Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: CHyUyeYFUH7T925/8bxcxbLlTcvPUZKm8jVHyP8KSow=
Subject key identifier: B2:47:B5:A5:AD:5A:C2:52:02:C6:55:FA:94:82:FC:28:18:68:66:BD
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019E314E18657BEE6D62246A8CE6C07C3580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 08D4
Signing time: Sat 16 May 2026 15:01:02 +0000
Manifest this update: Sat 16 May 2026 15:01:02 +0000
Manifest next update: Sun 17 May 2026 15:01:02 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: 2T4d3Icj/6vpCIdTkUOeSusWPxSR7NRM+6BSchQqLs8=)
2: uLsTVxEaNduNnG1jmD6a-ydOs34.roa (hash: niH+M4UZIe9fMjOMqZQoXGbZ0XEyo51YSGCWK4wDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:18:65:7b:ee:6d:62:24:6a:8c:e6:c0:7c:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: May 16 15:01:02 2026 GMT
Not After : May 17 15:01:02 2026 GMT
Subject: CN=b247b5a5ad5ac25202c655fa9482fc28186866bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:82:e4:f1:3b:19:04:4b:c8:c1:b4:ed:dc:
a4:f1:d9:d4:da:df:e5:0d:ea:bf:0c:3f:c9:47:08:
52:72:2e:07:03:70:9b:15:a8:bd:c1:77:54:e1:23:
eb:40:a2:42:61:51:ad:c4:15:3c:03:81:2b:b5:58:
0e:34:f4:3b:76:75:a3:08:9b:8e:58:ca:cb:d1:3c:
3b:9a:94:37:bc:3c:4a:5c:eb:ee:ad:cd:c4:5d:74:
3f:66:47:c4:98:b9:56:9c:59:ee:96:e6:52:db:1e:
43:76:2d:22:b9:bd:ea:07:f3:93:e6:37:d9:dc:70:
a6:83:64:ca:1f:db:7e:ea:e5:6e:b6:41:09:30:37:
9f:c4:0d:18:38:f1:9e:b7:2b:f4:4c:25:e1:ab:c4:
0d:4f:96:e3:50:b8:e9:77:c1:eb:bb:d4:80:e3:86:
0a:38:ec:2d:c8:99:4a:2d:5b:33:b5:92:87:3d:f7:
83:64:ad:57:be:df:ab:fb:60:8b:89:95:01:ad:01:
d4:88:bc:07:a8:36:56:47:04:38:1a:41:c0:34:8a:
b6:e1:fa:d5:78:c2:31:05:5c:0d:84:1a:37:dd:35:
36:e4:40:9c:02:31:67:24:19:46:e4:94:02:d1:6c:
a6:b3:e8:18:1f:c8:0c:c0:23:71:39:90:61:ef:8b:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:B5:A5:AD:5A:C2:52:02:C6:55:FA:94:82:FC:28:18:68:66:BD
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:e3:4b:09:f0:88:e0:a5:9d:ef:e0:57:32:24:af:99:a6:
01:8f:ac:bc:74:16:a8:77:cd:68:94:77:52:6b:62:f3:26:e7:
3c:56:c9:09:0d:50:ff:7e:c7:1b:17:7f:1b:66:65:5a:61:a9:
b3:57:10:5e:64:ed:50:16:c4:7e:a5:2f:34:9c:c1:fd:ef:4a:
a8:4e:c2:6b:04:01:e0:ed:5b:b7:07:f3:76:17:dc:ed:88:f4:
96:1f:ba:13:b4:06:f8:3d:43:48:16:f8:f3:6a:d9:30:77:d4:
e7:d4:20:02:2c:7a:3a:1a:78:90:11:b3:d4:74:cd:46:da:bc:
7a:bd:92:bb:05:ff:b9:22:c7:79:69:3c:f4:f9:0b:e9:bb:31:
13:14:4a:6f:0a:24:86:b8:0a:48:2c:bf:99:ef:31:a7:08:6d:
0f:49:01:9f:b9:d2:4e:93:27:ff:c6:ff:ab:3f:22:f5:05:8b:
8d:1b:e4:81:7c:29:eb:e7:ed:af:a3:51:51:3c:3d:93:b6:e2:
9b:c9:13:6b:7c:43:7b:65:93:bc:4e:90:54:de:40:4b:67:68:
5d:d5:33:50:ac:35:f4:90:68:2d:e0:d7:8e:5e:42:f3:d0:93:
59:4d:8e:ca:7f:d3:17:91:93:a0:df:48:a8:68:2d:40:4d:36:
d4:52:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:13 2026 by rpki-client