Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: mSwX5EwIQkiGqb+S2lACrtrrGNNQj+OhX1b844X62Vg=
Subject key identifier: 09:9E:0C:EE:F9:6D:37:AA:3A:57:16:E9:6A:24:F6:13:24:F5:05:9A
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019D273AF65B856439387A4208F5C0E4B0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 084A
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: GNXCil3/zN/6vqBC50jZg58+t9BU60IP0t0ClEFymmo=)
2: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (hash: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f6:5b:85:64:39:38:7a:42:08:f5:c0:e4:b0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=099e0ceef96d37aa3a5716e96a24f61324f5059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:22:d6:a1:c1:da:06:07:dc:d9:3a:c4:ec:
17:33:70:b6:be:21:ff:f1:fd:96:c5:c6:62:41:d6:
55:80:e7:a6:1c:d0:d3:b5:88:a3:31:cc:ae:04:f9:
ce:13:2b:ed:4b:03:bf:6a:1c:81:5f:d0:fc:4e:45:
00:93:f6:19:ef:29:62:cc:fd:f1:9a:bf:f3:eb:17:
88:19:57:01:53:bc:2a:48:01:ff:03:9b:f6:38:ba:
74:b1:7f:58:18:7e:c3:96:c6:3b:93:c9:89:3d:15:
70:cb:c2:fc:e5:62:f6:61:dd:be:b7:a4:f0:3a:03:
ea:36:fc:e5:68:d7:24:15:60:f6:49:c6:61:72:69:
fe:97:89:5f:cc:42:90:2b:2d:ac:09:76:a2:b1:85:
26:0e:16:d4:3b:e3:46:13:50:72:f3:b7:cc:80:22:
96:9e:da:17:f9:73:c1:4b:bf:90:18:fb:a9:20:31:
44:a2:d4:33:5f:4c:da:81:0d:cc:06:3d:44:5a:2b:
22:60:ba:4e:39:51:ee:f5:7d:cc:1f:e6:e8:20:ed:
c2:4d:60:a1:14:42:b5:79:37:b9:e0:fa:bb:5f:9e:
25:3d:dd:c0:60:21:a7:15:de:8a:0f:43:62:85:00:
90:3c:4c:a4:e3:61:d4:6a:9d:fd:3b:9a:33:0a:60:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:0C:EE:F9:6D:37:AA:3A:57:16:E9:6A:24:F6:13:24:F5:05:9A
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:46:a5:77:7d:1f:db:66:18:d4:fd:15:b4:d5:c8:19:f4:
14:ac:2c:2e:9e:ca:69:5f:93:a8:1b:cc:bf:c6:a1:00:09:0c:
76:22:25:94:ca:b2:6c:20:c5:8f:db:ff:0d:81:d5:e4:a9:08:
5e:ba:30:93:a7:c8:34:ec:4b:6b:cb:b4:45:ba:39:9e:36:43:
42:84:fb:52:e1:18:f0:69:a8:49:b5:98:3e:40:58:43:4a:7b:
a0:4f:05:a7:63:cd:d4:30:0b:8b:17:6e:20:1a:34:31:3f:43:
41:2c:41:de:36:6b:5d:09:4a:59:3f:c1:ff:fa:dc:43:58:79:
3c:8e:88:e2:40:81:fb:92:08:84:43:72:3c:ae:04:96:cd:1f:
f9:b1:9d:33:ac:ae:03:e6:11:34:15:07:32:7d:4a:20:19:5b:
75:5b:15:1c:b3:57:5f:c4:4e:12:3f:04:41:14:20:f0:9a:22:
c9:c6:b8:e3:c9:f9:9d:b6:07:65:8d:0c:77:7d:a4:1f:1a:ec:
3a:13:88:ac:fe:37:f8:2d:7e:32:b8:7c:d3:f0:d4:2d:bb:6e:
e2:b8:a2:d8:1d:22:20:b2:9c:32:16:56:46:cb:d0:b9:83:e1:
dd:cf:a9:f6:70:fb:b3:97:11:6a:ab:3a:03:dd:39:52:a4:a5:
3e:d0:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:59 2026 by rpki-client