Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: UbTUoqekqjQQauyJc5v2kErkNTYK8gc5i7e8uJ6RN38=
Subject key identifier: B4:DF:47:87:13:A0:73:0C:8F:EB:C1:9B:0A:F0:3B:C6:35:51:18:D1
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01A0CFA40C98942F655DCCF46AD8C8FBAFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:00:29 +0000
Manifest this update: Wed 23 Sep 2026 19:00:29 +0000
Manifest next update: Thu 24 Sep 2026 19:00:29 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 93kyTE0OFDFsaHrHpqoV+XGUfcXhtrwTeSSkenaSIcQ=)
2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:0c:98:94:2f:65:5d:cc:f4:6a:d8:c8:fb:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Sep 23 19:00:29 2026 GMT
Not After : Sep 24 19:00:29 2026 GMT
Subject: CN=b4df478713a0730c8febc19b0af03bc6355118d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:7d:05:39:c9:2f:ee:1b:af:cf:6a:c0:ca:
5a:0b:ca:4c:16:3d:cd:3f:6a:39:17:1b:54:45:3b:
e4:56:94:35:a8:5a:e9:da:99:19:90:ba:da:fa:57:
8f:fd:1f:06:c5:43:9b:55:a5:73:38:5a:f7:5b:80:
64:8a:99:72:30:97:4c:5e:d6:08:74:0b:21:1c:6e:
80:8e:0e:67:05:34:92:33:ef:ff:e1:e0:49:50:98:
81:15:dc:4c:26:cc:63:b7:dd:fc:1c:53:e8:0f:2f:
73:cb:e7:dc:ef:7a:b2:8a:84:6a:c8:1a:57:ef:6f:
d6:ad:7b:21:64:e3:bf:0a:bd:07:58:cd:d3:7a:53:
9b:14:8f:91:55:a4:d0:0d:1d:06:55:07:a9:42:3a:
1f:83:17:a8:01:7c:ce:41:55:66:37:dd:4b:fc:37:
5c:d4:df:0d:fb:9f:bb:20:8c:bd:b0:eb:e4:5a:6c:
79:df:f7:8e:f5:12:30:8d:22:d1:0a:94:7d:67:b9:
ff:10:5c:25:98:45:f5:75:e2:9c:c3:a8:43:2c:07:
0c:88:aa:a4:a6:26:47:0d:e3:d3:b8:e6:9c:40:44:
98:ed:f5:a8:6e:b9:5d:ae:7a:cc:01:89:db:0d:fa:
d5:c0:f1:30:1a:85:f0:19:7e:88:45:19:6c:ae:14:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:47:87:13:A0:73:0C:8F:EB:C1:9B:0A:F0:3B:C6:35:51:18:D1
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d8:06:96:56:24:cf:9b:95:e8:05:52:34:a3:b6:32:1c:de:
29:81:98:b2:84:c1:6d:97:e8:12:b6:ec:ed:59:58:86:e8:b5:
af:8b:33:86:a7:67:ba:41:6f:bf:df:0e:7d:17:33:79:80:b7:
d7:48:bf:3c:a7:e1:a4:3a:c5:06:bd:fd:e5:91:df:54:d9:44:
1e:fd:92:02:0d:3d:36:ac:7f:0a:ed:4f:66:32:ed:31:cb:50:
92:e1:6a:f8:17:1d:0d:ba:cd:28:15:2f:94:72:00:a8:7f:3e:
49:02:ba:41:4b:7c:b0:80:5d:6f:06:e3:e3:24:94:d6:7e:1f:
44:ac:b7:20:03:ab:b6:3d:4f:7f:ec:c4:b1:66:ce:4b:b4:26:
26:93:25:96:4b:08:61:94:7a:2b:89:d7:4b:ea:cf:81:b6:7e:
3a:7f:f2:e5:78:d4:8c:f8:e8:55:fa:ea:ff:33:6d:a0:b1:7e:
d9:4c:6d:fb:13:03:2a:70:96:c4:61:7a:13:81:4d:7f:c1:53:
58:5c:4d:b1:d4:07:c9:66:6d:2d:43:98:40:f2:9d:c4:66:0a:
c1:51:a2:36:07:a7:94:71:7a:1d:5d:57:88:b8:7e:85:fe:6a:
7b:53:36:d2:cf:f2:63:a4:1a:29:98:cb:5a:64:ad:15:5a:d9:
08:c7:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:26:36 2026 by rpki-client