Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: CmOHgn8QN67XS6+Bp+MGU7f+L37jXhfdfWwNjtETZe0=
Subject key identifier: 55:53:B0:FA:2F:7C:94:49:64:4D:67:85:97:90:DA:B5:7E:4A:DD:A9
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019E1C46F1EB0F43EE4DBEC42A80E212B90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 13:01:11 +0000
Manifest this update: Tue 12 May 2026 13:01:11 +0000
Manifest next update: Wed 13 May 2026 13:01:11 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: xpDdy2jUwxqsXb4uMq/Cm5BQMX21X+y2/rVlikzhzd8=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:f1:eb:0f:43:ee:4d:be:c4:2a:80:e2:12:b9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: May 12 13:01:11 2026 GMT
Not After : May 13 13:01:11 2026 GMT
Subject: CN=5553b0fa2f7c9449644d67859790dab57e4adda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:5d:9e:09:7c:4c:9a:68:b3:8d:09:0b:75:
ff:50:a6:64:c2:47:0b:19:af:12:65:bd:a8:83:70:
1e:10:b5:d5:06:41:48:d0:a8:96:05:1f:de:ea:03:
6a:17:60:4c:d2:f8:15:1b:ee:2b:fe:2d:6d:2d:c3:
a6:bd:ad:7a:ee:da:db:d6:88:de:01:84:7d:8a:61:
aa:1b:3f:b7:65:00:be:a6:8c:f6:fc:60:15:e7:e9:
08:2f:f9:aa:ed:d7:df:4f:6f:d3:37:da:24:d1:2c:
48:be:e7:d1:cb:86:ea:67:b3:af:60:b8:bc:12:e1:
b0:58:ff:61:ef:91:56:a9:89:f0:1e:f0:8b:4f:d1:
39:8c:d7:c9:5e:60:7c:a9:fa:d1:44:82:be:36:9c:
03:4b:e4:50:22:2d:f8:2e:9e:96:a3:f3:0f:f1:e0:
a7:03:95:97:92:c3:2d:40:2a:9f:2f:c1:5e:48:25:
9f:a4:48:41:8f:d5:28:08:00:b4:e1:b9:24:b3:0a:
3c:bf:f7:e9:55:fc:c1:80:cb:51:94:d9:df:cb:7f:
01:56:33:e8:5f:77:30:ed:31:6e:73:21:4b:0a:cf:
1a:80:f0:bb:10:85:67:24:dd:83:e4:ef:43:99:79:
d8:33:5e:18:e3:88:47:1e:71:88:39:ea:bf:ea:fa:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:B0:FA:2F:7C:94:49:64:4D:67:85:97:90:DA:B5:7E:4A:DD:A9
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:11:6d:82:d7:56:3a:45:1a:62:d0:26:5f:32:30:fd:71:
8d:29:d3:62:19:94:04:0c:16:a1:5c:57:ba:bb:f4:77:99:15:
4c:0b:27:16:3a:d0:61:2b:b9:a5:b5:2b:ad:5f:af:0b:37:33:
a9:58:3e:69:e9:2d:3a:29:52:7c:9a:7f:35:ea:5b:16:8d:12:
cd:48:65:fe:36:68:df:37:89:e3:ec:85:47:5b:a5:4a:ec:6d:
74:8d:15:78:5a:01:9e:2c:7e:ea:9c:ab:de:29:d2:d2:61:40:
79:d8:a3:77:fc:2e:94:a1:37:7e:34:7f:bc:c0:af:0e:ab:2f:
26:d7:60:a2:70:c9:e5:99:92:d5:2f:9d:9d:02:f8:27:d9:08:
c1:97:92:46:db:05:6d:8c:19:af:e6:b4:95:70:b9:7e:c9:59:
ad:f7:f3:0d:f8:85:26:c1:8c:b2:a9:c2:3e:a4:f3:46:0d:86:
60:50:b2:2e:d0:84:b0:8f:f5:7f:db:20:ce:47:03:37:81:3b:
49:62:a5:e2:80:c6:b4:e0:f0:e9:0c:f3:93:e1:6b:79:48:8e:
5b:4f:66:bb:81:c7:bd:fa:19:31:5b:9c:09:dc:83:47:c1:5b:
93:63:93:15:14:4b:82:e9:5f:f5:6e:9a:d9:81:c0:cd:c5:94:
87:a8:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:59 2026 by rpki-client