Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: /g68V9Her3S/7CeMY+44XKHLyP0M9B2OlQvC+9s3mtA=
Subject key identifier: 7C:FF:A5:D7:F4:CA:76:39:5B:2D:53:A7:97:D9:0C:C9:E1:DC:FE:FA
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01A0D011F453DC486CD5AD395EF2D7973B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0DC0
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 9YhKviItgek9dYZnVhCNRToAaf3mVQi9jxP9sIRpS+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f4:53:dc:48:6c:d5:ad:39:5e:f2:d7:97:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=7cffa5d7f4ca76395b2d53a797d90cc9e1dcfefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:f4:8f:e4:76:b3:6c:78:32:84:22:b6:c4:
90:48:fc:93:fd:03:cb:52:68:a1:51:82:63:a1:d3:
9e:32:20:42:ff:0b:c1:a3:94:ae:00:8c:38:54:1a:
32:24:3d:cf:7d:86:06:80:af:91:9f:ef:d6:23:ec:
4d:12:6d:3b:8e:39:53:90:00:aa:79:e3:f6:6f:89:
f8:80:08:9c:b1:52:45:31:a0:80:c5:df:cf:c2:0d:
fe:83:a6:7d:2c:8b:4b:ff:25:67:41:1e:e0:64:77:
60:6c:60:c9:53:6b:e7:fe:80:45:36:b3:11:6c:14:
a2:86:b4:2b:48:35:95:46:13:67:48:cb:ba:9e:61:
4b:af:67:56:23:f9:ac:13:b5:75:dc:f3:f6:17:7f:
14:f7:de:a0:77:77:10:89:d3:37:f1:f8:a4:68:1c:
be:e3:db:38:55:b4:e4:b9:c2:f5:06:41:4c:68:b1:
db:ab:ec:42:ff:bd:f0:03:30:d5:5b:5f:fc:6a:e1:
8f:c0:d3:ea:11:1c:cc:4d:72:65:da:f7:7d:bb:67:
9d:5d:e3:f0:27:ca:5e:a0:a9:97:b9:76:a2:d4:e6:
48:5a:43:a2:eb:ee:72:4a:4c:84:2a:2a:21:a3:79:
09:f7:ff:90:55:d9:b4:b2:78:88:f4:99:c6:ab:24:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:A5:D7:F4:CA:76:39:5B:2D:53:A7:97:D9:0C:C9:E1:DC:FE:FA
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:bf:09:e6:f6:44:a4:93:5d:82:45:1c:60:26:ff:4f:ca:
03:3b:74:ea:d2:b6:1f:72:65:8b:b5:71:b8:dc:a5:20:35:a0:
b7:11:f4:9f:82:f5:0d:72:e1:75:41:8a:aa:35:7d:c4:c1:af:
c5:ee:77:f3:40:8c:03:2f:19:10:9c:14:3e:f9:6a:fa:b9:52:
e3:14:f6:f2:cc:64:ad:21:8e:57:4f:21:ee:76:0c:22:07:2b:
39:56:c8:1e:8c:45:c3:4d:de:6d:9c:c3:bd:83:b8:e4:c8:fe:
b7:44:fe:56:9e:87:81:05:10:28:a6:44:6b:22:7c:3d:56:4b:
18:ea:d5:7c:ec:cf:ae:96:da:1d:99:ad:fa:0b:e8:d1:c9:7d:
09:6b:48:63:8e:10:39:7f:1b:31:31:29:1c:31:0c:60:aa:61:
ae:ca:3d:75:c5:e0:47:99:95:48:29:0b:4f:a4:2e:d6:82:e2:
e1:96:68:b8:dc:9b:6c:6b:38:48:63:de:76:a3:20:b5:8d:af:
4b:a0:36:71:4b:5d:3b:e2:96:20:12:0f:eb:9b:30:90:38:ff:
a4:8e:ee:ee:57:dc:18:67:32:44:ae:f1:6b:e5:c1:73:ac:db:
ac:bd:6c:85:d4:67:99:26:eb:af:3f:b0:fa:90:61:75:d1:69:
f2:a1:c4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEfRT3Ehs1a05XvLXlzuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl
YzZhOGUwHhcNMjYwOTIzMjEwMDMyWhcNMjYwOTI0MjEwMDMyWjAzMTEwLwYDVQQD
Eyg3Y2ZmYTVkN2Y0Y2E3NjM5NWIyZDUzYTc5N2Q5MGNjOWUxZGNmZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcT0j+R2s2x4MoQitsSQSPyT/QPL
UmihUYJjodOeMiBC/wvBo5SuAIw4VBoyJD3PfYYGgK+Rn+/WI+xNEm07jjlTkACq
eeP2b4n4gAicsVJFMaCAxd/Pwg3+g6Z9LItL/yVnQR7gZHdgbGDJU2vn/oBFNrMR
bBSihrQrSDWVRhNnSMu6nmFLr2dWI/msE7V13PP2F38U996gd3cQidM38fikaBy+
49s4VbTkucL1BkFMaLHbq+xC/73wAzDVW1/8auGPwNPqERzMTXJl2vd9u2edXePw
J8peoKmXuXai1OZIWkOi6+5ySkyEKioho3kJ9/+QVdm0sniI9JnGqyS17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz/pdf0ynY5Wy1Tp5fZDMnh3P76MB8GA1UdIwQY
MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt
OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk
LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTK/Ceb2
RKSTXYJFHGAm/0/KAzt06tK2H3Jli7VxuNylIDWgtxH0n4L1DXLhdUGKqjV9xMGv
xe5380CMAy8ZEJwUPvlq+rlS4xT28sxkrSGOV08h7nYMIgcrOVbIHoxFw03ebZzD
vYO45Mj+t0T+Vp6HgQUQKKZEayJ8PVZLGOrVfOzPrpbaHZmt+gvo0cl9CWtIY44Q
OX8bMTEpHDEMYKphrso9dcXgR5mVSCkLT6Qu1oLi4ZZouNybbGs4SGPedqMgtY2v
S6A2cUtdO+KWIBIP65swkDj/pI7u7lfcGGcyRK7xa+XBc6zbrL1shdRnmSbrrz+w
+pBhddFp8qHEMQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:13:47 2026 by rpki-client