Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: U1dbQh3RJWGs4IAEdHel0sH8S6cKouo+McxTzb9Uu+s=
Subject key identifier: 48:B5:8B:61:19:95:7D:D5:56:86:4B:C8:45:8F:93:76:64:A6:C1:1B
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01A0CD47E24EF22612F286A1C3981937EA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1783
Signing time: Wed 23 Sep 2026 08:00:35 +0000
Manifest this update: Wed 23 Sep 2026 08:00:35 +0000
Manifest next update: Thu 24 Sep 2026 08:00:35 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: ZGvgl/7+zyQCgg2fRF41Ni6LN/PluF9Pffm6RtClUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:e2:4e:f2:26:12:f2:86:a1:c3:98:19:37:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Sep 23 08:00:35 2026 GMT
Not After : Sep 24 08:00:35 2026 GMT
Subject: CN=48b58b6119957dd556864bc8458f937664a6c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:0e:d4:15:ff:8f:1d:15:66:64:68:5a:7f:
68:88:f2:e6:4c:cd:60:47:1f:ac:1d:e3:f4:c3:39:
2f:70:5c:6c:6a:12:0c:34:f5:ec:14:3e:6f:59:3c:
d0:1b:9d:cb:9e:21:84:68:dc:68:f4:64:8d:51:27:
ad:e8:d2:8a:f0:1f:e5:02:ae:61:9b:86:95:a1:84:
44:c3:1f:5f:1c:07:bb:5b:66:00:71:4c:e5:6e:8b:
e6:3e:10:4c:ff:78:48:97:d9:d2:0a:dd:d4:07:67:
ef:8f:b8:cc:1e:4c:23:3a:eb:ff:53:ca:48:14:45:
18:62:b4:2d:1a:8d:7d:d5:45:64:2f:7a:7b:49:19:
37:f5:c8:8f:df:9f:8b:f5:21:35:60:06:95:77:6f:
5e:f0:10:cb:74:4c:09:f5:ba:4d:ee:84:fe:45:fa:
95:5f:35:94:56:ce:62:bc:6b:55:0e:bf:eb:11:06:
37:d7:ce:b2:0b:88:36:04:a9:01:eb:1e:86:07:7f:
50:f7:c7:3e:85:e4:ef:57:97:b1:cf:63:ac:77:ec:
d0:20:d0:b9:00:c9:e8:31:a9:9b:25:50:4e:7f:7a:
a3:1a:87:55:70:bd:a7:79:2c:a6:02:cd:98:eb:b9:
c6:22:1c:c6:5e:2c:87:be:fa:57:46:0d:9a:f7:be:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:8B:61:19:95:7D:D5:56:86:4B:C8:45:8F:93:76:64:A6:C1:1B
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:fd:ae:4e:24:6e:5e:ff:77:77:21:52:30:0a:50:2e:3f:
36:0f:01:3e:25:b9:39:98:2d:a9:25:9d:e0:0a:2d:9e:6b:16:
c4:d4:33:c2:37:fd:4b:07:e5:a7:c6:55:69:a2:db:29:47:ef:
c1:42:4e:30:63:70:e6:f6:8b:e7:02:d9:80:38:f8:24:ae:1f:
b4:60:7c:56:7b:28:98:58:19:10:19:eb:b3:3d:5c:c0:5f:24:
f5:a7:ed:cd:ee:f3:d5:af:b4:92:62:73:c1:12:3a:b4:f6:33:
d6:00:6f:55:27:0c:65:73:94:33:8a:a8:d4:56:d3:15:60:6e:
41:8a:05:19:7f:f0:fa:ad:6d:d8:e1:c6:b4:f5:62:ed:ee:b6:
49:ee:0c:06:22:3a:76:b2:fb:a3:4b:92:f8:ef:15:aa:ce:6b:
e5:8c:71:48:e2:59:ec:73:87:fe:bc:0f:98:a7:46:b0:66:df:
62:34:09:01:2b:10:40:77:d8:3d:29:d6:ba:56:e9:ad:bd:c3:
6f:b7:97:8d:26:97:e4:19:c8:79:d5:0e:fc:fb:75:b5:d4:a6:
30:13:9d:2f:2f:fc:de:5b:b2:7c:bc:18:9e:e2:95:c9:9b:4c:
5a:9f:2e:fa:dd:95:9f:9d:f8:e9:a6:6f:6b:d8:22:90:cd:b0:
3e:27:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:44:06 2026 by rpki-client