Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: a7M0pzaF2GriAPZdtvERb6ATNtG4b+TkufU7dskadGY=
Subject key identifier: F0:7D:E7:DC:49:8E:07:41:79:FB:05:EC:02:E6:C8:81:77:D1:B5:D3
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019CA9EADCB71B4BA8F957038D39633D8ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0B9A
Signing time: Sun 01 Mar 2026 15:01:07 +0000
Manifest this update: Sun 01 Mar 2026 15:01:07 +0000
Manifest next update: Mon 02 Mar 2026 15:01:07 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 7+xfpNFvjA1QEshZuJjqT+UT2G+e1cetZ824UwKLbSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:dc:b7:1b:4b:a8:f9:57:03:8d:39:63:3d:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Mar 1 15:01:07 2026 GMT
Not After : Mar 2 15:01:07 2026 GMT
Subject: CN=f07de7dc498e074179fb05ec02e6c88177d1b5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:5e:82:b8:2d:bf:b5:ff:21:76:59:38:b1:
cc:f8:27:fe:5a:12:70:75:0d:d4:1c:6f:29:34:e5:
d7:5e:4f:fd:a8:e7:95:9b:9c:92:ea:54:3c:2b:9e:
56:a4:fd:df:57:ec:31:96:2a:a5:98:1c:ae:7f:18:
5f:c0:8f:53:42:9b:9d:42:ed:9b:22:c7:6d:71:02:
d5:39:f7:b0:f5:8a:6d:ae:ae:1b:be:3f:c8:66:04:
d7:5d:0e:d2:ad:3a:20:08:41:ff:b8:6c:f6:76:5d:
37:fa:62:76:7d:ac:5b:77:92:7f:a1:b4:c4:29:b0:
10:f2:cb:8e:59:8d:51:7a:59:df:2b:37:a5:f5:f2:
aa:5b:09:f7:17:40:78:f7:57:27:fc:b0:69:ce:10:
db:92:8f:a8:de:ed:83:d2:6c:ab:ff:ce:28:ce:fb:
85:21:07:38:f9:90:1d:79:7b:0a:e1:4a:b6:65:03:
7a:49:50:85:63:b4:74:03:41:86:b7:4f:0f:2a:d7:
19:28:77:2a:89:12:4f:59:cc:9e:31:03:80:ee:34:
2e:3b:04:7f:1c:6e:a0:22:c6:39:20:a2:db:ef:f5:
ea:fb:b4:4e:1b:e9:1f:ce:14:a6:97:bc:56:b3:b5:
0c:85:f9:13:b1:c2:07:a1:94:c7:94:c9:17:d6:a9:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7D:E7:DC:49:8E:07:41:79:FB:05:EC:02:E6:C8:81:77:D1:B5:D3
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:21:18:95:d3:5e:e3:75:d4:69:6e:96:f5:a5:79:00:82:64:
92:2d:a9:b5:ca:a4:08:e1:a5:5c:60:be:91:e5:58:87:89:6c:
99:03:91:24:86:96:35:3b:05:58:77:05:ca:13:15:bd:37:c1:
c7:46:6d:e0:bf:ae:20:2c:b3:b4:75:3e:b6:e3:f2:9f:7e:48:
f3:f7:4d:0b:93:04:71:d9:fb:48:db:58:de:dc:33:9c:7e:f5:
40:99:3e:35:05:f0:ca:c9:60:ca:c3:30:d3:bb:7d:fc:d9:2d:
e3:87:3e:6f:8d:eb:bf:e8:7a:b9:67:c5:22:d0:17:70:13:25:
ef:0d:f0:6f:e0:f6:7c:ea:0c:d8:aa:4e:e6:75:0b:c5:82:6c:
4b:03:d2:b5:f8:ec:09:72:89:d3:91:76:ea:12:76:9b:15:c2:
b9:20:f7:b5:13:06:3a:76:c5:7b:cf:bf:a0:1f:aa:1d:c8:85:
98:da:0d:a8:fc:00:77:f3:cd:fd:09:09:1b:94:a7:cb:4d:cc:
05:0f:ef:11:f0:2a:8d:12:8a:da:af:a8:37:38:1a:55:2c:2f:
e0:4e:93:be:ed:ae:31:29:aa:de:8f:b8:c5:19:ad:62:d0:ab:
04:20:75:7d:a8:54:8b:81:44:8c:ed:fc:37:09:96:b8:15:1a:
60:75:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:43 2026 by rpki-client