Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: fS5VQs9LzZPZ8Osmnf7hZGuGsGlwGAMwydH4KaY0738=
Subject key identifier: D6:16:3A:F1:58:0F:CB:02:A7:5A:9F:76:5F:00:06:E3:3C:7A:E9:0B
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019E1D901971590577E3B200F5C0AB3FFD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0D1D
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: xXIwqL3WkN5HfDoOvqvKLkBgRAJa8AJDUjr7efs0LCk=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:19:71:59:05:77:e3:b2:00:f5:c0:ab:3f:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=d6163af1580fcb02a75a9f765f0006e33c7ae90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:1c:07:69:91:b4:8f:ae:bf:e4:1f:c7:b4:
94:a4:67:ec:74:9e:e6:3a:de:2a:73:53:b0:00:e2:
a3:b5:2b:c8:90:48:78:6b:c3:26:59:3b:27:93:39:
fe:7c:3a:54:b2:3d:77:7f:fa:ac:07:7b:57:4d:c2:
03:f3:22:82:50:84:f0:0c:db:5b:f4:ea:24:de:d2:
18:15:2b:5c:9b:22:7c:b7:5a:fb:58:9d:e3:56:52:
28:38:20:16:36:fd:d0:6f:c0:e0:5b:8f:5a:71:fc:
54:91:96:49:c6:9b:41:69:2d:26:3c:de:b1:ff:85:
00:f8:96:54:ed:c4:91:6f:3b:9a:f3:75:1c:9b:b6:
73:95:c6:d3:c9:2e:5f:fb:ef:06:7e:64:80:81:be:
a2:ad:c4:9c:63:fc:c1:e2:51:83:44:13:2d:3a:09:
f7:f1:0a:4f:c5:19:b0:e2:23:7f:d5:90:83:4c:e9:
d4:8d:7b:9b:e9:dc:34:86:63:70:6d:b4:9f:bb:fc:
e9:2b:f2:dd:6c:7b:12:d4:8a:71:79:c5:f5:c4:75:
60:e4:82:1d:1e:b5:57:7a:e9:41:b2:00:ee:e2:09:
ee:e1:dc:b4:ac:7c:a9:78:d0:37:ae:69:60:ab:dc:
38:ee:e3:a4:96:5d:06:2c:f9:08:e2:fc:01:1d:fa:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:3A:F1:58:0F:CB:02:A7:5A:9F:76:5F:00:06:E3:3C:7A:E9:0B
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c8:77:8d:e2:13:85:07:a0:e0:a0:ad:8f:0d:76:41:bd:bf:
79:01:b9:37:21:28:5e:ec:e8:2f:d1:fc:20:cd:81:ac:db:59:
6d:2b:57:66:41:66:fa:c5:c1:22:35:94:24:5e:74:a4:5f:ff:
24:29:a4:39:d3:23:2e:49:15:77:56:7c:71:cf:50:d4:d2:a5:
9f:b7:80:1b:b5:4b:00:ba:b1:ed:c7:14:a6:b5:41:0d:42:9f:
37:2d:ec:aa:14:c5:f9:ed:70:86:87:da:6d:4b:f4:c4:f6:76:
4f:ec:02:ba:d6:75:62:43:02:f7:f5:1c:77:9f:c5:5c:8f:33:
c5:f7:2a:ae:85:20:2e:17:45:8d:2c:9a:83:3f:43:21:2b:6c:
6d:bd:32:ac:6d:9f:3c:71:bc:2f:52:9d:80:85:ea:2f:52:c4:
6e:1f:21:63:64:6b:38:fc:a5:ad:b0:be:50:d5:e1:37:5c:2e:
57:d0:39:fe:72:45:7f:4d:60:f7:47:e0:d8:75:c3:d3:54:29:
4e:66:cb:f5:e0:00:60:e1:7f:cb:23:91:86:72:af:d2:a9:c8:
c3:c6:9f:b5:e1:83:81:7a:98:21:1d:b8:fb:01:98:b7:52:5a:
6f:0d:ca:52:95:46:ac:33:7c:4f:6d:f2:83:c1:5c:65:e4:17:
5e:62:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:06 2026 by rpki-client