Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: fqQTrEOzpfRc8Ff3yEAMkNBbDM3SEQzpx12Va9NlyQI=
Subject key identifier: E7:1C:A4:EE:53:FC:05:99:33:FB:E0:96:97:0E:4D:0B:6A:C1:C9:A9
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019FA8993E6D1089F67A5BA647713555D697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0D27
Signing time: Tue 28 Jul 2026 12:00:43 +0000
Manifest this update: Tue 28 Jul 2026 12:00:43 +0000
Manifest next update: Wed 29 Jul 2026 12:00:43 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: nijXucjze2FAFJ3NoM+LT9YbCrLTMYzNbJ9QZlXdplo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:3e:6d:10:89:f6:7a:5b:a6:47:71:35:55:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jul 28 12:00:43 2026 GMT
Not After : Jul 29 12:00:43 2026 GMT
Subject: CN=e71ca4ee53fc059933fbe096970e4d0b6ac1c9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:cb:fd:58:5f:e4:c1:39:be:cb:b0:f1:b2:
e2:2e:e5:3a:b7:9a:6f:3d:f2:f9:9b:5a:2a:60:ec:
ac:53:5a:28:73:0a:6d:23:d5:14:4a:c7:df:4f:92:
13:a3:d5:ee:40:7f:57:75:9e:4a:ca:a8:1e:ec:94:
f1:be:dd:98:21:2e:6f:db:cc:81:9c:dd:47:04:1c:
39:a8:12:02:2a:01:7c:8d:55:c2:3b:9c:8c:79:ce:
80:5c:10:b7:61:0c:4e:c8:de:f2:06:7d:1a:78:3f:
52:29:03:6d:3c:82:ca:5e:5a:0d:d2:40:69:b8:ce:
dc:51:55:5c:6c:f7:04:9f:3a:66:11:c2:7a:36:9c:
41:ee:c5:3a:94:c9:6c:eb:46:d5:c4:95:be:a9:af:
07:d2:8d:28:45:60:8a:ea:26:ca:88:28:07:fe:9c:
82:37:95:5e:f0:63:71:26:75:7c:76:c3:15:e9:e1:
7d:dc:22:94:97:e6:8a:14:ea:e4:0a:b3:c0:a7:bf:
57:c4:5c:fe:83:27:53:78:ef:52:1d:45:78:7a:c2:
98:3c:40:64:04:e4:fe:44:3c:33:35:f3:8d:24:b6:
11:9a:a6:14:0b:6f:11:b9:08:66:83:ff:6a:a9:69:
a8:47:b1:57:23:db:81:8e:55:ef:cc:d5:97:a1:c9:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:A4:EE:53:FC:05:99:33:FB:E0:96:97:0E:4D:0B:6A:C1:C9:A9
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5e:05:55:11:9e:6a:2a:4f:d7:59:cf:86:f6:e0:1e:fc:45:
24:91:3b:67:dd:81:0e:ed:97:92:cb:0f:ec:78:aa:31:43:3d:
0d:21:12:f8:88:24:e2:2f:c7:a9:23:5b:c2:b7:50:18:41:3e:
ac:4e:f4:d2:98:0c:8a:f4:3e:17:3c:07:68:d0:69:a7:06:df:
9b:96:47:39:85:46:ff:0c:fc:86:f0:23:39:ee:60:28:71:30:
d7:74:55:fa:bd:d9:66:20:18:34:b5:47:ee:30:37:41:e1:fb:
11:38:63:b7:57:56:54:4f:bc:50:5f:49:6e:b0:7a:b6:ff:96:
c8:73:d5:a7:89:a7:3d:69:39:83:32:d6:68:fa:3c:8a:c8:0f:
e6:7d:2b:dd:84:f7:2b:58:ac:b4:20:3a:6e:e3:d7:f9:11:86:
10:d5:fa:66:85:ec:56:5e:9a:a5:48:2d:dd:a3:97:18:c6:88:
be:ae:f1:83:02:7a:e5:a0:3b:de:27:32:19:ea:84:75:e5:00:
c0:71:23:d9:99:35:5c:75:f8:71:e6:f0:03:9c:b1:51:46:3f:
d8:cf:f4:19:23:37:ba:73:0e:b5:2c:d0:53:e0:45:1d:a9:88:
46:e1:9f:c7:0d:d8:f7:7b:1d:d5:1f:37:10:29:c1:7d:25:38:
ae:6f:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:29 2026 by rpki-client