Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
File: CAj2D5I4oAJLM24y1FaePkwStRU.mft (raw, json)
Hash identifier: /EXIfB9Apkko/v701uXH1obvo0BZtyNMUCqid0VhuFg=
Subject key identifier: F9:14:A8:79:A7:D6:E8:4C:74:F2:0A:70:C7:A2:85:9E:C1:B4:12:D9
Authority key identifier: 08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
Certificate issuer: /CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Certificate serial: 01A0CE9189F7A73338D5E907ABE84FB32FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
Manifest number: F9
Signing time: Wed 23 Sep 2026 14:00:39 +0000
Manifest this update: Wed 23 Sep 2026 14:00:39 +0000
Manifest next update: Thu 24 Sep 2026 14:00:39 +0000
Files and hashes: 1: CAj2D5I4oAJLM24y1FaePkwStRU.crl (hash: Ow2xxkRlJGLVaXJ/buS1yvkX/I1FqXJDa6T/FgwRkCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:89:f7:a7:33:38:d5:e9:07:ab:e8:4f:b3:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Validity
Not Before: Sep 23 14:00:39 2026 GMT
Not After : Sep 24 14:00:39 2026 GMT
Subject: CN=f914a879a7d6e84c74f20a70c7a2859ec1b412d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:7e:40:3d:f2:58:e1:e1:83:70:c3:46:19:
71:51:49:8b:cb:4b:20:82:87:1d:39:79:97:24:6c:
9c:1f:78:91:f2:d9:6f:f5:be:11:d9:9a:4e:21:40:
b5:9c:6f:6f:8e:ff:6f:79:11:ec:07:df:08:4c:53:
c3:0a:9a:33:cc:3c:10:c0:83:44:66:f7:50:7f:bf:
3d:1a:e8:fd:26:37:c7:2a:2c:d1:bf:87:85:98:ef:
7d:0f:ad:c7:22:8d:51:af:80:e0:38:35:f7:fa:1a:
cd:26:8f:1d:5e:2d:a3:ad:eb:8f:0e:c3:67:6b:91:
f2:1d:1f:20:63:8f:5b:7c:64:25:d3:ab:69:3e:34:
87:27:51:29:f8:57:5d:47:eb:16:09:b9:ab:cc:fe:
a1:85:08:6c:f4:7b:63:cc:06:51:89:01:6e:e1:66:
6e:6e:dd:3a:64:91:6c:00:44:8c:78:84:bf:5c:7e:
16:41:c0:d0:61:65:9c:29:3f:3a:93:a1:f7:83:74:
88:f7:17:21:89:b2:04:e0:61:62:ec:b6:41:a8:2f:
ac:a1:dc:95:5a:18:fc:4d:53:47:e6:03:f9:2c:a5:
56:e9:9c:f8:bd:9d:61:ee:91:05:0e:02:37:27:25:
f2:e1:2b:e2:23:0a:ff:95:34:8e:f6:cf:60:57:d6:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:A8:79:A7:D6:E8:4C:74:F2:0A:70:C7:A2:85:9E:C1:B4:12:D9
X509v3 Authority Key Identifier:
keyid:08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c2:46:bb:90:17:5a:95:59:9e:6f:f1:71:0c:15:9e:e5:bf:
89:e7:ba:c0:41:ab:f4:8f:19:a6:3e:37:9f:e9:b5:ce:ab:c8:
82:6f:a1:83:98:1b:a5:21:b2:1a:9a:ef:3e:cb:c5:e7:e1:c8:
6e:03:a5:a5:28:dc:6b:64:27:3f:a6:2e:a8:16:e0:c3:b5:66:
9b:ae:ed:be:11:42:32:47:4d:8b:9d:15:da:3a:70:93:d1:64:
e4:59:8c:c8:30:b8:d3:8d:fa:09:c9:23:5d:eb:a2:48:be:80:
ad:12:da:c8:d0:0b:39:f1:da:32:c8:12:ec:49:c1:89:df:ea:
ab:71:a8:2c:c7:64:1a:31:3a:15:2b:bd:2f:92:26:1d:e8:e3:
b3:5a:37:8c:1f:74:71:a6:a8:2a:2b:bf:0b:46:ca:cb:6b:8d:
c1:73:27:1c:3b:1b:9e:9c:18:b4:83:9e:10:7a:53:1f:43:7f:
87:83:a0:f7:d4:ff:cb:ce:18:5f:d0:7f:59:ba:f0:d6:7d:17:
57:0f:b0:ef:f6:19:c6:16:78:87:cd:bf:e1:5d:ab:1b:a9:59:
13:dc:91:2d:ed:63:80:89:62:c4:07:6d:02:25:bd:73:56:1e:
ae:2b:74:69:3d:30:b5:ab:e6:b5:34:d6:90:de:f1:4d:50:0a:
a4:0e:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:15:10 2026 by rpki-client