Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: OGAEgUVGC6da8Y6/BOq84pk1RsPBJX2vZKMQnoJGxNY=
Subject key identifier: C9:81:19:89:8E:95:32:FC:73:30:0B:58:11:15:99:E7:CB:DC:3E:55
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019D37C0510F75691C3FEDA52C21CD2ACB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0CA6
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: UzRy9hc+m0qNhxduQKUqkUgfm23jshdOM+Yi2vibXzE=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:0f:75:69:1c:3f:ed:a5:2c:21:cd:2a:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=c98119898e9532fc73300b58111599e7cbdc3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:9d:d3:6d:8e:d3:50:36:b4:c0:20:9f:e0:
aa:2d:8c:de:eb:bc:5b:c0:41:c9:ac:00:85:61:db:
df:b5:8b:44:2f:d2:56:9c:01:ab:54:34:4c:ad:17:
0b:f5:fa:5a:0d:3b:9b:39:e8:cd:c1:29:2a:ff:96:
7a:e1:d5:e4:13:f1:fc:cc:b8:a6:d5:30:2b:16:e7:
1b:bd:80:a3:29:e9:11:7e:61:a1:95:df:b7:59:eb:
33:93:1e:e5:a4:16:82:e0:31:47:70:47:9d:ae:24:
58:aa:54:3c:20:8c:80:a9:f4:1d:3e:2a:6f:4a:aa:
d0:8f:94:a8:d5:46:08:d9:14:86:a8:ef:29:d4:22:
f4:a4:3a:91:00:62:dd:bf:e5:1d:e8:0c:20:31:b5:
b1:28:31:04:03:82:97:e2:b9:83:b2:69:cf:34:57:
07:ff:d8:69:03:9c:a8:0b:e6:91:ef:f2:17:b8:17:
c2:70:1d:1f:83:d6:43:e8:01:8a:44:52:42:4f:1c:
07:f8:92:c9:17:00:68:3b:18:29:03:73:9b:64:74:
99:f0:ac:a8:a0:a1:50:2e:16:84:2b:87:d0:73:9d:
db:d7:1a:5d:3f:2f:c0:d0:2a:7b:97:20:81:a4:f1:
09:c1:e5:0d:bf:d1:70:ad:3b:1d:4e:36:2d:4a:7a:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:19:89:8E:95:32:FC:73:30:0B:58:11:15:99:E7:CB:DC:3E:55
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:f6:07:ac:b9:87:67:59:76:24:cb:82:01:4c:ee:cd:51:
56:e7:40:4a:7f:e4:e9:3d:df:1f:b8:27:b0:b1:51:a7:93:35:
17:29:08:6a:75:28:06:5e:de:83:cf:25:d9:9c:95:74:31:d7:
0f:89:69:9b:8a:ba:e5:e3:98:60:29:c1:ea:c5:91:4e:fb:cb:
10:41:05:e1:bd:6e:2a:2b:e9:f7:37:f0:e4:f3:7f:3f:8a:b2:
05:07:c3:07:8f:d6:09:f2:7b:b8:9f:9f:45:4e:18:84:11:1d:
c7:ec:d7:b3:c0:e8:e2:5f:e7:35:d6:99:fc:21:75:fc:46:cc:
c7:40:02:90:78:cf:01:f6:5b:5f:70:b1:7b:de:10:b1:05:4b:
88:d7:44:5a:63:6e:2a:b7:6b:e7:a3:61:0d:30:fd:b9:9e:27:
23:45:56:9f:c1:7d:c9:9b:8c:5e:88:89:3c:c0:74:ef:16:91:
c4:45:e0:89:3d:0c:7b:fc:5d:7f:59:c9:15:68:a6:75:6a:c4:
f5:8b:3d:fa:6b:27:22:cf:46:bb:20:fa:5b:b0:12:f7:ed:a5:
92:6a:c9:a9:88:ca:dc:d2:6d:7c:73:8c:6b:c4:32:27:bc:fe:
4d:5e:28:74:ed:a6:80:36:7d:8b:2a:37:c4:1e:7f:9a:b4:6b:
9d:f1:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:46 2026 by rpki-client