Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: 0n/Zu7fcScwZnWm6ierXlgZVjDXq2bYaD5V7nrGAy2U=
Subject key identifier: 87:C8:78:D8:23:6E:CB:74:4E:9A:74:D1:8D:D0:DF:88:29:22:3F:7A
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01A0C28DC2EFD42A22CE3EBE89667E8B3CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0DB9
Signing time: Mon 21 Sep 2026 06:01:05 +0000
Manifest this update: Mon 21 Sep 2026 06:01:05 +0000
Manifest next update: Tue 22 Sep 2026 06:01:05 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: Tti09jN7aH1DQoeWRZUjOZqkDGwneNfaIS76RW/ldVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:c2:ef:d4:2a:22:ce:3e:be:89:66:7e:8b:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Sep 21 06:01:05 2026 GMT
Not After : Sep 22 06:01:05 2026 GMT
Subject: CN=87c878d8236ecb744e9a74d18dd0df8829223f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:d8:a8:09:13:eb:40:db:b0:17:c7:d7:90:
fa:45:3a:60:62:db:92:79:0b:53:5b:94:51:57:93:
32:c3:fe:2d:ce:d1:c9:e0:e1:6c:61:70:e5:9d:72:
ce:2b:71:0d:e5:d0:0a:c9:53:19:8e:fe:85:bf:fb:
80:be:2e:01:88:e2:54:85:23:70:7f:03:87:da:87:
b1:91:ae:cb:fc:76:0b:cc:be:04:06:3b:78:20:ea:
6b:36:42:ae:ab:fc:14:e2:50:80:59:f8:be:95:ca:
63:38:63:dd:d3:19:94:45:eb:59:cd:48:e3:f1:3a:
8b:15:f5:6b:14:24:e3:59:ec:25:4b:d8:3f:a6:03:
d1:4d:32:31:c4:e2:0a:38:41:75:e4:a1:37:50:06:
02:2b:53:d9:d4:b9:e8:b1:cc:3a:ea:6b:fc:c2:67:
69:5a:63:2b:9c:a6:7f:d3:6a:49:13:d7:7a:0f:9c:
ad:df:09:bc:9e:86:22:3c:8c:28:11:79:2f:71:79:
57:da:52:9b:51:af:8f:74:88:24:05:06:fb:c7:d5:
fd:5d:40:e1:73:8a:ea:b3:8a:03:46:74:b7:4f:9c:
2d:e5:35:c4:99:88:6d:48:a5:ab:14:fd:67:be:b5:
d7:5a:76:b9:ca:97:7b:2c:df:32:41:49:e7:9b:d7:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:78:D8:23:6E:CB:74:4E:9A:74:D1:8D:D0:DF:88:29:22:3F:7A
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:d6:38:ba:70:e7:90:7e:0b:f3:b8:f6:a7:c3:ab:6e:c3:
5c:4d:9e:ea:d5:76:5a:a6:06:fb:31:6f:0a:a3:90:8b:bf:21:
dc:17:c4:6b:d0:a9:a1:dc:8b:1b:54:82:e8:98:e1:a9:2c:cd:
f1:d2:89:70:c2:d8:1d:2a:a2:50:98:74:85:a2:cc:e2:be:25:
05:9f:e6:71:21:e6:7b:07:0f:a6:88:a9:ca:5f:05:fb:24:6f:
b2:2c:65:f5:77:08:b2:de:fc:42:4d:d1:4e:40:c1:7d:c8:67:
53:fa:07:c9:c9:cb:18:df:0c:91:fa:dd:b7:f3:a0:05:da:11:
a3:c8:78:95:5c:1b:31:af:34:91:70:1b:c7:3c:c5:98:ab:05:
f4:81:cc:0e:e8:ba:da:2b:54:c4:2d:e9:9e:de:eb:60:af:11:
73:9d:a1:48:63:fc:64:08:5b:15:cc:ae:5c:92:ec:4a:8f:19:
89:65:12:d6:a9:7d:7a:90:95:97:7e:80:1c:73:63:70:ed:cb:
31:14:64:f8:25:c7:ee:db:1c:fe:fd:6b:07:cb:f2:15:18:b9:
92:bd:f6:91:bf:7c:20:a4:b4:25:9a:12:71:79:03:2a:dd:73:
e6:4e:4c:54:a9:de:42:35:2d:9a:96:a8:47:b2:99:64:61:b3:
cd:a4:89:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:49 2026 by rpki-client