Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: Eza41Dn1mwyOfuCbnUxgR3o3lzTD1vWw5JXOFG+BqPg=
Subject key identifier: 07:93:44:5C:04:15:60:F5:F1:21:EA:D9:96:AE:99:0D:8B:C8:18:F9
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019D38D320E81D973BB07A604BFC262C7B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0BE4
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: kQnMnQ7XQNKeJFm5/HnEe/7iTAHZ3LcFoVRvdzzPpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:20:e8:1d:97:3b:b0:7a:60:4b:fc:26:2c:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=0793445c041560f5f121ead996ae990d8bc818f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:c2:6c:db:92:d3:02:b8:3c:e3:92:02:9b:
22:a0:6c:e3:bf:36:c4:c1:d4:ab:e8:f1:41:88:53:
91:1b:44:a5:86:7a:e8:f2:67:c6:c7:b3:1b:ac:0e:
34:d1:cd:9c:3b:14:16:93:cb:da:27:0c:55:7f:4c:
fe:58:84:25:85:47:66:2f:e2:9f:ab:c7:9d:50:60:
e5:dd:43:27:3d:86:03:cb:b7:4f:7c:c0:58:cb:c9:
a9:2d:cb:13:5d:c8:59:ca:65:9b:24:46:4a:96:bb:
43:5a:48:d9:20:b2:89:84:5d:56:3f:e4:80:23:2d:
25:88:d1:15:74:6b:47:6e:55:ce:6e:4d:b7:f9:1b:
0f:2f:07:6a:18:d3:c0:3c:72:78:38:a7:a4:85:68:
82:cd:06:e9:7c:d7:9e:4b:1b:b5:d3:20:27:b9:92:
17:f3:46:bd:ad:ee:d7:31:0e:cf:1a:cc:78:31:e8:
d5:4e:8a:14:47:30:98:3c:f5:a8:c2:10:b4:bc:15:
e4:db:98:23:c2:16:56:2f:4f:93:24:b2:1c:b5:ea:
a3:57:f0:82:04:88:bb:52:c5:49:7f:a9:4a:d5:9c:
50:1c:fe:b1:9e:b0:2b:6b:30:ff:ec:df:1a:4c:86:
d3:6d:52:c1:c6:10:3c:ea:05:74:ff:cc:ac:5d:a5:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:44:5C:04:15:60:F5:F1:21:EA:D9:96:AE:99:0D:8B:C8:18:F9
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:59:0f:6d:b9:a1:5f:1d:cd:ae:96:a8:bc:4d:fd:b3:48:ea:
7e:ab:2d:7b:69:a0:0e:64:23:a9:9c:c1:9d:ac:ca:fe:76:88:
ec:13:9c:eb:be:bb:ae:d9:ae:0d:30:b5:cd:27:34:29:89:66:
c4:30:b7:82:6a:9a:03:2a:f3:c0:21:1d:01:67:30:94:5b:26:
8b:79:84:b7:c1:12:35:3f:42:71:ae:db:7f:e1:bf:7e:5a:dd:
15:54:40:b0:f1:08:f2:0f:2e:c8:7b:a8:44:01:da:06:ed:71:
9b:0f:05:c8:4c:ab:09:47:b4:5a:5c:c5:9e:1a:a7:44:2d:9e:
ea:42:07:b1:f7:9d:ce:6b:4a:7a:30:6c:d3:85:5a:9e:49:e1:
02:95:14:c3:24:34:be:03:e0:48:71:8b:65:b3:c1:42:01:8b:
a9:33:1c:1a:45:63:aa:53:63:4a:f4:bc:d5:a3:d9:3f:36:6f:
b1:dc:94:2b:d4:1a:69:4c:26:4c:b9:c8:96:02:96:f8:0d:17:
e1:2c:1e:cc:2f:5d:e6:09:77:51:af:77:17:de:c3:6b:ff:5a:
64:d3:b3:a8:46:3c:69:80:2f:15:59:de:89:97:73:33:5b:d4:
71:0d:94:51:ca:2f:fd:16:b0:f8:2f:4f:80:e2:8e:60:be:eb:
7f:86:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:36:57 2026 by rpki-client