Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: r5o5cAcrWB3SirVgWXYje32frb4wZQSe+A43aUN3VGM=
Subject key identifier: AE:94:FE:28:8B:EA:BA:AF:D5:2B:65:B6:19:B8:30:59:73:15:71:49
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01A0C5C53FBC7C43B80D406560E1D9DABB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0A2A
Signing time: Mon 21 Sep 2026 21:00:33 +0000
Manifest this update: Mon 21 Sep 2026 21:00:33 +0000
Manifest next update: Tue 22 Sep 2026 21:00:33 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: 9d+nPRYOLOSnBHyObOFGropng4ho01A/WMm/hA38pcs=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:3f:bc:7c:43:b8:0d:40:65:60:e1:d9:da:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Sep 21 21:00:33 2026 GMT
Not After : Sep 22 21:00:33 2026 GMT
Subject: CN=ae94fe288beabaafd52b65b619b8305973157149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:28:d6:9d:19:ec:de:be:d2:a1:49:d9:09:
7d:26:e0:c0:12:4d:f9:78:5b:1a:73:c3:6b:f2:67:
9c:f2:b4:12:26:39:2e:a4:ee:5b:45:30:c5:27:fa:
56:e2:30:c6:11:08:55:fd:ab:3f:b6:6b:30:3b:f9:
88:93:55:81:2a:ea:bf:91:fb:0d:bf:a2:4e:34:45:
9b:41:24:a7:e0:6f:75:e8:74:25:99:fd:7e:91:19:
64:39:b9:6e:4f:e8:27:b3:0a:6a:13:c4:0d:d8:23:
86:de:4f:2a:6c:db:79:c5:67:22:0d:58:6b:4f:95:
41:53:8f:51:8b:f0:5f:a2:c1:19:9f:cc:06:f8:40:
2b:dd:48:d6:6e:ad:b9:84:1b:89:8d:62:3b:bb:f0:
82:4c:b4:e5:42:f6:35:b4:de:b5:73:0a:01:46:b4:
a5:94:aa:31:f8:69:d1:da:a2:fb:b6:26:86:7a:83:
26:74:f7:7f:bd:d9:09:eb:b4:13:3b:55:41:2d:01:
de:c2:5a:9b:66:c5:d8:f4:4d:09:31:c2:06:d1:62:
f4:01:0e:5d:c8:9c:66:54:f6:d4:c3:72:d0:4b:22:
93:8f:ee:d9:e2:b0:26:f0:6c:3a:56:01:0f:1a:85:
ad:45:04:a6:73:d7:83:1e:64:74:11:73:00:e8:ca:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:FE:28:8B:EA:BA:AF:D5:2B:65:B6:19:B8:30:59:73:15:71:49
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:e0:30:52:3d:2b:44:ec:6a:63:d2:8c:d4:1c:20:f2:0c:
19:d4:c9:4c:e5:b0:9d:5d:ff:c8:c0:11:db:d5:cf:b5:3f:ed:
e9:40:c7:f2:7a:2b:6e:b0:b6:d3:6f:47:f7:60:48:f5:48:9e:
c9:c2:12:11:69:dd:94:d5:87:74:03:d8:b9:02:56:ac:82:80:
e7:dc:5b:0c:ce:28:0b:16:45:07:01:be:22:c6:46:cf:30:d5:
0a:19:0e:43:ee:02:0b:89:56:a9:da:56:b1:f7:ec:f5:d2:38:
aa:97:ef:be:11:e0:27:df:bd:10:7c:ae:b6:da:e4:7b:11:7b:
a9:a6:71:eb:4e:f2:e3:9d:a2:b3:1d:b7:fc:1a:8d:63:a1:a4:
0d:29:58:72:15:30:1b:36:8f:e4:7b:b1:4a:81:e7:99:53:f2:
f6:72:58:54:97:26:96:71:f9:09:4f:90:88:76:dc:78:ef:dd:
3a:5f:37:0b:3a:38:5b:2a:c4:51:4f:90:71:a1:a9:29:1a:08:
7c:19:33:a8:7a:28:dd:c9:88:f4:94:1b:a9:6f:96:49:df:cc:
22:21:6e:e0:17:7c:9d:5a:74:1c:32:83:a1:41:f2:cf:3c:a7:
2a:af:e8:b3:c7:79:24:f0:ac:4b:3e:15:cd:11:ab:5e:9b:ed:
f2:00:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:35:07 2026 by rpki-client