Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: p+KpcLj9rei/ErajhWjJKaaGO6EP8wduUxOfbD5KMt4=
Subject key identifier: 58:8C:B5:E4:58:18:73:1B:CD:5F:12:E1:52:3A:6E:2E:DB:13:65:46
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01A140159C810B11F1EEB8930BEC3FD45569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0DFA
Signing time: Thu 15 Oct 2026 15:02:00 +0000
Manifest this update: Thu 15 Oct 2026 15:02:00 +0000
Manifest next update: Fri 16 Oct 2026 15:02:00 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: oF8edHBSFv38Hf9YaKlM4E6sjkdRHLFq5Z4lZ1u+LW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:9c:81:0b:11:f1:ee:b8:93:0b:ec:3f:d4:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Oct 15 15:02:00 2026 GMT
Not After : Oct 16 15:02:00 2026 GMT
Subject: CN=588cb5e45818731bcd5f12e1523a6e2edb136546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:96:60:c9:23:1b:4c:61:49:14:c0:a8:03:
c9:4f:59:d9:07:c8:ac:32:5a:60:e2:70:87:94:ff:
a8:45:06:5e:47:65:d9:20:87:e1:98:6e:0c:a3:67:
37:b7:7b:56:e9:7d:77:24:0f:74:51:f0:9b:ee:39:
d4:5b:36:3f:8c:10:11:b4:8e:78:08:c9:14:43:b2:
f5:74:6f:81:37:66:6e:0d:5a:2d:00:8e:25:fb:96:
04:fe:3c:4a:93:7a:4e:73:ad:98:52:1e:a5:dd:91:
a5:70:ee:21:09:a8:a1:7c:fa:bb:ad:28:c3:23:0c:
36:e4:0d:ca:9d:c6:aa:8f:72:af:cc:ce:44:24:6b:
c5:f7:fc:08:5f:80:72:5b:a8:b0:8f:b2:88:33:65:
85:0c:bf:22:f5:4f:61:f7:38:42:ad:65:81:ef:0e:
09:db:5d:b5:3d:c8:ce:a5:8d:8e:ef:17:09:3e:9d:
48:0e:bd:9c:aa:d5:16:2c:99:87:56:0d:ef:8e:c7:
fe:39:cf:61:91:51:ad:5c:e3:b6:45:49:03:34:72:
16:4b:e5:a0:9c:f0:7e:49:bf:2d:2d:53:94:9c:da:
37:ef:ca:9a:14:09:79:f4:f4:c6:38:ed:57:66:e4:
ad:41:0f:2e:5e:bb:b2:b2:89:5a:20:c1:f5:32:6c:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8C:B5:E4:58:18:73:1B:CD:5F:12:E1:52:3A:6E:2E:DB:13:65:46
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:94:7e:56:08:97:bd:6d:40:89:b1:1c:dd:1e:5a:4e:03:
39:89:2e:62:ed:2d:54:b2:d5:62:b9:02:8b:33:eb:c0:2b:25:
82:2f:64:e8:08:b8:3d:1c:37:e2:e2:1c:56:e8:5b:57:0a:8e:
a6:21:3c:38:2c:12:44:b4:88:dc:f5:f4:95:63:cb:41:b2:c1:
0f:cf:34:a8:03:cd:b3:93:e6:e1:2d:13:58:e0:95:e9:aa:66:
93:36:e9:18:5a:0b:c9:89:a3:95:88:92:c8:44:60:2a:32:db:
5d:18:a9:5c:cf:dd:7b:fd:16:97:85:e6:79:e9:1b:e8:16:0b:
8b:50:f8:bb:b2:10:84:66:09:2e:b7:3a:9c:47:a5:28:db:44:
bd:85:3c:9d:9b:b8:9c:4b:9a:14:33:64:a5:c8:66:27:1f:62:
1a:53:a2:ef:dd:c9:9a:7b:f7:ea:bb:20:1f:f8:fb:3b:93:e7:
47:3d:5d:4b:73:6c:e9:ae:f1:54:cd:d2:f4:34:ed:82:28:b2:
02:2f:91:bf:25:96:e4:ed:d2:bc:b0:dd:f9:cf:bc:60:45:92:
27:af:cf:96:53:80:b9:e7:db:26:62:7a:93:50:c4:70:97:39:
d2:b5:31:58:47:14:76:49:f0:a9:d5:1d:db:f3:1b:9e:d2:74:
3b:15:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:18 2026 by rpki-client