Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: J5Syx/dgqbZjLi2Ic4I7Ul/WGUX1LoHjBJa9PNAcboY=
Subject key identifier: 15:B2:D4:EA:AD:F1:73:98:F4:48:46:82:9C:5B:C7:F1:F4:3F:0D:F0
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01A13D49DF0D26B8E989B3349797660A6C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 17BD
Signing time: Thu 15 Oct 2026 02:00:13 +0000
Manifest this update: Thu 15 Oct 2026 02:00:13 +0000
Manifest next update: Fri 16 Oct 2026 02:00:13 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: g+xx9VAgMxBMT0HxswptTR9CaeIsmZ2G8i2K9y7BPgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:df:0d:26:b8:e9:89:b3:34:97:97:66:0a:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Oct 15 02:00:13 2026 GMT
Not After : Oct 16 02:00:13 2026 GMT
Subject: CN=15b2d4eaadf17398f44846829c5bc7f1f43f0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:b9:4b:ab:e5:87:54:8b:5e:8d:d4:b6:98:
38:a4:47:bb:8f:c1:61:17:24:b1:8c:ab:e0:a3:77:
8b:8f:db:78:ef:74:01:12:ae:2a:b1:9a:c2:60:32:
5c:a9:5a:9e:52:00:44:6b:c8:13:3c:e7:c7:4d:ba:
00:7e:b9:5a:d2:2a:42:60:2c:01:8a:1c:95:15:ba:
ac:a7:59:13:a7:93:50:e8:52:40:38:8e:b5:00:df:
14:cf:fa:c3:11:bc:16:6c:40:1a:ad:c4:38:05:8e:
65:31:40:a6:6c:34:1f:91:c4:54:f8:bd:66:47:58:
a6:c2:8e:01:1f:b5:66:8d:bb:27:87:8b:fc:cd:3d:
86:b1:3a:43:9c:b0:d7:8d:c4:45:b9:d9:dc:26:4a:
52:ee:08:06:49:19:84:2f:f9:f4:85:df:8e:81:04:
fd:94:ab:87:6a:7b:4c:47:dc:73:f2:7b:1f:36:b9:
b5:6a:0e:ad:3d:4b:0a:cc:f1:95:e2:46:64:78:eb:
47:18:57:12:96:53:8f:fb:f2:54:58:4f:87:ed:62:
64:fe:62:93:c1:bd:3f:72:01:6f:e1:8d:4f:64:7f:
ec:e0:61:17:3d:65:37:87:4b:27:b1:4b:eb:3b:12:
f6:48:1d:b5:ec:28:18:5b:86:9c:a7:b5:22:14:7f:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:D4:EA:AD:F1:73:98:F4:48:46:82:9C:5B:C7:F1:F4:3F:0D:F0
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:d2:1f:38:b7:99:64:17:11:37:73:bf:b6:7f:23:da:0d:
e0:03:c0:d1:30:8f:b6:e4:28:fc:89:86:d6:0e:d2:61:7a:ef:
b9:e1:4c:59:fa:3a:90:46:4f:7e:e4:34:f4:24:78:06:5a:92:
65:55:68:bf:0a:d5:9e:21:1a:f0:0d:bf:b6:b6:2f:6d:19:da:
5c:c4:f0:07:93:f8:de:d0:4e:e6:6f:3a:b8:6e:e8:28:6e:58:
3b:35:ba:2f:4c:04:b1:78:ae:ac:af:bb:66:94:ba:fb:52:3c:
42:d7:0e:9f:72:71:7f:27:e4:f5:19:92:f9:99:a6:07:f6:fc:
36:4b:e2:6b:a2:b1:f4:b1:3b:ba:90:f8:bb:ec:12:27:1f:75:
bc:84:61:02:8b:de:d3:9c:4b:25:1f:cf:c9:66:13:ca:b4:bf:
85:4a:c8:c2:ac:5f:41:31:7f:83:5c:25:2f:80:89:d7:53:c1:
fc:89:21:51:dc:0e:df:5d:9b:28:25:7e:b4:4f:98:ab:2c:26:
a6:8a:f5:f2:1f:f2:a8:70:3c:b1:05:d6:73:95:bb:62:a6:0a:
c9:4a:9e:67:86:ef:07:28:f0:61:06:a8:10:47:ed:54:95:7e:
d0:ea:a6:e2:d9:98:19:74:b7:cc:0c:20:aa:63:eb:2f:19:73:
05:6f:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:14 2026 by rpki-client