Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: tVeCkaT04Fr1OPaQG5GHBTL4GoMzW/BYN/oAsrEw668=
Subject key identifier: 74:E0:67:B1:A2:C2:EE:C1:73:20:1D:66:29:B0:12:6C:E5:F7:B7:D0
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019D265F191C37122B02E39D44A92CD55700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0C9D
Signing time: Wed 25 Mar 2026 19:00:59 +0000
Manifest this update: Wed 25 Mar 2026 19:00:59 +0000
Manifest next update: Thu 26 Mar 2026 19:00:59 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: JL2SFD4uIsX2jrbxLp0ZDVINwdqwTJD/qT33TlVNDNc=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:19:1c:37:12:2b:02:e3:9d:44:a9:2c:d5:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Mar 25 19:00:59 2026 GMT
Not After : Mar 26 19:00:59 2026 GMT
Subject: CN=74e067b1a2c2eec173201d6629b0126ce5f7b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:7d:61:ee:45:14:e1:e5:2c:1f:d5:5c:06:
59:e3:b5:aa:be:0c:61:96:39:bf:b7:8f:62:f8:14:
81:f6:e8:fa:f1:df:9c:e5:40:33:72:d6:06:53:43:
c9:2b:81:07:4f:ce:d8:da:a4:2f:bb:3e:5d:c1:6a:
51:c4:e4:d5:10:3b:47:bd:5a:29:eb:bd:67:b6:fe:
e2:2b:84:dd:60:51:82:a0:42:87:80:8a:8a:f6:a6:
be:e5:3b:6e:e3:c5:3c:36:86:1a:6c:0a:25:12:98:
0c:7d:13:d3:30:51:95:3f:1f:e4:48:2a:1a:c4:c7:
96:77:cd:de:84:94:d5:e2:25:eb:fb:1e:af:93:dc:
da:81:67:3e:af:f5:c3:f7:f6:42:5f:e8:11:3d:94:
c7:5a:b1:6a:22:47:b6:fd:b8:ce:f8:c1:78:c1:ca:
b6:e2:d2:e9:e4:61:d7:50:59:62:e3:e9:f1:8a:eb:
8a:77:43:b9:e3:70:31:09:74:64:d8:1a:f6:5c:6c:
e7:d3:4b:35:f7:f2:b3:83:27:46:66:0c:6e:20:d1:
18:fd:98:ad:ec:88:e3:cb:b5:69:e0:03:68:4b:58:
85:bb:2c:00:b8:9e:91:a9:cd:f1:1c:4c:16:0a:ad:
2b:cf:26:0a:7d:ab:ea:fb:79:b0:d4:17:e0:8b:3f:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:67:B1:A2:C2:EE:C1:73:20:1D:66:29:B0:12:6C:E5:F7:B7:D0
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:d3:7a:8c:99:19:3f:20:e8:2a:b6:48:d9:1e:1b:62:06:
45:21:ce:f9:31:f6:55:c7:f3:46:74:84:c1:62:73:db:fe:72:
92:1d:a6:cc:d7:7a:85:13:dc:78:1c:18:67:12:38:47:e1:62:
23:1b:08:56:65:6b:15:20:e7:2d:70:ce:9d:46:6e:ba:70:67:
be:d2:2f:2c:cb:19:32:e1:d2:60:84:62:f2:5e:7c:1d:58:e8:
4d:ee:da:59:d1:33:82:9b:7a:71:a0:f3:b3:98:55:a6:9c:57:
a7:4b:b5:c5:c9:46:f1:98:05:ba:8a:95:82:b6:7a:2e:80:f9:
8a:f3:3b:1b:68:dc:c3:86:f2:ab:ae:43:c6:21:5b:ad:14:bc:
35:f0:66:98:3c:44:4f:73:45:f6:8c:5a:98:d6:d2:51:84:9f:
00:8d:77:73:5a:e4:8d:94:b7:3c:71:3f:b2:28:e7:a9:c3:5c:
af:88:fb:f7:36:b6:e3:50:9d:95:78:98:57:15:d7:27:b9:25:
61:f0:03:34:a7:20:0a:cf:2a:1f:62:4a:a0:40:7c:18:55:30:
cd:93:f5:2f:e1:bf:c7:b3:47:e8:cc:b1:e7:04:59:79:02:f6:
95:78:66:bf:4e:b5:73:fa:36:2e:d6:1c:c2:4b:63:12:aa:99:
74:0f:ea:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxkcNxIrAuOdRKks1VcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm
OTdhMjEwHhcNMjYwMzI1MTkwMDU5WhcNMjYwMzI2MTkwMDU5WjAzMTEwLwYDVQQD
Eyg3NGUwNjdiMWEyYzJlZWMxNzMyMDFkNjYyOWIwMTI2Y2U1ZjdiN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNJ9Ye5FFOHlLB/VXAZZ47Wqvgxh
ljm/t49i+BSB9uj68d+c5UAzctYGU0PJK4EHT87Y2qQvuz5dwWpRxOTVEDtHvVop
671ntv7iK4TdYFGCoEKHgIqK9qa+5Ttu48U8NoYabAolEpgMfRPTMFGVPx/kSCoa
xMeWd83ehJTV4iXr+x6vk9zagWc+r/XD9/ZCX+gRPZTHWrFqIke2/bjO+MF4wcq2
4tLp5GHXUFli4+nxiuuKd0O543AxCXRk2Br2XGzn00s19/KzgydGZgxuINEY/Zit
7Ijjy7Vp4ANoS1iFuywAuJ6Rqc3xHEwWCq0rzyYKfavq+3mw1Bfgiz/XWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTgZ7Giwu7BcyAdZimwEmzl97fQMB8GA1UdIwQY
MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt
ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1
LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVTTeoyZ
GT8g6Cq2SNkeG2IGRSHO+TH2VcfzRnSEwWJz2/5ykh2mzNd6hRPceBwYZxI4R+Fi
IxsIVmVrFSDnLXDOnUZuunBnvtIvLMsZMuHSYIRi8l58HVjoTe7aWdEzgpt6caDz
s5hVppxXp0u1xclG8ZgFuoqVgrZ6LoD5ivM7G2jcw4byq65DxiFbrRS8NfBmmDxE
T3NF9oxamNbSUYSfAI13c1rkjZS3PHE/sijnqcNcr4j79za241CdlXiYVxXXJ7kl
YfADNKcgCs8qH2JKoEB8GFUwzZP1L+G/x7NH6Myx5wRZeQL2lXhmv061c/o2LtYc
wktjEqqZdA/qdA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:55 2026 by rpki-client