Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: SEMLjLC/l0jH+0XLyayXyFF3MHWMRTzapl/sdDac5DQ=
Subject key identifier: D0:E1:2D:11:F6:4F:FA:E9:E9:BC:5D:BB:5B:66:40:03:B8:FA:77:EC
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01A00093AC773CF03519DFBB9949DB6FF94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1719
Signing time: Fri 14 Aug 2026 14:01:12 +0000
Manifest this update: Fri 14 Aug 2026 14:01:12 +0000
Manifest next update: Sat 15 Aug 2026 14:01:12 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: QTXYMyieEQgcOHqSY5HDwegsAlLlWvOb9OZDn5WP7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:ac:77:3c:f0:35:19:df:bb:99:49:db:6f:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Aug 14 14:01:12 2026 GMT
Not After : Aug 15 14:01:12 2026 GMT
Subject: CN=d0e12d11f64ffae9e9bc5dbb5b664003b8fa77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:3d:a1:ae:8e:c1:02:c6:40:fc:3a:68:82:
ec:df:de:19:a8:1d:01:7d:48:ab:f6:33:a8:bb:b6:
6a:13:2b:3f:ab:21:12:5b:49:61:61:71:64:24:09:
f9:8f:02:b6:e3:57:50:b1:24:53:0a:b7:ef:f3:ba:
8e:90:03:09:51:c5:c5:43:30:e3:ea:95:be:7d:8d:
c8:37:62:fa:b9:76:e2:d2:15:d7:cd:87:5a:12:25:
87:6e:51:3e:c8:f6:ac:1c:55:c3:59:bc:df:67:18:
09:f0:73:f8:3c:b3:27:1d:87:fa:9e:4d:fc:c3:14:
07:e3:54:a0:de:8e:93:74:45:18:29:cf:d9:45:6b:
8c:52:45:3b:ac:87:df:ed:65:24:b6:c9:2b:82:f4:
00:69:52:fc:2e:c8:40:4b:56:da:17:ef:ce:63:6b:
b8:79:58:35:3f:53:d8:94:22:25:08:16:e4:39:44:
d4:34:9d:9c:1a:79:c1:e5:4c:45:4d:d1:23:82:9b:
a7:76:96:9d:1e:cf:ea:ee:04:93:92:72:53:90:70:
a9:70:eb:df:ee:3f:f2:f6:96:96:bb:22:9d:f8:cb:
3f:69:df:23:0e:7a:05:89:79:e3:ec:11:6d:00:ca:
63:b2:30:a8:f1:fc:27:1e:7b:e9:74:b2:12:4b:1e:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:2D:11:F6:4F:FA:E9:E9:BC:5D:BB:5B:66:40:03:B8:FA:77:EC
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:47:a4:71:cf:96:22:a4:c7:7d:fa:45:3a:4d:0c:f3:3b:
e4:02:8a:b0:58:e2:99:8c:19:4c:75:8a:37:ab:f9:96:24:26:
3e:ea:48:5a:b5:69:e4:07:ab:61:51:b6:10:cb:bc:34:56:a2:
2f:e4:fe:4c:39:76:fe:d2:8b:d8:c2:44:79:e3:f2:e7:71:5c:
d6:45:a4:ac:b3:0d:0f:43:96:d1:93:18:7e:11:79:89:89:b1:
ed:d2:d8:92:ce:76:81:60:39:ac:9a:8d:e6:05:d4:b9:5d:41:
a4:e2:81:89:4b:22:99:71:59:e1:4d:45:68:fb:96:36:69:86:
00:a9:59:97:8e:9a:62:4e:16:9c:81:57:d3:b4:55:d4:70:ff:
b0:56:81:db:82:d6:66:57:f9:50:af:f7:66:04:ac:ef:d6:1b:
44:54:4f:3b:90:b8:f7:9e:a9:db:42:3f:d8:8a:48:4c:9a:16:
34:df:5c:5f:91:0d:11:d1:c3:8c:ff:7d:fb:f3:55:ef:92:72:
5b:44:eb:dd:3a:46:d9:b1:4e:54:07:c5:4a:80:3c:8d:eb:fc:
01:4e:fa:3d:c7:ba:a1:4b:92:03:86:d1:08:73:cb:5d:e7:a4:
08:7d:c3:8b:9d:80:25:d9:0b:e9:4e:e7:92:30:da:1c:61:f9:
5c:85:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:28 2026 by rpki-client