Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: PvIu3lnIspepqCUAEtIaLumLSsrRXBkYipFbsTUK3Uk=
Subject key identifier: 80:00:FF:22:CB:EC:AB:8B:39:C6:6E:7A:73:07:37:83:E4:45:DB:A7
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019FA9E267B7CE23A9F5F55ED0F8A31BC4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0997
Signing time: Tue 28 Jul 2026 18:00:14 +0000
Manifest this update: Tue 28 Jul 2026 18:00:14 +0000
Manifest next update: Wed 29 Jul 2026 18:00:14 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: +H7O6+ePji6IirUkIGRThzoZxw+edkED8AqXtrrzkoY=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:67:b7:ce:23:a9:f5:f5:5e:d0:f8:a3:1b:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jul 28 18:00:14 2026 GMT
Not After : Jul 29 18:00:14 2026 GMT
Subject: CN=8000ff22cbecab8b39c66e7a73073783e445dba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:00:c1:92:ec:1b:81:a0:14:45:54:23:91:
fe:cf:36:46:d1:b7:55:e5:1c:d2:10:a6:85:12:5b:
d0:52:9b:6d:44:58:11:c8:f4:20:c4:b5:1b:4e:25:
b9:e7:e3:9f:0d:d2:e1:45:e2:cd:42:6d:61:6e:ac:
3b:9b:bb:ad:5e:c6:8e:a1:af:a1:59:ff:32:f7:69:
ed:f6:0d:bf:01:5b:c6:bd:f2:8c:bc:8f:3f:9f:8a:
e3:75:ee:0c:53:1d:96:bd:72:39:09:74:f7:da:99:
ef:06:d5:41:e0:ed:49:b8:05:76:8b:e2:e7:6f:95:
fd:ec:be:9b:48:58:f9:7e:24:6b:d4:61:97:65:23:
ec:a0:40:84:62:24:cd:87:9c:cb:ee:46:44:1f:f4:
0b:73:1f:0f:0e:18:71:09:8b:86:15:86:05:bd:d6:
81:81:18:6e:a9:df:2e:1e:b7:7c:7b:1c:22:cb:5c:
4e:6e:bf:51:83:36:e7:a6:2b:01:23:42:65:65:3f:
c3:bd:3f:d0:21:7d:9f:1e:82:ea:7b:01:f0:55:89:
c6:93:41:05:15:66:e7:65:bb:ff:55:b5:4a:6d:54:
aa:12:89:6b:46:fc:b9:95:d3:82:1a:8c:91:64:a9:
c6:55:c6:94:13:21:82:20:57:95:96:fe:86:63:2c:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:FF:22:CB:EC:AB:8B:39:C6:6E:7A:73:07:37:83:E4:45:DB:A7
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:8a:67:d5:2a:a0:67:32:a3:d3:28:0e:f1:01:5b:a1:90:
37:aa:fb:6d:53:71:64:63:be:d6:be:d7:d2:8d:4e:3b:77:e0:
7c:d0:a1:dd:21:7e:81:a2:5b:c6:fc:e3:37:b3:1c:82:e7:57:
42:69:11:f6:8c:0e:a5:b9:61:19:f8:82:00:e5:7e:65:e1:0f:
32:29:a5:a2:e5:4f:a1:68:bb:44:1c:40:fc:84:77:21:14:84:
b9:cd:73:91:d0:0d:34:4a:dc:37:4b:ef:46:52:37:cf:ea:b1:
e0:92:92:f7:5e:34:2d:27:57:93:1f:94:9a:54:b0:1b:82:90:
88:c4:44:8e:67:12:3f:0f:b3:52:ab:61:6a:c3:24:c7:5b:a8:
84:07:af:ef:53:64:92:ae:1b:9b:ef:3b:70:0f:ae:22:8a:fa:
1c:1c:a4:de:97:13:51:46:61:1b:8b:5e:2d:f2:a3:c2:59:74:
ee:e5:91:5c:1e:2b:c5:b3:15:8a:7f:ba:0a:ab:66:d9:5c:a4:
82:29:bd:23:5a:3a:1f:45:c5:3b:4c:60:3f:ee:4a:e7:67:49:
0a:ed:ec:36:de:48:54:1f:c9:2c:41:6f:7c:4a:6f:37:5d:1d:
a6:ba:7e:af:f6:cb:05:89:49:0b:40:b9:85:90:a1:25:e9:6c:
ad:04:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:42 2026 by rpki-client