Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: h9MHgNRakw/h131s77JjrlGh7OnbbyBJ3081wEwUKjs=
Subject key identifier: 15:AE:88:40:3F:61:F8:45:FC:F8:E9:40:5B:0B:C2:61:83:5F:6B:0A
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019F10E4A19D54DD6BA238B0697795908C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0D9B
Signing time: Mon 29 Jun 2026 01:00:46 +0000
Manifest this update: Mon 29 Jun 2026 01:00:46 +0000
Manifest next update: Tue 30 Jun 2026 01:00:46 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: Lj+qusskZWt5j7sHSd1UkrSVA0GRe4rmqrugWx0D0OY=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:a1:9d:54:dd:6b:a2:38:b0:69:77:95:90:8c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jun 29 01:00:46 2026 GMT
Not After : Jun 30 01:00:46 2026 GMT
Subject: CN=15ae88403f61f845fcf8e9405b0bc261835f6b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:41:3a:1e:b1:46:09:a0:4a:06:78:b7:4a:
89:52:60:9e:e8:e0:d5:f6:5c:f3:3e:07:4f:4e:8e:
61:24:c3:9e:ef:13:4e:e0:7f:af:a6:a9:b1:70:7b:
59:67:94:ed:71:d9:a5:0f:83:a0:0e:82:07:f0:20:
43:fc:85:2c:58:af:06:f6:db:42:88:b9:c3:f5:ec:
8d:2b:d8:ff:b4:4d:5d:89:70:b0:3d:fb:37:6b:d8:
ca:85:de:bd:af:5a:03:cf:a7:be:84:1f:ab:b3:67:
e9:cb:ab:7c:b6:c6:2d:0c:ee:fb:9c:3e:f0:2a:9d:
f5:ab:70:3b:11:e5:6f:46:ee:16:81:8a:01:af:4b:
b7:6e:78:3f:42:b5:87:f6:f8:e6:8b:f1:d5:27:cf:
92:99:9b:be:62:ab:d7:3b:20:0e:c6:b1:66:e6:06:
aa:76:c9:6b:7d:7d:ed:21:22:9a:9e:fe:29:a2:90:
47:d4:16:b7:3c:47:1b:de:d2:0d:60:73:1f:bc:33:
b6:67:6c:15:17:49:7c:91:dd:c0:b3:8e:5f:6f:aa:
7c:95:65:5a:69:82:12:77:33:a4:2a:4f:b3:44:e7:
53:4f:c5:f5:99:1a:28:24:62:35:db:7e:dd:0c:b3:
63:d9:c3:72:89:ec:39:98:0c:1d:4b:a9:48:d2:b0:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:88:40:3F:61:F8:45:FC:F8:E9:40:5B:0B:C2:61:83:5F:6B:0A
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:27:4c:7e:aa:c1:be:31:50:66:90:4e:d5:5c:7d:1c:bf:
22:ed:27:dc:10:39:2d:04:d1:32:4f:f7:4f:69:d2:f9:0a:d3:
56:3c:37:72:54:2b:88:96:72:28:cf:3d:15:62:90:e6:ab:9e:
b2:a8:ba:e2:c0:e4:cb:87:59:87:de:89:88:5b:5a:3c:be:54:
01:ab:2e:8b:c6:ca:54:af:58:c0:ab:8f:d9:fd:a9:01:55:23:
9d:87:82:f9:05:37:84:e4:ff:3c:18:c0:56:f0:dc:12:4e:d6:
e8:d9:9e:4a:eb:ad:0f:39:4d:78:ee:b0:e7:06:dc:65:a7:9d:
ba:7f:22:c8:14:55:a6:52:1c:74:7a:79:40:2f:7d:37:c3:c0:
66:62:8f:78:6d:19:f7:83:67:64:9c:16:12:95:31:35:43:19:
3f:ee:d9:30:94:66:e7:7b:2b:7d:d6:1b:6b:98:87:59:68:e5:
08:5a:25:a3:98:eb:34:b7:56:b7:98:31:11:d4:a0:f6:25:43:
76:f8:39:ba:a8:54:17:2c:13:cd:66:9c:ca:51:35:a4:db:98:
72:dc:6e:45:5a:71:88:cf:b7:a5:70:9d:3f:34:ad:2a:22:ad:
76:66:5c:c0:f7:d3:67:47:4a:af:ea:2d:7a:94:e6:eb:06:21:
24:50:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:28 2026 by rpki-client