Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: SnuBw1FDOICKa75llprOqqpu92uQ4TP6qwVfesqG2tM=
Subject key identifier: 95:B8:3C:F1:E4:D7:53:44:E9:0F:E7:0C:BC:27:0E:AD:12:45:51:FA
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 01A0CD112E3878889FA76CBC14531DB8D876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0E81
Signing time: Wed 23 Sep 2026 07:00:50 +0000
Manifest this update: Wed 23 Sep 2026 07:00:50 +0000
Manifest next update: Thu 24 Sep 2026 07:00:50 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: 2MgYotmN/EfSCvf9c2cT8tkRNHBif4eAJeVPjvooxTI=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:2e:38:78:88:9f:a7:6c:bc:14:53:1d:b8:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Sep 23 07:00:50 2026 GMT
Not After : Sep 24 07:00:50 2026 GMT
Subject: CN=95b83cf1e4d75344e90fe70cbc270ead124551fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:bd:20:39:83:cb:19:e1:4f:6b:f8:24:9e:
3c:ad:f4:32:2a:a5:eb:68:ed:5c:9e:fa:41:b5:5e:
f5:e6:6b:2c:96:48:64:f1:1f:6b:1f:ae:a3:8b:1a:
cf:ef:76:0d:88:20:17:1e:33:a0:f3:1b:40:bd:96:
4e:e0:bb:d1:40:f7:75:9d:ad:a4:f2:c0:ed:f7:2f:
6f:27:a5:65:ec:32:31:e9:d6:4f:22:2e:a0:9b:b1:
c4:7f:30:32:21:1b:dd:70:0b:d1:a1:41:f3:f2:53:
6d:26:22:7f:68:be:a9:72:11:d7:34:9a:d0:8e:8f:
1a:d4:ed:07:e8:8d:40:ab:79:8e:71:fd:6e:b4:a9:
c3:d7:59:6c:db:ee:73:ed:d2:54:4e:cc:15:67:c0:
84:4b:9e:44:b7:36:32:92:25:f8:b2:88:9e:02:53:
3c:92:7f:df:03:1d:71:99:37:4d:fd:0f:8b:a7:3c:
ca:af:37:82:37:cc:6d:e5:ca:ee:e9:78:25:1a:a6:
fd:93:18:07:ba:ec:45:bd:8c:e2:36:54:81:82:50:
74:dd:d5:f8:0c:1a:49:90:a8:76:04:75:9d:25:4b:
07:f5:2b:66:8e:b7:85:19:08:02:c8:ec:b4:4d:d9:
8d:22:f9:d3:b1:63:e4:2a:ec:57:3f:34:c0:4f:ca:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:3C:F1:E4:D7:53:44:E9:0F:E7:0C:BC:27:0E:AD:12:45:51:FA
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:56:57:77:13:7e:3f:49:c0:3f:4a:60:61:d1:7d:03:5b:
97:ad:17:8a:04:23:5f:6c:4f:9e:59:9c:91:68:d3:4b:cd:6b:
bc:52:e0:4a:a5:9a:a8:08:33:c5:d7:cb:7e:78:53:7b:27:57:
23:32:e5:1c:8b:19:67:dc:27:3a:f1:dc:73:63:1b:c4:fb:fe:
f7:d4:d2:58:05:36:b5:50:00:01:f9:01:a0:f2:77:6e:a3:ce:
56:1d:3e:e7:99:dc:0d:a8:c0:7c:13:79:b6:e9:f3:8d:f9:90:
0f:8b:b0:78:45:03:d3:30:1f:1b:8c:98:6e:d3:1a:b2:20:10:
e4:11:a2:82:bb:40:22:5e:8e:b5:81:3f:21:ea:03:c2:39:18:
fe:10:7b:e7:93:66:55:8b:a4:2b:08:3a:e5:bc:d9:93:06:37:
fe:62:d8:48:0f:c5:57:94:48:18:f5:27:a9:fd:4e:e1:44:cf:
55:e7:00:8d:53:25:71:02:90:37:58:c6:df:b8:ef:a6:14:72:
e3:4f:bb:2b:a1:da:c5:af:55:ea:19:ad:19:0c:22:d5:76:14:
7d:2a:f4:9a:6c:ec:b5:e0:bc:f7:9c:7a:69:e9:af:8e:e3:47:
a7:8c:58:a4:d8:c7:f8:35:7e:d7:b6:eb:65:3f:82:90:eb:d6:
d6:ad:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:56:12 2026 by rpki-client