Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: k0fbn9QSNvJeR4oUrz3FLO26doelC3LHwspzl/MzGSQ=
Subject key identifier: 86:75:16:E5:02:28:B9:F6:D8:92:36:1D:2B:40:BE:83:4B:80:5C:EB
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01A13F70817E1316089D61BEF3C3EB311A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0A69
Signing time: Thu 15 Oct 2026 12:01:40 +0000
Manifest this update: Thu 15 Oct 2026 12:01:40 +0000
Manifest next update: Fri 16 Oct 2026 12:01:40 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: 5+X+Bov79xidi05JihpC7C4KtWPDWSyOSQ80EanP7BY=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:81:7e:13:16:08:9d:61:be:f3:c3:eb:31:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Oct 15 12:01:40 2026 GMT
Not After : Oct 16 12:01:40 2026 GMT
Subject: CN=867516e50228b9f6d892361d2b40be834b805ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:92:73:78:eb:97:b7:5c:57:97:e9:f5:20:
94:b7:e8:0e:0f:55:fa:78:db:47:21:e0:a3:e7:62:
22:99:dc:78:fe:cc:71:e7:db:47:89:38:17:1f:2f:
2f:80:b3:17:7f:b7:93:44:fc:0a:32:21:ad:02:43:
cc:91:88:b8:64:68:fa:3d:1f:80:19:4e:ef:c8:ad:
d7:13:a3:04:59:ff:e6:a9:75:1d:0b:8e:1a:18:1f:
78:67:19:26:6e:2c:c8:c4:56:14:eb:d0:5f:5b:c1:
77:cc:70:00:c3:17:e7:94:aa:38:f8:bf:61:ca:d2:
0a:ef:9d:56:7f:07:b6:61:8d:d8:fc:9b:64:e4:90:
9c:f5:55:94:dd:0c:a5:34:f0:20:6c:55:45:01:fa:
e4:6d:2d:a8:09:2e:01:c7:7d:ea:6f:05:62:8e:5c:
3c:cb:34:a4:5e:eb:2d:ba:4a:ae:58:57:b1:09:f3:
99:8d:fd:b7:84:aa:79:61:f8:6d:6d:77:d4:63:0e:
5b:ae:76:a9:23:6b:8b:c5:b9:94:05:66:e4:25:c4:
70:12:b4:16:0b:0d:d3:64:da:72:7e:45:90:68:5a:
46:94:e0:1c:02:b9:72:d9:af:f2:81:53:5a:be:fa:
ab:76:e5:e1:34:cb:fb:88:4e:4e:f8:41:a1:8c:ab:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:16:E5:02:28:B9:F6:D8:92:36:1D:2B:40:BE:83:4B:80:5C:EB
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:f2:a7:c2:15:2a:a2:f7:6a:c4:26:e2:a4:1a:56:47:83:
75:1e:e1:cf:e1:4e:51:1d:59:ab:53:c2:99:1b:63:27:41:c9:
13:d0:f1:30:51:15:d2:16:9c:4d:17:7e:3c:9d:a3:6b:34:ff:
f3:d8:cc:af:95:01:22:48:70:ec:10:fb:b2:8b:56:ad:4f:1b:
2c:88:8c:35:77:98:bc:de:d9:b2:94:fa:75:2f:e7:1c:44:02:
e7:2d:17:e7:f4:cf:d3:fb:d2:95:0a:1b:ce:c5:0c:1c:bd:54:
c5:50:93:06:17:df:0f:fd:e0:4e:64:da:88:0a:f2:e9:05:bd:
a6:21:f1:ba:95:3f:15:cd:47:50:69:40:52:59:af:4c:7a:ec:
ff:78:04:05:66:60:7c:2e:a1:5a:7b:d3:5f:21:6b:f7:ab:e1:
ad:21:d0:0f:9b:67:df:02:ca:e5:c5:20:27:a2:64:6b:ae:ea:
3f:1c:08:4b:72:72:35:f2:d2:e9:7e:e6:fd:b4:25:10:f1:8c:
b9:f3:8d:6c:5a:bd:9c:12:f5:6f:54:93:ae:72:66:d6:36:f0:
28:8a:1a:68:1b:fb:04:08:e6:d0:4d:af:b0:83:10:d9:00:32:
b0:b6:e4:11:76:96:3c:ec:fd:c1:34:8c:fd:9c:9d:c3:7d:22:
57:20:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:28 2026 by rpki-client