Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: rKMMOJ6LOGsHKkYSjqG0KWtRWIrSXmtBX0yVDmLnvF4=
Subject key identifier: BB:78:0E:AB:0A:08:6B:12:5E:74:0E:DF:59:5E:FC:56:22:6E:EB:F3
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019D389BEAAD06CA853E17EBAE7B1F53A5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0853
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: QL8uEmjSNIz2Ux+UqJe1E3yA/1z8JBL3gZK8f7D5RVw=)
2: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (hash: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ea:ad:06:ca:85:3e:17:eb:ae:7b:1f:53:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=bb780eab0a086b125e740edf595efc56226eebf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:12:58:64:29:56:d0:0f:64:ab:9a:8d:ea:
33:55:16:15:2e:a6:19:fa:75:99:fb:54:01:5e:1f:
f2:38:c6:e1:5a:5d:a0:15:2e:3e:06:64:eb:2c:6d:
fa:bb:7b:39:01:70:28:0f:9b:02:59:59:8a:cd:b8:
c0:24:0a:f8:e3:30:19:c4:43:b8:66:64:b5:40:5f:
91:db:f2:39:ef:22:5b:a9:b2:90:f5:38:29:9f:81:
ec:7a:36:5d:9b:29:99:36:96:94:b0:4a:32:09:9e:
83:21:82:eb:a1:b1:60:41:56:38:d1:c7:b7:3c:b1:
f2:4b:22:08:5c:52:fb:62:fd:97:f3:50:84:fc:1b:
10:f2:f1:52:b9:c9:f0:3a:cc:10:bb:d9:5d:75:83:
61:7e:74:0b:30:c2:d8:8b:11:6c:71:03:c2:ee:b4:
92:7f:7f:88:ec:72:89:97:89:c0:55:3f:b4:03:0c:
c6:83:db:42:9e:35:75:22:cf:86:f0:4e:0a:91:d3:
69:7d:2f:f8:5c:1e:dd:95:32:c3:21:10:e0:4a:13:
1c:36:85:01:72:c9:6b:59:0a:6f:65:90:58:8d:f8:
d5:34:54:35:87:05:c7:07:52:ed:94:f2:6d:df:47:
71:7e:c4:a7:0f:cf:94:5a:b9:46:89:2b:49:a1:e7:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:78:0E:AB:0A:08:6B:12:5E:74:0E:DF:59:5E:FC:56:22:6E:EB:F3
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:c0:06:eb:1e:46:00:5d:10:22:c4:8d:28:2f:45:01:a6:
bc:b7:32:58:70:18:2d:65:f1:eb:e0:ea:84:3f:fa:14:a3:01:
81:63:b0:82:c2:2c:af:d1:83:4f:ab:48:3a:b3:ef:93:d0:61:
2f:7b:d8:24:54:c0:0b:ff:c9:d4:b1:60:5a:1b:c5:38:84:2f:
10:1b:ef:b1:bd:ae:16:fd:39:03:a1:61:e6:f7:f9:3e:66:b4:
b0:0b:ae:1f:28:dd:cd:2a:f2:04:44:0c:b4:bb:d8:48:3d:4c:
35:06:87:50:bd:b7:e2:02:34:6d:68:7c:35:1f:8c:7d:8f:5a:
b4:22:3e:42:ac:12:86:07:f6:97:95:71:c3:f9:24:2f:7d:47:
d7:40:5a:31:e9:30:ee:06:f8:db:d6:89:9a:d0:b9:ad:a7:24:
34:76:84:06:6d:24:50:5f:aa:4f:af:24:cf:8a:14:75:1c:b3:
39:3c:cf:15:a9:7f:8d:34:35:34:c8:d2:c4:8d:f2:a8:11:60:
05:69:c6:10:1f:04:27:fb:22:c0:d8:7d:78:77:59:70:35:d6:
5f:40:0b:93:76:f8:db:04:fa:27:c9:ca:68:fc:e0:be:03:81:
7c:db:30:e4:a3:4b:2b:20:b0:9f:f4:d2:dd:3b:7a:ac:ab:60:
af:2f:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:31 2026 by rpki-client