Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: 6xNJNHBJwqv0VyHfdCZ0U8ZYzbHS66LmmmGNeuegAdo=
Subject key identifier: EE:2D:A8:36:7B:E6:85:36:56:6F:55:EE:D9:A5:B2:D0:97:A9:75:F1
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019CABA223ED2E7D4BFCDFA173066C7F80D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 080A
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: HzJQTS+HiGEr0qBJWWf0hCYdg/XBLAKBjAzimoWDzTw=)
2: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (hash: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:23:ed:2e:7d:4b:fc:df:a1:73:06:6c:7f:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=ee2da8367be68536566f55eed9a5b2d097a975f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:d3:c0:30:38:d5:45:01:6c:5f:93:45:3a:
90:d4:08:82:1a:18:92:30:f5:f1:34:62:7a:d8:49:
92:a9:5b:ad:74:24:7a:b8:ac:c8:b4:08:ea:62:5f:
85:92:99:3d:34:dc:00:fa:4f:79:eb:7f:e0:f8:8c:
ed:94:af:fe:6a:d1:3e:f3:a7:01:ec:8a:61:df:48:
2c:fa:57:aa:0a:4a:2c:03:91:31:b8:6e:cf:4f:fa:
e8:d2:5f:33:09:b6:f4:05:70:dc:9a:b7:41:13:b1:
e0:1e:3e:01:49:38:f6:89:0f:9c:27:78:9b:57:f5:
cf:de:9e:9a:b3:0a:f0:3a:06:03:9a:5c:02:e0:78:
c2:21:63:d5:f0:76:94:54:5f:c0:e4:48:2f:82:32:
2f:3e:94:f3:8e:04:ca:fe:ed:0b:22:06:c0:cd:e2:
0b:b4:5b:3e:70:3a:b1:6e:53:7a:82:60:3a:b5:ff:
ad:a8:cc:a8:41:b7:cc:84:f0:41:c0:41:19:51:0d:
3a:21:73:5c:fe:1d:f8:31:b4:e7:f1:41:b2:71:23:
e8:77:56:11:26:77:fb:48:bb:a7:fa:e2:5a:fb:d1:
9b:09:34:7f:c5:cb:cb:59:e3:eb:46:37:dd:4f:49:
78:2a:a8:00:40:4e:f7:84:3d:aa:50:6d:74:72:f0:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:A8:36:7B:E6:85:36:56:6F:55:EE:D9:A5:B2:D0:97:A9:75:F1
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a4:10:43:a4:85:a1:42:db:2e:ee:07:c0:0e:47:9e:a9:6c:
05:56:41:ad:c5:a6:ee:e6:74:75:cf:11:6f:86:f2:0e:dd:37:
63:ef:0a:f3:5e:39:93:17:66:68:95:37:4e:a0:ca:fe:4c:53:
df:69:fb:1e:af:f7:d6:44:bd:d9:1e:a6:5b:88:20:54:1c:3c:
d0:f1:f8:db:cf:19:3d:78:cc:18:e1:90:5a:af:08:9a:a7:e9:
9c:b4:23:5a:5c:5a:dc:c7:35:13:c2:ce:b5:53:93:75:02:49:
13:f9:be:14:4c:e2:19:33:01:c5:cf:f2:9d:d6:bb:c0:1f:5f:
3a:9f:c2:73:58:56:58:9d:bc:1f:41:9f:e3:a7:51:90:ad:f7:
9b:d2:e7:d5:70:7b:e2:a8:ea:d1:6d:13:3a:4d:28:f6:f4:fd:
ab:05:04:31:8a:1e:a9:0b:48:60:19:ef:29:8a:9b:ed:89:06:
3e:f6:19:a4:32:8a:e6:b8:59:62:1c:bd:98:d0:b0:a8:13:75:
96:43:cb:3d:cd:49:55:be:55:8c:30:4b:d4:e7:a9:65:6e:b2:
42:52:cc:b8:11:d4:47:73:06:ca:4d:cc:ea:73:60:20:67:6a:
5c:3d:6c:75:85:6d:73:cd:a5:eb:12:9e:77:40:05:6b:74:6a:
dd:5d:9e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroiPtLn1L/N+hcwZsf4DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj
ZjJlODEwHhcNMjYwMzAxMjMwMDU1WhcNMjYwMzAyMjMwMDU1WjAzMTEwLwYDVQQD
EyhlZTJkYTgzNjdiZTY4NTM2NTY2ZjU1ZWVkOWE1YjJkMDk3YTk3NWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoynTwDA41UUBbF+TRTqQ1AiCGhiS
MPXxNGJ62EmSqVutdCR6uKzItAjqYl+Fkpk9NNwA+k9563/g+IztlK/+atE+86cB
7Iph30gs+leqCkosA5ExuG7PT/ro0l8zCbb0BXDcmrdBE7HgHj4BSTj2iQ+cJ3ib
V/XP3p6aswrwOgYDmlwC4HjCIWPV8HaUVF/A5EgvgjIvPpTzjgTK/u0LIgbAzeIL
tFs+cDqxblN6gmA6tf+tqMyoQbfMhPBBwEEZUQ06IXNc/h34MbTn8UGycSPod1YR
Jnf7SLun+uJa+9GbCTR/xcvLWePrRjfdT0l4KqgAQE73hD2qUG10cvDA3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4tqDZ75oU2Vm9V7tmlstCXqXXxMB8GA1UdIwQY
MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt
M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw
LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKQQQ6SF
oULbLu4HwA5HnqlsBVZBrcWm7uZ0dc8Rb4byDt03Y+8K8145kxdmaJU3TqDK/kxT
32n7Hq/31kS92R6mW4ggVBw80PH4288ZPXjMGOGQWq8ImqfpnLQjWlxa3Mc1E8LO
tVOTdQJJE/m+FEziGTMBxc/ynda7wB9fOp/Cc1hWWJ28H0Gf46dRkK33m9Ln1XB7
4qjq0W0TOk0o9vT9qwUEMYoeqQtIYBnvKYqb7YkGPvYZpDKK5rhZYhy9mNCwqBN1
lkPLPc1JVb5VjDBL1OepZW6yQlLMuBHUR3MGyk3M6nNgIGdqXD1sdYVtc82l6xKe
d0AFa3Rq3V2e1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:08 2026 by rpki-client