Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: BE3+dIdLZbMXgIFQsqnvdJpFOkmNw/WdnFKQ5nUDj6Q=
Subject key identifier: 58:87:C2:D2:FC:8E:18:05:56:7C:36:C4:F8:D3:9D:2D:CA:B0:42:A1
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019F927FD1969FD6D950235C572BE387E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 16E0
Signing time: Fri 24 Jul 2026 05:01:17 +0000
Manifest this update: Fri 24 Jul 2026 05:01:17 +0000
Manifest next update: Sat 25 Jul 2026 05:01:17 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: NtA2T3zFJfa6PzmeQrM1cTINds+njOl5Ah6QkcyA6aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:d1:96:9f:d6:d9:50:23:5c:57:2b:e3:87:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jul 24 05:01:17 2026 GMT
Not After : Jul 25 05:01:17 2026 GMT
Subject: CN=5887c2d2fc8e1805567c36c4f8d39d2dcab042a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:88:f8:6f:87:06:07:91:b7:aa:e5:4a:ad:
f9:09:1f:df:77:92:8e:c6:e5:fd:42:d7:66:56:34:
57:2d:fe:7d:45:64:4b:31:39:80:bb:51:9f:9a:84:
5a:fc:fb:4d:e0:75:50:ab:b3:3e:93:ff:30:ba:4d:
3c:94:73:8a:dd:59:5b:41:1b:2a:f7:f9:e5:5f:c3:
bd:49:61:c7:85:83:0f:4c:1c:84:ad:ec:b9:8f:d2:
f0:c0:71:4b:9c:55:6c:b4:34:e4:b0:86:2e:6b:59:
62:a1:33:0a:bc:42:e4:2d:c7:98:41:70:97:16:07:
4b:dd:db:fd:e8:ab:11:8a:da:5a:97:d7:75:ad:41:
9b:b4:94:5b:a0:a8:ae:aa:9c:69:0b:ff:87:5a:cc:
9a:54:99:43:5a:f3:52:16:16:6c:0a:69:b2:e7:f1:
8c:f4:c9:dc:bf:bf:ec:51:63:10:75:32:6d:0b:cf:
87:88:64:a0:3d:d0:a4:09:02:ce:5f:49:cc:81:47:
b2:a5:96:49:b1:54:ba:1f:fa:9e:d1:6e:cc:74:70:
3b:f5:10:66:eb:2d:42:ec:da:df:d9:e3:fb:05:08:
c1:dc:65:0c:66:00:3d:04:45:4d:b9:a8:d9:d5:dd:
ce:8e:95:e3:07:a4:d9:89:60:4d:8d:2a:59:44:3b:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:C2:D2:FC:8E:18:05:56:7C:36:C4:F8:D3:9D:2D:CA:B0:42:A1
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:d4:6a:d7:46:f5:53:f0:77:c9:eb:b6:48:de:9b:71:c1:
2f:9f:3a:82:85:14:e0:9f:04:bb:48:e3:18:c7:99:2b:78:e5:
19:60:a5:2f:c7:e2:52:ee:a0:dd:4d:5b:f9:e6:91:33:09:eb:
1d:01:7a:c2:a7:65:dd:5e:5e:7f:45:bc:c9:92:65:da:d2:9d:
d8:ef:bd:01:ac:8b:1f:d5:ce:30:4e:02:73:45:f7:3f:01:9c:
68:dc:e9:a2:2e:3e:47:91:1f:34:94:ac:c2:b1:b1:6b:95:06:
29:78:44:b9:7c:c8:cf:83:2c:c2:85:81:2c:7e:a0:7c:22:ee:
e3:4b:07:a9:17:aa:0c:78:70:07:9b:53:fa:c8:b9:2b:0d:a4:
e0:ed:40:15:5d:a5:98:6f:40:5b:da:98:8c:c2:fb:6b:d2:40:
02:cb:b6:e8:6a:95:2b:23:86:0a:8e:13:7f:d6:ef:99:7d:a4:
88:fc:53:14:d5:d9:af:f9:bd:69:49:da:fc:d5:6b:11:36:58:
42:33:65:cb:48:73:e1:37:07:97:20:27:03:9a:a4:8c:35:95:
f9:3c:de:fe:aa:97:fb:f3:70:d0:e4:c1:65:fc:e4:41:3b:e9:
75:cc:6a:28:2d:99:31:fe:f1:e9:3f:4f:a9:8f:9c:70:3e:eb:
f1:d0:c5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf9GWn9bZUCNcVyvjh+OsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDkyZDI3NDc4MTQzYzZhZTM5MDVjNDdmNTg0N2RmOWMw
MmY0MTMwHhcNMjYwNzI0MDUwMTE3WhcNMjYwNzI1MDUwMTE3WjAzMTEwLwYDVQQD
Eyg1ODg3YzJkMmZjOGUxODA1NTY3YzM2YzRmOGQzOWQyZGNhYjA0MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8aI+G+HBgeRt6rlSq35CR/fd5KO
xuX9QtdmVjRXLf59RWRLMTmAu1GfmoRa/PtN4HVQq7M+k/8wuk08lHOK3VlbQRsq
9/nlX8O9SWHHhYMPTByErey5j9LwwHFLnFVstDTksIYua1lioTMKvELkLceYQXCX
FgdL3dv96KsRitpal9d1rUGbtJRboKiuqpxpC/+HWsyaVJlDWvNSFhZsCmmy5/GM
9Mncv7/sUWMQdTJtC8+HiGSgPdCkCQLOX0nMgUeypZZJsVS6H/qe0W7MdHA79RBm
6y1C7Nrf2eP7BQjB3GUMZgA9BEVNuajZ1d3OjpXjB6TZiWBNjSpZRDvvzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiHwtL8jhgFVnw2xPjTnS3KsEKhMB8GA1UdIwQY
MBaAFAgJLSdHgUPGrjkFxH9YR9+cAvQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWIt
OTRjZjNhMzViZjhjLzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWItOTRjZjNhMzViZjhj
LzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw7UatdG
9VPwd8nrtkjem3HBL586goUU4J8Eu0jjGMeZK3jlGWClL8fiUu6g3U1b+eaRMwnr
HQF6wqdl3V5ef0W8yZJl2tKd2O+9AayLH9XOME4Cc0X3PwGcaNzpoi4+R5EfNJSs
wrGxa5UGKXhEuXzIz4MswoWBLH6gfCLu40sHqReqDHhwB5tT+si5Kw2k4O1AFV2l
mG9AW9qYjML7a9JAAsu26GqVKyOGCo4Tf9bvmX2kiPxTFNXZr/m9aUna/NVrETZY
QjNly0hz4TcHlyAnA5qkjDWV+Tze/qqX+/Nw0OTBZfzkQTvpdcxqKC2ZMf7x6T9P
qY+ccD7r8dDFAg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:51 2026 by rpki-client