Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: N8YL9fQD1tTUd6k/dR2+jw6vttvyTr+0w50CNxGI+zA=
Subject key identifier: E7:AE:A0:1D:8F:9F:A7:6C:01:6C:9F:59:56:9C:C6:61:90:58:97:EB
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01A0CF6D5DB082BA66767C9CA2D663A385CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0A2F
Signing time: Wed 23 Sep 2026 18:00:46 +0000
Manifest this update: Wed 23 Sep 2026 18:00:46 +0000
Manifest next update: Thu 24 Sep 2026 18:00:46 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: ZLAUiElhhDlI65leA62mw//aZlCCaH0jG7Oa7w1QcHw=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:5d:b0:82:ba:66:76:7c:9c:a2:d6:63:a3:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Sep 23 18:00:46 2026 GMT
Not After : Sep 24 18:00:46 2026 GMT
Subject: CN=e7aea01d8f9fa76c016c9f59569cc661905897eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:b9:38:63:90:29:dd:7b:c3:ad:7f:f1:29:
dd:5e:2f:61:2d:cf:d8:a3:4d:c3:02:92:90:67:d0:
f0:8b:41:45:f3:38:f5:38:90:13:e5:61:30:02:8b:
47:e9:f2:a4:37:d9:23:8e:92:96:c5:c4:97:0d:52:
14:eb:ce:a7:c6:0e:db:56:b3:09:44:8d:65:f6:6a:
b9:2f:f9:2f:bc:74:d5:60:e0:fe:81:8f:06:06:61:
51:57:e4:c3:60:15:a5:62:0d:a1:05:c0:56:02:c7:
b3:d1:66:63:67:0a:4b:15:67:a8:58:b1:14:21:66:
ee:30:1e:67:c5:69:4b:52:81:e8:15:6a:69:d4:54:
92:0a:80:21:cd:3f:dc:68:ab:c2:49:97:96:6f:a4:
a9:a6:d5:da:fc:00:9c:56:43:18:2c:f0:4c:5b:6a:
dd:69:e8:02:b1:44:6d:2f:bf:f2:c4:48:5f:9c:90:
ec:5a:bf:fe:37:57:bd:31:2f:17:dc:c4:18:e3:da:
3d:4a:d7:a7:2a:4e:ca:40:e7:09:81:47:3d:ca:c8:
75:17:ff:bf:a7:bb:77:a3:7b:58:76:0f:35:e0:19:
c1:b0:61:a2:25:b5:de:cc:9a:17:47:45:b8:db:b4:
37:b1:1d:f1:e2:3e:51:c6:58:a1:ec:52:dc:5b:c2:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:A0:1D:8F:9F:A7:6C:01:6C:9F:59:56:9C:C6:61:90:58:97:EB
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:0e:77:c0:a9:ee:bc:0f:cc:6e:15:25:4f:a7:12:1c:54:
d4:4f:c5:cc:bc:8e:53:86:79:9b:52:93:7e:a6:58:cc:92:85:
9c:5e:cc:8b:c0:d4:6f:c4:48:f2:04:a1:bc:f8:82:36:b6:09:
af:91:89:b1:85:08:e1:b5:27:95:ae:7a:55:5a:0f:d5:d0:8d:
18:ef:5c:47:ab:f4:8b:b2:92:ac:33:a3:48:b6:a3:e5:ce:cb:
28:02:4f:3f:24:51:a3:87:2c:8d:8b:af:e1:b1:10:90:98:2d:
a5:79:d9:1e:90:9d:5e:17:ac:d3:46:18:6d:e3:f0:69:aa:74:
0a:ed:6c:df:f6:14:fb:d2:3c:c6:2f:40:0d:18:3e:54:9c:1f:
5c:df:9f:52:e2:d0:d9:f4:eb:ef:41:d3:86:0e:db:32:c8:2d:
0f:df:0a:b3:d3:85:8f:12:02:91:bd:c8:f9:9b:76:4b:ab:3a:
10:5e:53:04:16:18:6a:d2:8c:83:e7:a8:87:3e:06:7d:f8:97:
23:8d:ac:7f:e6:f4:60:c1:f1:09:07:e1:56:d8:b5:f3:0f:03:
cc:c1:86:6a:8b:6c:df:8a:e3:b7:86:0f:2a:e4:d8:8a:fa:5a:
bc:38:8b:4f:76:25:f4:c4:ce:d7:01:1f:07:ad:f9:3d:dc:1f:
be:80:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:49:20 2026 by rpki-client