Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: jo10+2YFn2oKBPYj5XwGjkOzxLDdWSGZhZK+ZFy5oF4=
Subject key identifier: C0:A6:8A:A7:A8:58:B5:93:D9:D5:2B:E2:E7:6C:43:C3:32:B3:68:F8
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019E3117789FD9D93820EF31283766FF7D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1629
Signing time: Sat 16 May 2026 14:01:21 +0000
Manifest this update: Sat 16 May 2026 14:01:21 +0000
Manifest next update: Sun 17 May 2026 14:01:21 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: ZRMJfUa1NXF0anQrZR9trK7tc66TxFVwoXSlaNgBEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:78:9f:d9:d9:38:20:ef:31:28:37:66:ff:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: May 16 14:01:21 2026 GMT
Not After : May 17 14:01:21 2026 GMT
Subject: CN=c0a68aa7a858b593d9d52be2e76c43c332b368f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:fb:43:d2:b3:12:bc:3a:b8:6e:4e:81:06:
68:ef:9c:49:17:67:d5:69:bd:59:59:5d:2a:f4:ea:
05:1b:fc:11:42:36:e8:06:a9:d3:be:7b:73:0f:fb:
70:a8:58:4d:a5:03:c1:02:99:7e:e4:5f:7f:de:da:
9b:3a:dc:69:63:91:f1:40:bd:0b:9f:e2:03:39:12:
23:a7:e0:0b:b8:97:55:5f:8a:f3:9c:ab:4e:26:51:
fd:08:b0:7b:38:c5:e8:72:94:cb:10:13:5d:ea:56:
c0:cf:70:a2:b4:c4:7c:a1:83:04:0f:e5:4e:7e:5b:
6b:55:af:e4:e8:a6:40:2d:66:8e:59:b8:08:3b:d2:
94:d9:1f:a8:d2:6d:13:d5:83:e0:24:ac:06:ee:56:
42:ed:0f:da:3f:c8:a2:2f:9d:c5:17:cc:0a:45:c4:
ff:06:89:f0:24:db:7e:fd:09:ce:62:4e:ef:a5:bf:
b0:01:92:cb:dc:32:aa:07:5d:93:44:e7:d3:3e:7a:
fe:33:16:2f:aa:5a:0c:a2:b4:36:3b:af:15:f2:fa:
36:d8:d6:67:cb:cb:96:08:9d:b7:ee:d5:11:bd:12:
b5:be:fd:b2:c6:60:aa:dd:46:d1:d8:8e:a8:27:15:
e6:98:c9:79:b9:91:dd:f9:37:4a:de:51:71:0c:ea:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A6:8A:A7:A8:58:B5:93:D9:D5:2B:E2:E7:6C:43:C3:32:B3:68:F8
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:b6:ee:0a:4e:6b:8b:5f:9e:d7:a9:a1:d3:a5:a8:7a:b6:
11:8d:2b:9a:60:d8:d6:a4:d0:fc:7a:88:50:45:de:fc:f2:3a:
57:f9:02:e9:4f:c7:cf:4d:ed:1d:f5:27:67:75:30:78:6b:94:
39:a4:13:b0:c9:5e:09:51:14:19:f9:5d:b2:be:37:9b:da:a2:
0d:9b:97:83:74:f6:c3:73:3e:66:d3:23:cd:69:49:61:30:90:
88:89:f8:01:b3:6d:04:52:d9:8d:05:90:89:60:96:12:6a:bc:
b0:0f:d1:7c:df:a4:aa:d4:a2:a7:59:e2:58:71:76:43:41:11:
33:10:a9:82:64:2f:5b:6a:a9:83:d6:5a:66:f8:05:5a:f0:d1:
47:11:3d:31:44:1d:a1:50:68:54:ba:02:6e:31:16:33:b2:3c:
de:d7:50:b4:32:e8:47:c0:d2:a8:e3:d4:38:b3:36:17:fd:1a:
f2:9b:95:16:a5:fb:33:43:d9:2c:d1:6e:b2:62:a7:87:fd:c3:
12:a5:70:0e:3d:86:81:a4:19:98:83:f2:c5:04:6e:4f:40:66:
d9:55:49:a6:bf:7f:7c:2d:da:56:a4:25:ea:aa:cc:02:ad:e1:
0c:b8:64:e5:2f:59:1f:aa:e8:84:a7:aa:f7:31:d7:a6:7a:8f:
82:29:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:02 2026 by rpki-client