Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: ZlOG01XMcNiW2Bmf8KA3icmq3O07XEhXU7WxMxyuZlU=
Subject key identifier: A2:9D:F4:E8:53:2D:3D:32:61:2F:B2:04:3C:D0:A7:7D:F2:28:D9:46
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019E2927284D6FEDCFC916E285D5FB2D62B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0D23
Signing time: Fri 15 May 2026 01:01:32 +0000
Manifest this update: Fri 15 May 2026 01:01:32 +0000
Manifest next update: Sat 16 May 2026 01:01:32 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: 0k09CmfMCrb8/rgSg4rKy2FvYFDPZgiX7+EjKciXv08=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:28:4d:6f:ed:cf:c9:16:e2:85:d5:fb:2d:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: May 15 01:01:32 2026 GMT
Not After : May 16 01:01:32 2026 GMT
Subject: CN=a29df4e8532d3d32612fb2043cd0a77df228d946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:fb:cd:47:29:ed:a3:a1:9b:29:16:8f:ec:
60:5f:09:ee:c4:be:c4:36:c2:9b:0d:66:30:f0:21:
97:0d:c8:e0:33:bc:c4:2e:e0:38:04:cd:09:9a:fd:
9e:49:10:b7:e4:9a:be:17:56:1d:4c:1a:1e:05:36:
f6:b3:ee:22:f2:46:d8:e6:f2:2b:bd:b7:f5:c6:0e:
b6:27:3b:d6:f4:bd:4c:06:f9:a7:0b:9f:8b:c9:4e:
9a:8f:a0:4a:28:d3:f4:08:20:7a:fe:92:10:98:73:
61:43:7d:86:ab:4c:f2:99:bd:f2:1a:e3:ab:2c:b4:
c4:19:11:f6:26:95:52:bb:b0:c6:fb:f6:eb:c2:b3:
96:f5:27:21:70:6f:98:2f:53:4a:08:a6:c3:79:e7:
8c:e8:94:f1:99:0e:76:73:0c:75:56:35:53:93:ac:
1a:68:8e:db:a7:45:78:fc:65:17:a3:5a:3f:21:c7:
23:0c:19:6a:b2:e0:70:82:c2:09:5e:43:9c:c9:4e:
bc:0e:d1:d0:78:b4:00:6e:6e:d4:a6:e1:65:3e:1a:
af:e9:5a:37:43:5d:60:24:de:ef:d8:9e:b3:e6:ad:
f7:db:85:82:17:bd:3b:2a:d1:eb:3a:ba:1e:02:24:
30:51:7c:25:af:91:cb:62:2c:da:33:99:e0:80:4d:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:F4:E8:53:2D:3D:32:61:2F:B2:04:3C:D0:A7:7D:F2:28:D9:46
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c0:7b:cd:2b:48:81:7b:ef:68:d8:5d:ff:cb:fb:77:66:86:
2f:a3:fa:58:1b:dc:d4:1f:d7:64:b4:8b:52:08:12:c4:92:4b:
f0:f1:ef:57:f6:ea:ff:b2:df:d1:50:61:0d:91:a8:c2:2a:b8:
f6:68:da:d5:14:74:2e:75:58:3b:fc:a3:f9:ba:69:63:cf:be:
bc:d8:c8:45:15:5c:c2:e5:57:36:e0:1a:17:18:2b:eb:a6:28:
bd:56:f2:af:ac:ec:84:fc:aa:ad:e2:18:d4:57:89:2a:08:be:
b8:ea:45:da:3a:e5:2c:ea:4e:28:9b:8a:02:71:23:2a:79:1b:
e0:7e:a7:97:ae:2c:77:22:61:98:5e:14:45:8f:92:2b:79:66:
0f:2f:fb:d4:c8:a6:a8:9d:c2:a1:4d:fd:a2:72:42:bd:a1:87:
f2:4e:e9:58:e3:c7:4d:81:92:44:4c:61:2b:30:70:97:73:ca:
c1:11:48:28:24:3c:0d:f1:cc:f8:1a:3f:90:ff:95:77:1c:83:
9c:00:d4:fb:6b:df:ab:68:a2:70:66:3a:ac:57:4c:26:60:16:
2a:50:88:bf:78:15:ff:6b:b9:54:51:0d:67:11:6c:13:b6:26:
22:df:81:ff:05:70:fb:75:cb:bf:0a:54:17:50:71:5e:f0:b9:
d7:c3:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:37 2026 by rpki-client