Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: GergH33alVFxwGDwMpnr6uIsoxyNNjWz7AWaz1bSSj4=
Subject key identifier: DB:ED:D7:81:B1:3F:74:7A:15:89:A5:74:D3:09:B5:F1:2D:E4:1A:38
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 01A13F024E6D3E5760267E31E347BD55198F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0EBC
Signing time: Thu 15 Oct 2026 10:01:18 +0000
Manifest this update: Thu 15 Oct 2026 10:01:18 +0000
Manifest next update: Fri 16 Oct 2026 10:01:18 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: MJ6gCG4ZXF2+GWrZElxGbIYygJxksUSaHdU4CwW6cp8=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:4e:6d:3e:57:60:26:7e:31:e3:47:bd:55:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Oct 15 10:01:18 2026 GMT
Not After : Oct 16 10:01:18 2026 GMT
Subject: CN=dbedd781b13f747a1589a574d309b5f12de41a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:27:be:62:f2:f7:c0:e2:14:c6:54:12:d4:
b8:79:38:03:b3:32:96:ce:65:5a:fd:a4:72:60:7e:
0e:1b:d3:0e:ff:da:a5:4a:4c:ea:ed:76:31:77:4c:
48:25:5a:4d:f7:81:93:0b:1f:73:8f:4c:97:4a:e0:
e5:cb:64:e2:be:cd:5a:f7:a9:be:72:fa:d7:7b:0f:
1b:29:bb:b5:b1:ed:cc:98:36:3d:69:7d:2d:72:e4:
d2:0a:20:16:93:dd:cd:86:ba:2c:e7:ee:a7:b8:2f:
0c:6b:17:df:3b:98:6a:e2:36:89:df:00:cb:b6:a3:
9a:20:29:94:dc:5f:b8:2a:47:ec:1d:86:1a:8b:19:
dd:72:b8:91:eb:e1:30:f0:48:d5:f3:c8:a4:ee:cc:
2b:e5:26:17:25:fe:37:e0:a7:31:54:87:fb:46:7c:
96:8c:82:17:4d:b5:fb:a0:8e:7b:5c:05:33:d0:ea:
ab:6c:07:c0:4b:37:b2:3b:97:5c:2d:7c:47:72:89:
ce:92:fb:f1:ec:33:44:f2:2a:34:35:df:7a:92:43:
47:f6:06:57:1a:d5:2e:d4:46:b2:0f:c8:2f:ad:d8:
59:09:3a:37:c4:4b:66:be:d4:3a:6b:a0:d6:f5:c3:
06:a2:32:22:38:1d:6f:c1:83:5b:66:21:07:25:83:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:ED:D7:81:B1:3F:74:7A:15:89:A5:74:D3:09:B5:F1:2D:E4:1A:38
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:71:fe:13:53:fb:22:b9:f3:48:a7:18:4e:6f:9e:aa:ae:
72:8a:e6:7d:57:f4:23:a7:37:5d:ec:30:b3:94:22:ec:eb:8b:
e9:50:70:64:22:4c:9c:ea:ab:63:a9:f1:2f:ab:99:be:fc:2b:
82:12:c9:95:24:6e:e1:8f:9b:e1:e9:ec:35:48:2c:c1:61:24:
04:f9:62:53:fb:70:e0:8c:15:f7:08:04:dc:96:d4:d6:71:1e:
f9:09:5d:bd:2b:14:27:64:4d:4f:2d:b4:38:41:a5:8f:33:c0:
a1:d1:2a:8e:ea:5c:72:58:57:69:79:09:3d:36:87:99:04:74:
53:9b:51:ee:f3:51:16:7b:b8:db:c5:b9:3c:e4:c4:dd:67:71:
44:9c:8c:d6:91:9a:7a:ba:54:5e:bd:03:99:cb:dc:80:0d:f5:
12:1b:84:a3:88:cb:a1:dc:bc:22:bb:bf:4c:d0:8f:a0:13:47:
43:6c:7f:5e:c3:55:4d:53:c1:4f:70:10:dd:ca:f1:f8:2d:fa:
66:ad:b1:12:69:22:1e:57:fa:e9:21:ca:84:86:2e:27:48:3b:
e9:c3:60:bf:1d:b1:1e:43:e4:77:68:44:0f:74:1e:b2:a7:8e:
37:5b:d6:52:bc:8a:30:90:5f:75:5d:fc:fd:78:d8:02:5c:82:
92:7f:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:37 2026 by rpki-client