Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
File: CAj2D5I4oAJLM24y1FaePkwStRU.mft (raw, json)
Hash identifier: qQHvVjkb4GpXyHtJMkuelYRsBtthxfBRUWvmwnOA7zY=
Subject key identifier: 46:F4:00:80:B0:F4:C2:00:B0:22:57:39:BA:A4:F4:2D:92:A6:4F:27
Authority key identifier: 08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
Certificate issuer: /CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Certificate serial: 01A03FA91C8008DE961D23CAF1E2D58C9611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
Manifest number: AF
Signing time: Wed 26 Aug 2026 20:00:42 +0000
Manifest this update: Wed 26 Aug 2026 20:00:42 +0000
Manifest next update: Thu 27 Aug 2026 20:00:42 +0000
Files and hashes: 1: CAj2D5I4oAJLM24y1FaePkwStRU.crl (hash: XlI9RXCLQtdqG4rV+a5GN1RgkcnjWaKj/y3WPYd0s5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:1c:80:08:de:96:1d:23:ca:f1:e2:d5:8c:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Validity
Not Before: Aug 26 20:00:42 2026 GMT
Not After : Aug 27 20:00:42 2026 GMT
Subject: CN=46f40080b0f4c200b0225739baa4f42d92a64f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:8b:bc:59:b8:f3:02:c5:a4:ca:5d:bc:8e:
c9:d1:21:ea:95:40:3b:45:d4:69:38:46:bc:39:8e:
1a:1c:91:4c:0c:21:b2:fd:72:3b:b3:6f:36:3a:0e:
a9:f8:9e:72:aa:39:86:2e:81:99:31:11:a1:c1:a3:
71:0b:d8:f5:ed:3e:dd:ae:3e:d2:e7:7e:89:bb:7f:
6a:7b:67:a9:c0:9b:82:74:23:0d:fc:32:cb:31:62:
ec:f1:20:5d:a0:14:2b:1c:07:b5:60:68:5c:59:90:
da:fd:a4:bb:36:78:58:4a:3f:87:e9:01:6d:5a:b6:
a7:b7:c4:a9:64:14:4f:14:07:d5:c4:28:77:17:a1:
ec:f8:c5:83:0b:76:95:7c:76:45:35:ac:6d:c1:0e:
f3:d8:34:a2:07:e9:2f:9d:24:21:62:a1:63:5f:39:
63:18:f5:d2:97:20:87:4a:18:4f:8a:9a:f1:7c:fd:
f6:ba:c8:c8:4f:e9:80:db:a8:17:bf:50:7f:7b:05:
9a:a9:87:3e:4e:2c:92:97:80:58:f0:d7:de:d4:71:
20:a9:ea:18:bc:59:44:37:98:15:ec:cd:83:f1:b8:
4f:03:0f:80:16:bb:ff:ee:b1:15:ca:33:e0:de:20:
54:cd:5f:08:b3:8c:23:eb:38:a7:a0:13:69:61:61:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:00:80:B0:F4:C2:00:B0:22:57:39:BA:A4:F4:2D:92:A6:4F:27
X509v3 Authority Key Identifier:
keyid:08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:51:fe:b4:b8:6b:b2:4f:19:57:8d:9a:7d:9b:4c:b8:04:7d:
78:74:b1:c9:2e:1b:61:5a:eb:b6:ad:68:ee:ca:61:12:ae:07:
d5:84:d0:8f:b1:02:42:d5:6d:15:f9:3b:8a:22:c1:c6:67:b6:
d1:f9:1a:aa:13:c5:b3:ea:41:e4:ac:9b:c3:ce:75:aa:1b:77:
82:0e:14:9a:75:12:3e:c2:15:d5:f2:5b:5f:c4:f3:dc:ae:5b:
63:59:5e:5d:c9:a0:b1:bc:f5:6c:86:3d:75:1b:83:55:5e:02:
21:6b:77:96:40:61:0a:ef:34:9d:f7:7c:db:67:70:78:df:c0:
1b:6f:24:e7:f9:d7:f7:b0:e0:67:c5:a1:29:43:47:8a:fe:9e:
e2:1f:39:36:2a:3b:f7:a1:af:bc:b4:f5:3c:eb:25:8d:dd:f6:
74:50:91:3f:4d:06:c2:fe:da:f4:6c:32:4b:f2:c2:b2:11:39:
93:70:87:ac:ab:04:05:e3:f9:5a:fe:b1:34:6f:09:24:d9:be:
04:37:c4:5a:1b:09:a9:4c:5b:85:a4:f2:fb:c0:26:75:47:94:
f6:42:7b:24:ce:9c:d8:7a:4b:19:ba:21:23:71:0f:7f:b9:75:
8d:2e:8f:ac:97:57:02:96:f0:05:ab:05:07:dd:47:a6:d6:a8:
83:b3:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:21 2026 by rpki-client