Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: T90LIs0rqiVaxvCXRH/RuCidotJLswgEwREFljZ3HJA=
Subject key identifier: E9:A8:40:27:B4:10:94:4E:F7:47:B6:F5:26:84:A8:04:AC:A5:50:F8
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 01A0005C962A41CA2C387C5A0B2B78458916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0E17
Signing time: Fri 14 Aug 2026 13:01:02 +0000
Manifest this update: Fri 14 Aug 2026 13:01:02 +0000
Manifest next update: Sat 15 Aug 2026 13:01:02 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: XnP+imwLhGUzxkDxwnuZ62gCsGMt3Zp7xbP5FxQ2ygE=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:96:2a:41:ca:2c:38:7c:5a:0b:2b:78:45:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Aug 14 13:01:02 2026 GMT
Not After : Aug 15 13:01:02 2026 GMT
Subject: CN=e9a84027b410944ef747b6f52684a804aca550f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:37:8f:1f:e1:4c:a6:e4:6a:ed:1a:ab:c3:
35:5d:a5:be:fe:da:42:f3:3d:1b:0b:14:7c:1c:ea:
91:11:14:5a:8e:96:e6:af:cd:cb:a0:3a:64:13:fe:
71:c4:7f:57:5c:fe:8b:78:7b:e7:42:28:fa:2a:47:
d6:95:06:db:65:da:de:f6:8f:95:b6:71:ee:71:e6:
ad:ec:95:63:1a:43:dc:47:a4:8b:90:b2:02:6b:63:
b9:e7:1d:97:b0:0e:8e:04:15:fa:8c:e8:64:08:52:
82:45:21:ca:f2:5b:54:2d:33:73:7d:ed:64:b5:f7:
6d:9f:bd:a7:c8:f6:de:93:01:d8:c8:35:25:c8:89:
14:fe:06:53:e0:eb:18:70:32:7b:a5:27:16:6f:9e:
cc:79:c3:5c:9c:f6:54:14:b8:98:70:ea:0b:00:c3:
f5:06:0f:f0:78:88:d8:c9:69:af:e1:32:42:cc:ab:
9e:7a:17:9c:e8:6b:8b:67:bb:de:d3:5c:a5:71:0a:
64:62:f3:1c:e1:bc:62:81:5e:21:d8:82:85:7d:7a:
fb:e4:4e:c6:a5:1d:28:b7:8e:c9:17:a1:15:85:3a:
9d:ae:db:69:a1:b9:19:9c:df:2c:61:1d:aa:57:69:
e0:30:8b:29:5d:fd:1d:9e:41:f2:23:d5:b2:1d:b6:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:40:27:B4:10:94:4E:F7:47:B6:F5:26:84:A8:04:AC:A5:50:F8
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d4:e9:39:ce:ed:a8:86:b4:54:83:7a:5c:1b:30:4e:3a:7b:
39:c3:42:18:e0:6e:5f:86:13:4d:ff:85:e0:1d:bd:e3:ce:dc:
2d:49:75:a6:12:eb:e9:98:1d:20:37:02:ce:ca:a1:93:ea:b1:
ee:31:d8:8b:82:58:01:42:2b:b5:71:61:d4:b9:14:95:fd:cd:
c5:02:b2:d1:74:8c:63:e3:e0:2e:e0:c2:c8:c0:b6:bc:e7:05:
fc:59:31:20:d2:27:3e:28:08:c7:e4:ee:a4:10:81:79:d0:45:
42:cb:63:f2:99:29:7a:60:48:7b:ac:4b:95:6c:dd:35:7a:6c:
33:38:21:88:b6:00:bd:0f:0d:39:20:10:e9:8e:c5:84:ba:78:
cb:0d:5c:a6:93:36:93:4f:f9:5b:12:a6:67:56:a5:db:ac:88:
b8:de:97:4a:77:75:4a:59:95:a9:c4:e6:ad:76:de:81:29:ca:
f6:e4:31:2d:63:b0:54:d0:3d:c9:42:7f:38:4e:7f:bc:db:9e:
53:17:6f:b3:e8:bd:04:dd:98:3a:26:23:23:ed:b7:2b:9c:94:
c7:b8:9e:24:4c:da:2d:b6:ad:2c:14:f5:82:97:89:12:23:0c:
ad:2a:6e:54:89:22:c6:6f:24:db:75:6e:3d:9b:18:1e:d6:dd:
4f:b9:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:20 2026 by rpki-client