Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: 0WrKufI0qp9x5w8SqqsmOhBDQ2MhX7DRlKnifz1nHyE=
Subject key identifier: 11:B3:80:42:73:7E:C3:1C:5E:49:2E:3F:F2:8C:AA:69:D8:30:13:EC
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01A0016F77E10A2C478274B261D897B9CB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0D55
Signing time: Fri 14 Aug 2026 18:01:17 +0000
Manifest this update: Fri 14 Aug 2026 18:01:17 +0000
Manifest next update: Sat 15 Aug 2026 18:01:17 +0000
Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: TQC+D2sRa1G3SwkeeKtZCNex49di15NxO14abAXkAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:77:e1:0a:2c:47:82:74:b2:61:d8:97:b9:cb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Aug 14 18:01:17 2026 GMT
Not After : Aug 15 18:01:17 2026 GMT
Subject: CN=11b38042737ec31c5e492e3ff28caa69d83013ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:34:e8:d2:15:4d:9b:2e:9f:5f:b4:3b:97:
ee:ee:eb:63:8f:1f:82:1b:b8:be:3b:14:36:0c:78:
fe:47:54:ff:af:a0:01:fa:d8:c2:85:19:06:84:c7:
99:56:38:49:8e:37:22:43:31:14:71:63:8b:cc:52:
d7:a6:de:5f:cc:3c:a9:53:70:cf:e8:07:5e:e9:ac:
16:5b:55:51:64:7b:e0:09:05:b9:3e:ba:80:ea:44:
60:2b:19:e4:dd:8a:bd:47:5a:4c:fd:7d:59:66:06:
02:f8:ce:ff:ac:38:c9:bd:04:c0:4f:60:11:92:0e:
0e:ce:ef:f7:36:96:2b:eb:b1:ef:04:60:9d:8c:74:
75:46:a7:9b:a5:73:84:f6:a7:c1:97:87:2f:69:83:
a8:4d:c0:5c:a7:80:09:15:04:85:cf:ec:a7:eb:57:
cd:06:c0:e4:de:25:29:65:fa:6c:66:d2:98:25:e5:
9d:7f:5e:be:70:47:c7:d7:8c:0b:47:5d:b6:8f:db:
33:15:df:5b:b7:16:85:c0:93:0a:ef:2a:65:53:c0:
20:03:d6:a4:f0:b2:23:2e:e0:40:7d:43:5f:4e:5f:
02:19:14:16:0e:df:29:3d:f0:24:d1:2d:88:de:4f:
86:7f:cb:7c:6b:d2:bc:bc:50:83:77:77:13:aa:c3:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:80:42:73:7E:C3:1C:5E:49:2E:3F:F2:8C:AA:69:D8:30:13:EC
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:c0:01:a3:80:8c:d8:43:46:31:bf:8e:b2:82:10:1d:8a:
56:50:00:48:06:05:91:44:b0:e9:8f:5f:cd:4b:d9:e0:8b:d6:
ac:3c:ab:90:ee:e7:15:c1:24:be:fa:8f:bd:c0:64:e2:37:23:
e9:32:d2:0a:b0:9e:32:ae:1f:dc:d7:75:c4:7b:91:40:64:5f:
fb:2d:6b:d5:54:b9:62:83:b9:d4:19:c0:08:39:eb:24:b7:a4:
e6:f5:b9:a2:eb:3a:8e:71:af:e0:ee:7e:44:66:f2:3b:1c:fe:
5a:f6:a6:2e:43:f5:07:68:19:61:4e:69:67:dd:5b:87:3a:20:
5a:5d:20:fb:45:87:9c:87:8d:d8:1c:bc:9c:06:39:1a:1d:a0:
01:97:34:7e:39:8c:3c:73:32:98:b1:03:1c:3f:28:cb:49:2e:
02:11:5e:8f:84:c1:5b:78:ff:5e:d9:a1:c2:f4:65:a3:2e:08:
59:df:79:00:9f:3c:82:f3:e5:86:84:ea:72:90:f4:a2:54:6c:
1a:f7:3f:63:98:54:fd:b1:6c:7b:e9:f0:f5:d5:bc:a2:9b:bc:
69:5c:69:25:11:b8:af:aa:e4:29:24:ed:aa:58:3a:99:17:85:
d6:d7:f8:b8:54:d7:7a:27:02:7c:5b:7f:44:17:51:36:3d:20:
d5:db:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:44 2026 by rpki-client