Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: HDVMnf0E6CbeaY4kmPQ5VBIuJmo08pdIpic1Rfm7tkY=
Subject key identifier: 76:6D:DB:99:07:0D:0C:13:C1:1B:20:25:D5:D8:A1:1B:35:DC:7D:4A
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019F17C2D4A9ACB4F88859CBB6E583BFB13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0CDC
Signing time: Tue 30 Jun 2026 09:01:12 +0000
Manifest this update: Tue 30 Jun 2026 09:01:12 +0000
Manifest next update: Wed 01 Jul 2026 09:01:12 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: euOztFLnD6JcQ4I0HkBJe3/GemJ++1SqyWoJX8RIuSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d4:a9:ac:b4:f8:88:59:cb:b6:e5:83:bf:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jun 30 09:01:12 2026 GMT
Not After : Jul 1 09:01:12 2026 GMT
Subject: CN=766ddb99070d0c13c11b2025d5d8a11b35dc7d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:49:1c:b0:44:49:2f:2f:eb:48:ea:f2:93:
16:75:8f:3c:ec:7b:3c:8f:c7:30:a7:a7:bf:af:fb:
3a:7c:44:68:c2:85:15:f6:e8:7a:99:1c:ce:9b:a0:
ed:17:1f:8c:0a:a6:0d:42:0b:3d:ab:8e:45:48:ed:
3f:80:27:a2:1e:a5:a6:19:71:55:08:48:90:a3:f1:
38:ef:e5:f0:cb:4c:c1:58:e4:e9:d6:f2:f8:6a:a4:
a2:5b:6d:1c:a7:6d:6c:73:d1:f2:01:37:17:5b:ff:
d3:25:b4:71:6d:fa:83:9d:10:d8:e4:6d:40:f0:fd:
eb:5e:86:7d:e1:f6:9b:49:77:07:c1:90:a6:83:c4:
58:38:8b:e6:68:25:93:ab:61:25:b6:b6:ad:e0:7f:
53:fb:ef:af:78:21:24:63:28:45:b4:bc:77:a7:2e:
ce:01:42:c8:9a:3f:73:35:34:aa:d5:f5:57:f5:98:
9b:aa:83:01:33:e2:61:a3:84:63:e7:03:8b:a5:ac:
76:fd:dc:b1:86:d2:33:6a:d7:5d:f1:c2:c5:89:73:
b5:5d:bb:24:e3:eb:9a:e2:0f:f3:a1:37:40:36:91:
67:84:45:eb:13:ca:42:a7:2a:f1:4b:32:0f:0f:31:
ff:2b:66:37:93:0d:8a:00:19:e0:54:80:b0:23:fc:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:DB:99:07:0D:0C:13:C1:1B:20:25:D5:D8:A1:1B:35:DC:7D:4A
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a1:46:1b:98:64:e3:43:77:6f:4e:50:92:36:70:15:6f:cc:
bf:cc:82:47:5b:85:bb:62:19:f6:b4:21:bd:bd:dd:0b:e4:94:
0f:45:29:91:14:ff:5c:e8:ee:0a:d4:16:25:d6:a3:e1:89:52:
36:9e:48:92:49:0e:70:7a:c3:2e:e3:49:83:69:9f:c1:e6:9d:
d5:01:7f:91:a8:27:d8:db:fe:a6:16:a7:49:cc:83:69:cf:23:
fc:50:d2:05:a2:af:89:0b:2b:37:23:85:bb:f0:43:c9:db:52:
05:09:ad:76:eb:bd:1b:28:2e:1a:cc:66:5b:c9:c0:7b:b7:f6:
fc:ce:e7:02:b8:b6:6d:c3:28:55:50:2e:4e:62:56:59:9f:5d:
67:c1:92:e6:e9:29:97:3e:49:bb:65:7d:d8:99:32:a3:10:9f:
5c:f5:98:8f:e2:2e:c7:18:ee:06:36:f2:c9:2e:d0:78:b6:d8:
f5:9e:3e:da:9b:07:09:fd:6f:68:40:62:d3:8d:1a:52:c6:17:
e3:66:f5:03:d0:15:22:b3:cf:7f:89:70:80:2e:7e:74:36:b0:
0a:75:72:57:21:fb:4f:6e:c6:6c:2e:b8:d2:35:9e:ef:70:c1:
ac:a5:43:aa:fe:8b:9b:29:9e:19:e8:72:67:3b:a4:30:a4:e4:
b9:52:d5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwtSprLT4iFnLtuWDv7E8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl
YzZhOGUwHhcNMjYwNjMwMDkwMTEyWhcNMjYwNzAxMDkwMTEyWjAzMTEwLwYDVQQD
Eyg3NjZkZGI5OTA3MGQwYzEzYzExYjIwMjVkNWQ4YTExYjM1ZGM3ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U1JHLBESS8v60jq8pMWdY887Hs8
j8cwp6e/r/s6fERowoUV9uh6mRzOm6DtFx+MCqYNQgs9q45FSO0/gCeiHqWmGXFV
CEiQo/E47+Xwy0zBWOTp1vL4aqSiW20cp21sc9HyATcXW//TJbRxbfqDnRDY5G1A
8P3rXoZ94fabSXcHwZCmg8RYOIvmaCWTq2Eltrat4H9T+++veCEkYyhFtLx3py7O
AULImj9zNTSq1fVX9ZibqoMBM+Jho4Rj5wOLpax2/dyxhtIzatdd8cLFiXO1Xbsk
4+ua4g/zoTdANpFnhEXrE8pCpyrxSzIPDzH/K2Y3kw2KABngVICwI/zldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZt25kHDQwTwRsgJdXYoRs13H1KMB8GA1UdIwQY
MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt
OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk
LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqFGG5hk
40N3b05QkjZwFW/Mv8yCR1uFu2IZ9rQhvb3dC+SUD0UpkRT/XOjuCtQWJdaj4YlS
Np5IkkkOcHrDLuNJg2mfwead1QF/kagn2Nv+phanScyDac8j/FDSBaKviQsrNyOF
u/BDydtSBQmtduu9GyguGsxmW8nAe7f2/M7nAri2bcMoVVAuTmJWWZ9dZ8GS5ukp
lz5Ju2V92JkyoxCfXPWYj+IuxxjuBjbyyS7QeLbY9Z4+2psHCf1vaEBi040aUsYX
42b1A9AVIrPPf4lwgC5+dDawCnVyVyH7T27GbC640jWe73DBrKVDqv6LmymeGehy
ZzukMKTkuVLVLQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:44 2026 by rpki-client