Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: 9Ko4tHawC43+k7WQzyZtqmIh46QgCabgT1LaGatR4bA=
Subject key identifier: DB:82:F7:EC:EC:79:46:1E:33:E1:1B:74:5B:AB:74:26:63:C1:26:64
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019D996246FEB4A84F52FD0EC33CF9595D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0C16
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 3BxqFQgsWny/Qep6iohRz7Xth2m0jrN+qzU87NZi0SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:46:fe:b4:a8:4f:52:fd:0e:c3:3c:f9:59:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=db82f7ecec79461e33e11b745bab742663c12664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:68:ef:e3:92:96:67:d1:bd:82:63:95:fa:
c2:82:4c:ad:8e:8d:37:ad:64:44:1a:25:cc:68:a0:
f1:86:97:ae:38:74:aa:de:39:04:ba:74:84:60:d1:
ea:18:47:fd:6b:3e:26:15:78:88:cb:9c:66:1d:b6:
f0:f2:7a:e5:bd:cb:45:8b:01:ac:c2:93:ea:3d:7e:
e4:c2:78:d5:ff:cd:8f:1d:3e:e1:29:5d:a3:b2:31:
44:0b:e4:80:0b:1d:65:cb:58:09:8c:70:d3:e2:7b:
5b:d7:e5:6c:35:88:23:cf:88:c0:1f:a7:1d:72:f3:
41:f3:a9:2a:72:f6:b4:e1:74:eb:fb:f7:83:95:25:
40:92:c0:cf:6f:ea:a5:3b:6e:b7:94:9a:5a:25:5b:
f4:c2:28:5e:06:38:42:3e:7b:3f:58:a4:71:08:d3:
f0:18:1c:66:6d:25:1c:9f:77:f7:69:b1:12:0b:69:
25:13:27:58:38:f8:0f:0b:b8:ae:01:4b:ab:34:d1:
d9:f3:45:6e:ad:df:89:77:bc:b0:f5:3d:68:42:f5:
76:9e:de:d7:b3:7f:3b:12:a6:b6:a7:9b:01:6d:66:
88:60:63:95:d4:8d:7d:9e:6b:fb:14:79:f3:1f:d1:
59:68:8d:c4:11:83:7c:e5:87:72:9f:3b:e4:9e:f0:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:F7:EC:EC:79:46:1E:33:E1:1B:74:5B:AB:74:26:63:C1:26:64
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:f5:47:07:07:76:f5:8e:0f:bd:23:76:71:fd:3b:64:f2:
01:6b:b2:05:43:79:3c:b3:14:c4:b3:57:7d:1e:d1:ba:60:b3:
d6:55:0f:52:89:b6:97:8c:bd:df:84:ab:84:c0:fe:f1:e8:bd:
3a:cb:04:f1:fb:59:f3:8d:93:e6:26:9f:51:68:a0:37:15:69:
8f:46:c6:6a:c2:28:c5:7e:b5:7b:93:5a:c9:9d:80:6e:2c:c5:
14:9a:a2:37:e4:bb:de:6f:5a:ab:37:93:5f:ab:f8:d9:da:10:
6c:90:42:9d:ec:b4:b6:75:2f:35:f5:ad:4f:01:c1:cb:ca:cd:
44:22:e4:64:28:0b:6a:b3:45:b4:9e:c5:a2:e2:3d:d4:e0:b5:
85:35:14:ec:dc:dd:4e:1e:c1:03:97:85:29:c1:e7:89:f5:8e:
04:72:b2:ba:67:bc:90:90:ba:77:d9:62:39:28:f9:3b:b8:48:
0d:56:41:f6:a9:6b:c8:ca:f3:83:1e:91:09:d5:16:e3:9e:0f:
e2:93:4c:de:95:4c:6b:20:64:6b:28:90:3d:7b:8a:53:ad:20:
26:df:a9:28:15:a8:cc:81:a3:00:5e:8c:4f:12:12:9e:7a:f6:
fc:5d:0c:79:22:9e:dc:c4:3b:57:08:59:c4:7a:83:bc:1d:f6:
2b:8a:4b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:25 2026 by rpki-client