Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: xk/hWZnx6SurrlvRqVSwzas46kOhA+69o/pAJnxrxOQ=
Subject key identifier: C6:EA:DD:96:30:0D:0E:E2:8A:31:2A:66:FE:91:F6:76:08:CB:6F:65
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019E1EA3CBF1BDED12A559491C827DC508ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0C5B
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: Az3cZxSjOt7FMI1N6gXFBSc8sUKWUOBAHl6aiGwO1Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cb:f1:bd:ed:12:a5:59:49:1c:82:7d:c5:08:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=c6eadd96300d0ee28a312a66fe91f67608cb6f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:5d:01:fc:30:8c:f8:04:06:fe:25:12:33:
cd:f7:d6:cc:53:21:fd:c8:01:6f:7c:35:ad:b0:54:
a8:f6:4a:c8:be:48:5d:b5:09:12:7e:99:0a:14:c3:
2f:d0:80:94:c9:7e:be:84:ee:44:6c:8e:65:5b:68:
8e:b3:07:34:bf:b9:73:7e:1f:48:6b:60:bd:f2:6a:
0f:7f:d5:dd:08:4c:1b:79:8b:c8:b3:51:de:2c:3a:
7f:45:7c:54:ff:a1:9e:13:6e:8a:ff:f8:b8:07:30:
59:c9:31:e4:4b:22:55:a6:9b:9e:6e:75:07:dc:8f:
65:c9:f7:c2:55:5a:c7:18:8b:63:79:06:61:9c:0f:
a1:95:96:26:e8:11:ce:49:ad:09:f3:e7:60:b0:41:
fe:ac:20:b3:7b:f0:e5:cd:70:5c:71:a7:85:39:b2:
e8:d7:07:4f:2f:6c:3f:7e:5b:bd:a7:ff:fd:d2:7a:
21:92:bb:0e:85:d9:4c:9e:f6:b8:dc:74:42:32:6e:
7f:02:0f:5b:d1:03:62:7e:26:19:14:b0:b1:ac:7f:
e9:18:54:e4:fc:ba:f6:7f:0d:34:b7:48:8f:73:b6:
9a:54:f1:11:1a:33:a7:72:4a:36:f3:70:ba:f2:88:
2b:10:8b:1f:c5:81:57:4e:d3:b5:1c:80:23:35:99:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EA:DD:96:30:0D:0E:E2:8A:31:2A:66:FE:91:F6:76:08:CB:6F:65
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:f3:1f:d3:ed:6a:39:00:08:40:34:20:e6:61:01:d9:ec:
a9:87:c7:71:d4:59:65:88:d0:b2:c3:df:0f:f7:94:96:da:69:
a4:29:33:f5:f5:de:0e:90:1b:49:43:57:03:55:d3:0c:3d:0c:
d4:59:7c:6e:43:6e:71:77:f2:38:ff:58:cd:76:1f:59:a8:ca:
6c:c5:b1:96:51:9a:9a:51:39:85:a4:5e:c0:9b:c4:17:ef:1c:
c3:18:42:fc:6c:ae:ac:61:00:41:c3:5d:6c:6a:0a:88:71:b0:
19:3b:2f:62:91:cb:c7:32:00:91:0a:39:5e:08:3c:0e:db:75:
52:15:88:58:03:66:90:cf:b1:28:fe:2b:b0:f8:67:e8:a2:9b:
a6:27:79:13:47:af:6f:e0:7d:6a:e7:cf:ba:d2:8d:9d:b4:e5:
76:41:7a:54:53:ab:1f:e0:fb:40:ec:9a:38:9f:6c:9d:b9:e8:
67:9d:49:e4:47:85:12:26:a6:cf:46:b2:46:49:f0:14:18:28:
7d:f7:90:bb:51:b6:7b:78:62:25:d0:95:98:f4:8b:50:eb:a4:
ef:21:fa:f1:15:72:ee:d5:65:59:f6:94:8f:e4:54:f3:e6:93:
b4:52:e5:56:3d:89:97:96:43:04:d1:e9:15:5f:9f:6b:68:a9:
08:15:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:09 2026 by rpki-client