Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: k0DGNiX92qGujIyq8HxgPtTFODlPCfJywwYA1hALc7I=
Subject key identifier: 3B:FE:74:39:3B:14:88:94:57:15:8D:7E:96:E6:14:A3:2D:00:35:2C
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019D2A72DA3AB0BD625CA90820A4B5119644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 15A1
Signing time: Thu 26 Mar 2026 14:01:03 +0000
Manifest this update: Thu 26 Mar 2026 14:01:03 +0000
Manifest next update: Fri 27 Mar 2026 14:01:03 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: CwD08tm1ZMp4WrnP9KdVSDTBI0EcGOJRzw2W9Go2gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:da:3a:b0:bd:62:5c:a9:08:20:a4:b5:11:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Mar 26 14:01:03 2026 GMT
Not After : Mar 27 14:01:03 2026 GMT
Subject: CN=3bfe74393b14889457158d7e96e614a32d00352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:d2:9f:13:65:d0:7c:a6:90:2f:92:ae:c9:
33:df:2a:22:15:e2:9d:4e:91:00:ab:2d:b5:7b:dc:
c7:6e:a9:e0:32:74:87:ce:54:16:44:42:62:74:28:
75:d8:93:80:ea:3a:45:32:b7:9b:de:04:21:b4:b2:
54:cd:9a:55:21:70:a2:52:0e:04:ef:b0:f0:70:c7:
1b:b0:0a:41:95:1d:ca:e6:3f:b8:30:46:ae:7a:56:
53:8c:80:3c:a8:ca:94:ba:eb:a3:99:79:eb:a6:42:
1b:f4:ac:7b:c3:da:61:33:42:84:b4:ac:69:f4:e9:
7e:37:84:8c:37:e2:b0:2e:ed:16:32:9e:27:9d:4e:
29:39:8b:04:2a:82:21:42:8e:7c:b0:16:f9:20:2a:
a8:8d:8d:37:c6:64:15:16:d2:aa:5d:61:0c:22:bf:
7b:3b:e6:06:69:1f:90:3b:7b:35:f5:77:bf:e8:9c:
c0:82:01:cf:e8:33:dc:8d:87:d9:d1:4c:72:e1:59:
0c:53:90:9b:69:14:81:09:52:b9:cd:7b:b1:4d:42:
43:31:2e:bf:4a:0f:fa:b5:61:e6:6a:40:19:fd:43:
5d:12:01:16:ec:b2:93:c9:36:5b:39:df:8a:fd:0c:
98:e9:8b:c9:38:fb:84:bd:99:44:cd:62:2c:35:48:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:74:39:3B:14:88:94:57:15:8D:7E:96:E6:14:A3:2D:00:35:2C
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:8d:6a:21:b5:39:ad:2f:b1:73:bf:8c:88:ec:1a:89:33:
52:f3:69:1e:19:a3:90:e5:c6:eb:3b:37:2c:7f:48:60:07:75:
b7:2e:5d:f1:3d:a0:4f:1d:08:c0:04:87:2b:cb:10:ef:96:ca:
ad:e2:1a:1c:54:5d:ae:1b:36:0e:68:10:b8:3a:3b:c7:08:73:
1c:40:46:7d:51:3b:cb:5c:33:b9:02:ae:d9:9d:53:a6:62:2b:
c2:f4:0c:a7:3f:2b:4b:e9:4c:3d:2b:14:14:14:e3:4c:29:23:
b4:b3:b9:ec:2c:4d:44:60:e1:90:e4:78:4a:36:f5:c5:f9:6e:
6a:36:01:65:dc:bc:fb:55:b4:ca:46:8d:ac:63:75:df:76:2c:
3b:5c:cb:f7:65:2e:83:db:7d:0d:e2:99:27:65:a0:bb:3c:dc:
81:c3:40:6b:98:8e:b5:78:5f:e1:50:78:9f:b4:b0:fd:a3:4d:
68:d3:30:ff:ec:00:79:18:d7:ed:64:07:8b:04:f1:07:40:1d:
87:72:24:81:23:2a:5e:5c:0e:bf:8c:5f:e7:78:86:8d:6d:8c:
c3:5f:c9:2b:ae:85:ab:08:20:5e:a7:c8:29:21:7a:97:74:cb:
fb:e0:56:24:5f:81:e3:92:9e:58:2e:03:6a:fe:db:67:13:11:
c1:74:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:40 2026 by rpki-client