Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: aTkbnsrF7z4464kpjhJowUjt/lHFc54/s1a6U7j126E=
Subject key identifier: 90:DC:76:E4:E7:A1:D0:F8:49:20:11:16:90:6D:33:97:92:1E:27:7E
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019E3004F8CD4F3FC867AB06C67AA27E9FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0C64
Signing time: Sat 16 May 2026 09:01:32 +0000
Manifest this update: Sat 16 May 2026 09:01:32 +0000
Manifest next update: Sun 17 May 2026 09:01:32 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: Om89A6rn+ouen8lc3VOWs7ae/czzWjRRwLPsi7PajGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f8:cd:4f:3f:c8:67:ab:06:c6:7a:a2:7e:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: May 16 09:01:32 2026 GMT
Not After : May 17 09:01:32 2026 GMT
Subject: CN=90dc76e4e7a1d0f849201116906d3397921e277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:58:62:c9:d2:46:f5:fa:0d:d3:ec:ca:e9:
ef:06:32:cc:0e:ed:e7:f6:8d:a6:95:01:9d:d1:c0:
18:f9:88:a3:06:4a:fa:ae:56:7e:1c:0a:90:e5:47:
92:a4:9c:fa:e5:2b:82:fc:39:81:3c:65:f0:95:c6:
10:f9:af:f2:df:92:14:80:43:9a:fd:76:6c:d5:75:
5d:c7:9d:96:1a:f3:71:58:6b:aa:cd:69:4c:b4:4a:
88:11:6d:e1:71:fc:03:56:33:e7:e1:15:dd:68:3b:
83:8c:21:d6:3f:cd:d1:5c:7c:69:75:97:a1:55:d1:
96:30:49:4e:25:78:6b:b5:99:a8:76:fb:16:93:ca:
10:80:94:54:97:ce:aa:3b:e0:79:e3:c6:f5:6c:60:
85:a0:eb:54:e2:8a:1f:58:f9:11:79:ed:1e:c5:35:
5d:44:ed:14:63:f5:90:52:c6:83:a3:1c:c6:50:4c:
2a:0a:14:3f:84:6c:11:7b:98:bc:0a:11:a2:49:bc:
91:5f:1e:50:d8:19:19:d4:a7:5c:df:e1:68:36:46:
b4:83:99:e6:34:66:c9:66:62:a6:a6:e5:07:a7:36:
77:cd:48:f4:44:ef:d0:6c:ca:f7:22:67:dc:0c:d3:
c1:cc:09:cf:96:c3:63:46:61:5c:f2:e7:39:11:64:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:76:E4:E7:A1:D0:F8:49:20:11:16:90:6D:33:97:92:1E:27:7E
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:c2:34:41:c3:40:e2:98:1c:fc:6a:18:92:8a:87:ff:44:
7c:97:7f:fb:c7:e0:92:6f:87:3a:e5:63:62:c3:70:f7:6a:18:
11:62:27:a7:b8:92:7f:6b:14:8b:62:1c:e3:1a:8b:c5:2c:47:
1a:c5:cc:ca:10:ed:59:b2:c2:95:9d:83:ba:72:cc:1c:38:68:
48:9a:c9:c7:7d:b4:19:2b:32:ca:d3:ce:93:14:37:87:ff:e0:
66:a9:31:2f:d0:2b:19:5d:60:9a:cf:b4:09:3c:b8:5b:d4:65:
64:83:a2:85:72:e6:73:5b:44:8a:47:81:30:39:96:e0:40:44:
90:10:0c:78:a1:c7:5a:ec:92:31:7a:64:a8:96:ee:cc:23:77:
44:35:88:ef:7e:35:c5:5a:c5:a6:a2:da:73:26:67:bc:78:3b:
08:1f:df:52:54:60:10:de:32:60:5c:1a:c4:b8:a4:02:5b:cd:
e3:cf:62:1a:c7:b9:63:dc:fa:ed:9a:19:d4:9f:52:56:e3:23:
91:d4:28:6f:ba:ea:fa:44:f3:dc:c6:79:86:f5:9d:89:9a:a9:
36:38:e0:a1:bd:71:ec:7e:4b:be:11:9c:df:93:78:60:57:d0:
27:58:97:12:4e:6f:85:9c:a1:92:a8:87:ba:ea:f6:67:fa:e3:
54:2d:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:02 2026 by rpki-client