Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: SOqo0XihcdQCk/qw0R+XVkmiIEH/PA1qGWnr505Jif0=
Subject key identifier: C3:C8:82:64:7F:C7:48:E2:CC:DA:50:59:AF:79:2D:BE:16:AD:00:73
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019DA4C15773A240DEC137DDA1002CAC6D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 088B
Signing time: Sun 19 Apr 2026 08:00:27 +0000
Manifest this update: Sun 19 Apr 2026 08:00:27 +0000
Manifest next update: Mon 20 Apr 2026 08:00:27 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: dpalc5Iwa8I5mBogIyOtNOmbJpW2yePH8M5kQMIJoGg=)
2: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (hash: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:57:73:a2:40:de:c1:37:dd:a1:00:2c:ac:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Apr 19 08:00:27 2026 GMT
Not After : Apr 20 08:00:27 2026 GMT
Subject: CN=c3c882647fc748e2ccda5059af792dbe16ad0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:f5:c8:50:7b:67:8f:17:5d:e5:02:c8:3d:
cf:fd:d6:40:25:3b:3b:6d:fb:5e:65:26:22:7c:ff:
68:86:55:a9:7b:b2:95:73:40:db:b0:9d:e2:26:ff:
f1:77:62:38:a0:af:a2:92:1f:9e:69:1e:34:48:37:
ac:08:d1:37:cf:d7:2e:20:0c:7f:c4:8e:39:62:ce:
be:d9:e3:00:68:7b:2d:32:46:b5:a5:1a:af:77:2e:
18:a8:08:93:89:ae:a8:18:45:19:6b:10:e8:a3:1e:
02:f6:25:4a:a2:a8:c3:8e:2f:d7:c2:85:be:98:42:
5f:66:a2:82:59:25:49:bb:f0:5b:05:d0:01:c0:8c:
7e:73:17:a9:e6:2f:52:88:43:2d:43:26:28:ed:1d:
ec:1f:42:16:05:4d:a1:26:f8:92:7b:23:e1:6b:ac:
36:b6:82:16:b8:7d:82:f7:f1:33:88:26:10:f2:ab:
0a:a8:87:d3:c5:04:69:f8:33:9e:2d:f4:e9:db:0b:
89:4a:e0:20:64:34:d9:3b:f9:81:3d:09:d6:55:b7:
3e:df:22:f4:61:3e:fb:32:a1:81:33:76:a2:5c:75:
f4:e4:ef:a4:19:e3:e1:19:19:e0:c9:69:f4:4d:7b:
00:81:fe:80:ec:da:98:e4:c7:6b:58:27:3d:45:de:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:82:64:7F:C7:48:E2:CC:DA:50:59:AF:79:2D:BE:16:AD:00:73
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:c3:51:dd:2f:ea:a5:4b:ed:01:20:cf:f1:65:aa:66:d0:
87:80:ab:d2:76:e2:19:91:c9:80:f6:cc:8e:c6:3c:c2:34:3a:
2a:66:f6:27:f6:1f:ea:d8:dc:c7:1c:19:1f:58:5a:6a:a1:ad:
b4:aa:4d:39:75:1a:b3:d8:ae:a6:c5:3e:91:4c:ec:41:67:fa:
4a:28:16:1a:38:83:bd:5d:82:55:91:5e:a4:01:c7:f9:17:8c:
1d:c8:76:a4:92:2c:e6:7c:8b:fc:ee:20:c0:77:d7:f0:93:74:
8f:55:5f:36:52:ab:8d:d7:05:bf:ce:99:59:6f:c7:22:ae:81:
20:d3:4c:2d:32:1e:03:df:99:86:4e:b3:93:49:f9:ba:58:56:
c5:4e:6e:aa:2d:e6:30:17:e3:cd:22:cd:2d:c4:1e:9a:e5:6e:
a1:bc:38:c4:9f:64:3c:99:26:52:a5:4a:5d:bf:de:b8:01:52:
43:5f:a3:0c:fb:a2:d7:df:08:3b:cb:4e:fd:a0:06:79:b1:9d:
39:21:78:c9:61:b2:40:60:f5:40:1f:9c:19:56:2d:c2:8c:33:
7b:99:97:f4:3e:5b:ca:f1:e1:0f:f7:02:e9:9f:26:3c:5d:ff:
31:6c:41:d1:75:4c:03:99:cf:1e:c9:b5:7e:59:94:d5:c0:06:
f2:b8:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:17 2026 by rpki-client