Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: 7fih+oc3ZT3OQmzcRlrJJcuVmJC20cXjbr68LowRYsY=
Subject key identifier: C3:95:05:8D:12:9B:0D:33:DC:24:BA:6F:CA:95:4E:87:FA:DD:63:E4
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019EBE481F2A67CBCDB0D30ADCA5FFB1CDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 091D
Signing time: Sat 13 Jun 2026 00:00:58 +0000
Manifest this update: Sat 13 Jun 2026 00:00:58 +0000
Manifest next update: Sun 14 Jun 2026 00:00:58 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: V+7Mn4IdmgzqvG4rdLUPsD4eHtja0aSQZmgfr1PD3XU=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:1f:2a:67:cb:cd:b0:d3:0a:dc:a5:ff:b1:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jun 13 00:00:58 2026 GMT
Not After : Jun 14 00:00:58 2026 GMT
Subject: CN=c395058d129b0d33dc24ba6fca954e87fadd63e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:d0:3b:70:4d:c8:fb:8b:44:83:1d:28:89:
6b:f8:79:73:04:c9:db:8e:26:60:2f:2c:94:1b:b1:
30:e2:48:92:43:de:19:d1:cf:aa:70:6c:5e:53:73:
04:7b:f1:dd:90:3b:94:25:69:50:9d:4a:4f:2b:69:
69:c5:80:d3:b1:ed:0b:da:7e:0c:f5:d5:f6:1d:66:
3f:ab:49:d1:59:e5:61:3b:ba:a5:88:b3:89:f7:1a:
ed:05:37:a9:8d:6c:9a:86:9e:01:a1:84:7f:84:44:
cc:a4:80:00:ff:b4:0a:25:5e:9c:60:e8:83:64:96:
0d:2c:d7:22:b2:58:32:b2:b2:8c:1b:8b:ee:1e:89:
fa:b5:b8:39:da:a4:6d:2f:00:db:f9:50:28:fe:43:
19:66:8c:f9:85:30:37:40:42:f2:ab:f1:d3:7c:4b:
75:18:0d:48:d4:9e:e7:27:a2:d2:c8:69:63:3a:a3:
f0:09:f8:a5:69:47:21:2a:ed:34:54:23:3f:76:d8:
35:4d:93:9e:42:23:71:69:40:6e:c9:8f:36:aa:e0:
da:74:4f:9e:3d:ea:01:45:4e:24:2c:1f:7a:c9:78:
4b:e7:ce:67:77:0c:5b:06:1d:9c:95:0e:c1:61:67:
fb:17:d7:b5:e4:89:11:54:65:a9:97:8e:24:96:2c:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:05:8D:12:9B:0D:33:DC:24:BA:6F:CA:95:4E:87:FA:DD:63:E4
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:e8:64:2b:2f:4f:28:6b:77:5c:d5:e3:19:f2:54:f2:8e:
f3:4a:80:d7:83:49:45:3f:25:e1:ea:be:65:46:66:0c:ac:52:
40:63:de:14:e2:55:15:32:3b:3f:b1:1b:86:b7:51:17:d5:42:
79:12:00:98:99:ff:d6:b0:dc:6e:76:e8:05:8e:59:be:eb:1a:
05:7e:53:5c:2a:e9:10:59:48:f9:71:6b:98:10:44:b9:19:b7:
bd:fc:08:f1:f1:96:3c:4c:d6:ce:9f:03:11:f4:51:8d:4d:0d:
93:7f:cd:9d:df:46:f3:40:cd:42:ef:e6:41:15:ae:91:0f:b2:
36:9b:6f:83:ca:5b:b6:19:63:3c:a6:cc:7e:6c:d7:6b:33:db:
98:4d:a1:60:64:08:2b:23:ac:39:71:76:13:08:89:cf:75:af:
af:7b:a6:c8:d5:e0:bc:f7:c0:0b:d2:da:c0:c4:8e:5c:c8:e1:
a9:92:1e:f0:1c:04:45:21:fe:95:f4:8f:8d:2c:ff:43:d4:58:
78:55:27:d7:d7:3d:40:5b:0c:62:6c:f6:cc:02:65:f2:d2:dc:
70:dc:b0:7b:96:da:15:f4:f6:53:02:4a:51:72:45:37:1b:f2:
b6:f2:23:39:7e:11:27:1e:04:2b:49:64:c2:d8:73:12:96:50:
d7:83:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:21 2026 by rpki-client