Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: 5DaibvmryN/221R485UpHjjvScBSjPivh4hAk3EBjBw=
Subject key identifier: FE:12:D5:85:5A:6A:6A:42:00:34:81:F8:D3:08:B8:92:9B:D4:ED:2A
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01A1C4B06602D7EE1A7C1803B11D7D576C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0AAE
Signing time: Tue 10 Nov 2026 09:00:57 +0000
Manifest this update: Tue 10 Nov 2026 09:00:57 +0000
Manifest next update: Wed 11 Nov 2026 09:00:57 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: +khcRvc9xAewp6B1ujfXP7BKe+vrTHPdNZ2GzujWtj0=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b0:66:02:d7:ee:1a:7c:18:03:b1:1d:7d:57:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Nov 10 09:00:57 2026 GMT
Not After : Nov 11 09:00:57 2026 GMT
Subject: CN=fe12d5855a6a6a42003481f8d308b8929bd4ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:b3:4d:cd:ea:85:0c:0a:d3:48:8f:04:e6:
01:df:7f:5b:5b:1a:38:ab:bf:3f:1f:6e:c5:ae:78:
ec:ff:4c:43:62:23:0a:ad:a3:98:4a:fc:a6:0c:e0:
ff:5e:4d:0c:0a:c3:8c:b4:79:76:57:90:69:cf:ec:
62:de:2f:cf:9c:83:1e:52:1d:9f:55:9c:fd:ea:0a:
41:19:c0:71:0f:83:59:8d:0f:cd:cf:ad:30:7b:6b:
f8:a7:30:e1:93:99:8b:3f:8f:b9:c0:a8:87:4c:e5:
e7:36:37:17:22:00:70:16:46:fc:ce:db:08:a1:e6:
67:32:cc:97:3a:4a:ba:0c:02:c2:3b:08:2f:8d:2d:
3e:2a:2c:71:8d:c1:0d:7d:2e:83:0f:f5:d8:17:c6:
1c:49:3e:50:a0:2b:ec:05:0b:64:c2:0d:37:40:aa:
df:5f:96:c2:14:1a:ff:4d:91:08:f7:96:8c:c2:37:
1e:0f:9f:0f:12:76:90:81:03:a8:95:b6:e2:21:d4:
a9:0a:fe:06:e5:e7:ab:21:aa:d2:ae:e4:77:b8:56:
27:1e:bf:32:45:1b:7a:e2:fb:be:60:32:4e:e1:79:
df:3c:7b:28:c2:ab:01:70:bf:3c:f3:cf:a5:33:50:
a6:79:ff:54:32:f5:7b:e4:09:ef:c4:9e:31:ef:5b:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:D5:85:5A:6A:6A:42:00:34:81:F8:D3:08:B8:92:9B:D4:ED:2A
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:71:b6:36:aa:02:f3:9d:eb:b8:ad:8e:d7:85:4e:7d:58:20:
dd:4b:58:e6:1e:63:f4:ff:24:24:01:20:53:0b:94:8f:dd:ba:
54:ff:e2:b6:cf:c2:24:56:f8:80:48:58:1e:2e:58:c9:e4:40:
b3:f2:36:1f:0b:57:80:93:67:41:e4:ea:09:6c:bc:f8:fa:ce:
a3:ac:aa:5e:28:04:56:6a:60:06:8c:1b:72:4e:f1:35:80:e6:
16:5b:ef:9f:26:c5:2a:da:79:fd:80:ab:f6:e2:ef:1b:44:bd:
1c:f3:5d:52:3a:00:48:0b:62:f4:54:7f:8b:32:72:ee:bf:52:
bf:bd:32:aa:44:26:89:4b:3f:2c:e7:67:b8:4f:7c:0f:51:54:
0c:f1:25:e7:cd:be:b5:d3:f5:ff:75:6c:7f:7b:22:0d:01:55:
44:9e:2e:5f:80:9b:eb:5e:10:e0:84:09:1e:59:83:8f:99:60:
00:3b:81:60:4d:47:8e:60:16:fc:8a:91:93:99:30:50:b5:1c:
b6:8d:a4:5b:fb:5c:96:af:73:c1:84:03:6b:c9:45:f9:26:ea:
6f:e6:53:16:e7:29:00:d8:4b:49:43:67:c0:58:e6:a7:2b:b9:
13:33:a2:cf:b4:3e:54:02:5f:14:53:89:87:9d:38:17:19:8e:
a8:f1:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:36:10 2026 by rpki-client