Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: 6tLI/HWcV1h7QMlVV4BNpW8aZ6mvKSl5kCskvoGxxLU=
Subject key identifier: F2:77:0C:98:0B:88:B7:EC:DF:67:E7:E1:AF:A0:AF:C3:D6:6B:E0:48
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019D39E5BCA7A7416480CE137C5DC3FCA909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 15A9
Signing time: Sun 29 Mar 2026 14:00:50 +0000
Manifest this update: Sun 29 Mar 2026 14:00:50 +0000
Manifest next update: Mon 30 Mar 2026 14:00:50 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: AUlbHuF/qwGi1TzwUD5PJhcOl4yWepZXL99ifFB+A7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:bc:a7:a7:41:64:80:ce:13:7c:5d:c3:fc:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Mar 29 14:00:50 2026 GMT
Not After : Mar 30 14:00:50 2026 GMT
Subject: CN=f2770c980b88b7ecdf67e7e1afa0afc3d66be048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:c8:60:8d:25:c9:7d:92:47:80:13:3f:c8:
68:35:68:84:a1:66:a3:ea:b5:3f:7d:68:ab:a6:ab:
7f:56:b1:90:58:18:22:4c:c5:6d:83:20:55:6d:d4:
3a:5c:ea:33:24:12:3e:00:39:ae:16:a6:60:b5:bf:
ba:0b:ed:76:b2:65:9e:d1:f8:f8:0d:23:7b:d2:aa:
a7:ee:fe:e9:67:e5:2f:fd:f8:ca:75:39:5f:1d:06:
10:ba:5a:3c:13:22:f9:0f:5b:dc:87:50:e1:93:f1:
64:fc:52:82:3e:ba:e8:20:75:4d:32:b6:48:6a:4d:
cf:e2:90:d3:b1:c3:8f:f7:ed:b0:b3:45:81:38:8a:
4d:3f:2e:2d:2e:25:17:f4:45:66:35:d5:74:36:97:
45:f2:42:31:06:c6:f0:70:28:14:93:8b:28:a9:da:
09:4a:6f:68:b0:e0:57:eb:25:e5:3f:a0:c7:43:cb:
dd:c1:58:76:32:12:a4:2a:a9:97:9c:cd:5f:aa:ee:
ca:dc:89:8b:0a:bc:87:a3:8a:0a:fa:40:74:16:40:
89:b4:1d:82:51:9e:9a:f4:f7:b5:f0:40:9f:41:70:
35:ef:f4:3f:46:b6:2d:14:c6:e9:e1:f6:41:60:12:
f4:34:04:f7:c9:38:09:44:33:bd:7e:96:4f:9d:11:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:0C:98:0B:88:B7:EC:DF:67:E7:E1:AF:A0:AF:C3:D6:6B:E0:48
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:11:9b:d3:bf:59:94:5c:af:2c:f7:80:38:55:30:33:4c:9c:
70:0b:15:42:30:1e:3f:e7:ff:b4:9f:49:9b:a5:86:c1:98:81:
3d:61:74:4a:5a:80:ff:83:27:a9:98:6b:58:6e:c8:20:52:02:
2e:de:cb:59:e2:7f:02:cc:15:8f:78:09:15:e6:a4:48:86:ef:
64:e8:64:6e:11:f1:88:23:4a:5a:87:7e:65:32:cd:7b:6a:cb:
1d:32:31:07:70:54:a3:94:18:5d:02:e1:15:b7:d1:59:68:c8:
ad:23:31:15:11:d3:b9:c9:70:e8:64:e0:37:4b:00:2b:40:a7:
8d:f2:02:28:f3:2d:f4:b3:a0:51:83:53:40:e3:19:05:7e:d2:
28:26:b2:8b:19:df:59:28:29:fc:82:0c:b7:81:64:c3:2a:df:
4c:fa:4d:ee:40:f0:71:7f:32:87:4e:8f:c7:92:2a:db:f0:c7:
05:7b:44:99:72:b7:d4:55:eb:6f:d0:16:19:4d:a7:34:6b:fd:
c7:a6:07:46:fd:c3:e3:fc:94:4c:b3:24:ca:05:5b:99:d5:22:
b1:85:af:6a:b5:8c:3d:00:f2:69:06:fb:36:fb:5f:6b:51:7a:
b9:d3:31:c5:b2:a2:36:90:5e:1b:82:ea:f6:a1:d0:de:f0:08:
da:d4:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:58 2026 by rpki-client