e2:d9:47:d7:ff:4f:7d:ca:2c:ed:34:0e:b2:f4:
df:f6:6e:d5:7d:3f:a1:4a:6a:c0:d6:02:2e:69:74:20:b1:53:
43:00:5b:48:53:75:86:0b:f4:5f:9c:5a:24:20:41:a5:1f:19:
f6:96:8e:94:3f:a2:55:37:37:52:48:7a:4e:80:da:7e:ab:51:
91:eb:02:40:92:82:8a:70:d4:13:c4:a2:cc:f8:eb:6b:e3:cb:
0a:91:3b:4c:f0:7a:d3:99:59:a3:b1:e9:32:9d:3e:23:d8:33:
a2:8d:8f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEIvXZjS34ifbuLQD2g4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjYwNzIzMTMwMDUzWhcNMjYwNzI0MTMwMDUzWjAzMTEwLwYDVQQD
Eyg1NzAzYzU2Zjc0N2EwODViYTljMWEwZGJjNjYxM2FmMzczYTM3MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHQbf7L4RvCHUBuDnBi3LrXPI8uN
bB0tw7zoNxgvinmunY85MPv5zFk4bxpFnQxlTfwEW+jaTavqB27e/jf7+5RqfI01
oWFytbqC7kqwu58c0hbSX/FzeA4pVj2JWyiH0B5nOeXLve15u03AsXg+SpHE2Te8
P2UwDsFTMT4jXON1b0xKWlz9ik3f1mM3FLE2X5LD/W78Jr4W3lST2GWYRBA5rJw8
JcVVl6AM4MuVQh61Xs7O/+1YB7y0taz1/Z4kSh5bGtqRL70V000k7dvHjqg0RGlL
Homu5XkGfkrm4psiNGKEJxO4eJynhxNhyD0DE46ZOyqKQX9RaM8e59dCOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcDxW90eghbqcGg28ZhOvNzo3DVMB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2atqEP3
n9jPy5vsuS5Ouvxdv8ac7m+i0Qr0LvOSkx0AGUN0phRna3M5vH6mLNdS8XhaEQb0
8N+6p1RCWs4Mt/G5RK8mEgeXoo5j8aOkCqunNgs+2+tvtcwBUQVIZ8E9b2WsF1vm
Btw7lB5VTX/CsL/14jgcuK9PwbreXALKDdCS1fKrNZK8kbAmvmQK3od7NYP/KuLZ
R9f/T33KLO00DrL03/Zu1X0/oUpqwNYCLml0ILFTQwBbSFN1hgv0X5xaJCBBpR8Z
9paOlD+iVTc3Ukh6ToDafqtRkesCQJKCinDUE8SizPjra+PLCpE7TPB605lZo7Hp
Mp0+I9gzoo2Pdg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:36 2026 by rpki-client