Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: uWpVL3GDkX9AVWsEVa4JgjzqnJexdo5WxIHae0JM9kI=
Subject key identifier: 93:9C:6C:55:DA:9B:69:E2:DB:51:54:75:9F:AC:29:0A:2D:37:B1:50
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019D2772673C0C7694A58138C5A812B2CA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0BDB
Signing time: Thu 26 Mar 2026 00:01:41 +0000
Manifest this update: Thu 26 Mar 2026 00:01:41 +0000
Manifest next update: Fri 27 Mar 2026 00:01:41 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: Wucj5apKYNh0WZ5yoN+3sNXqkpDv1CCXa4Q9KY8v46w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:67:3c:0c:76:94:a5:81:38:c5:a8:12:b2:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Mar 26 00:01:41 2026 GMT
Not After : Mar 27 00:01:41 2026 GMT
Subject: CN=939c6c55da9b69e2db5154759fac290a2d37b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:95:2a:65:33:8f:6c:f4:5e:bf:88:f2:de:
6a:c0:26:d5:ba:fb:8a:90:a5:5a:a6:58:4f:7d:d4:
d4:7a:3a:ea:33:eb:f5:80:71:27:45:2c:88:a0:8b:
b9:a1:a4:3d:74:85:58:c1:25:5c:f8:0b:47:c1:81:
fd:fd:45:21:03:3e:62:a8:e5:91:34:0a:92:9b:6b:
06:b1:4c:3e:f7:ea:93:59:5a:f4:0d:29:61:11:53:
49:d3:18:0a:20:78:d4:28:23:a1:ce:58:0a:55:69:
4f:f7:b8:68:df:0b:84:54:ef:96:e4:94:0e:9c:11:
6c:9e:e2:4e:3b:de:87:14:b1:02:fd:49:35:85:3a:
90:c6:90:4a:61:3c:62:9f:d5:1f:ac:63:42:26:bb:
eb:be:9f:32:cc:4d:29:da:81:2d:b5:72:18:be:fb:
98:b4:59:e1:ba:68:8d:03:a4:4d:68:4b:1d:e6:da:
c7:44:4e:c0:0b:2e:9a:2f:1c:dc:ea:96:23:4c:33:
76:5e:e9:69:8f:94:21:01:56:61:6c:a7:3b:99:aa:
6a:f4:82:09:ac:36:85:46:d6:c9:90:6f:7e:2f:ca:
f7:5d:62:55:ea:d9:52:75:74:b8:97:02:71:37:59:
0f:8b:2c:04:67:6f:ac:c3:bb:3b:cd:13:4c:4b:1b:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:6C:55:DA:9B:69:E2:DB:51:54:75:9F:AC:29:0A:2D:37:B1:50
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:2e:7e:9f:3d:4d:5a:15:41:a3:dc:9c:0e:74:f1:d7:9f:
fc:3d:91:63:96:fd:8a:1c:a6:fd:da:4d:87:da:c1:02:ff:e4:
ff:0d:30:a4:9b:c8:47:da:78:62:22:ba:a6:36:62:50:ff:c5:
39:cf:89:5f:49:ce:f4:95:90:95:ba:f6:c8:9d:00:74:0a:31:
4b:c7:29:12:14:f4:1f:10:1e:ff:75:9a:f7:f1:af:66:49:39:
40:84:af:57:f3:15:c5:b0:76:58:1f:d4:58:d0:00:7f:5b:b6:
cb:1f:8c:bf:31:9e:d4:6d:22:bc:27:db:e6:a7:46:7d:55:7a:
f0:07:29:fd:a4:09:41:d5:d8:78:d4:d4:84:c6:90:38:a6:1e:
4c:bf:8b:25:cc:df:26:d3:12:2b:ac:57:00:80:e1:17:be:6e:
66:bd:c0:89:27:f3:8c:06:8b:fe:55:bc:d1:11:c7:4a:e4:94:
5b:46:43:07:5e:74:60:c3:ca:8a:04:b8:e7:35:6e:eb:d8:ed:
c8:b7:bd:59:71:08:dc:67:21:52:d4:78:1e:be:91:13:f0:02:
49:ce:f7:f1:5a:98:81:4b:1d:50:c1:fb:d3:b2:a9:04:b3:5e:
b0:a7:54:53:4e:9d:18:72:a5:5d:5e:20:7c:2f:1e:5e:44:4a:
10:31:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:16 2026 by rpki-client