Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: zbGa4H1ijbpp+O5H8BI4IXiZdgr+vK/GjgXCNjUFxIA=
Subject key identifier: 7B:46:36:C2:2E:49:66:34:22:1B:9E:4A:28:8C:A8:7D:35:A6:77:3D
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019D9A3E22DCDA42B10CF87AB21C6AA7D690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0CD9
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: NqQdts9i5HryBWwYvTK6XoD+DecezP0vA7XqvY7F1mg=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:22:dc:da:42:b1:0c:f8:7a:b2:1c:6a:a7:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=7b4636c22e496634221b9e4a288ca87d35a6773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:e5:61:a5:38:0e:90:1f:f0:a9:78:b5:ca:
9c:16:fe:34:d5:0e:3b:c1:e9:31:26:24:d3:ec:ab:
bf:5a:59:df:cb:11:35:60:6c:2b:35:8c:6b:a6:0c:
6c:98:49:8c:7a:33:48:04:53:f9:f3:21:a2:17:f1:
f7:89:06:19:d7:af:22:c7:bd:86:fe:0b:dc:f3:da:
c4:f0:1f:93:c4:28:7f:9b:fe:5d:74:a4:19:82:62:
d7:43:67:79:46:50:74:0a:0f:e7:a4:70:46:dd:d5:
a7:e3:15:ef:23:af:86:79:29:d3:b4:60:a0:1d:7a:
f4:f1:5b:df:0d:05:d9:de:ae:bd:ac:eb:ba:16:a5:
9a:32:54:b9:5f:74:27:74:7b:70:7f:90:1d:e1:7b:
da:bf:cc:5d:ab:20:9f:dc:98:de:7d:0b:23:0d:09:
b8:70:19:17:1a:19:ae:fc:b4:94:fa:6e:0b:52:89:
6a:54:86:f2:95:50:67:13:3e:c6:ec:72:31:5f:ee:
87:47:67:27:72:2f:4f:c3:ba:0b:8d:5a:06:22:80:
8b:62:2d:d9:06:c6:75:60:81:0c:52:ba:9a:7e:01:
8f:8a:0e:17:ea:b2:3f:78:09:7b:64:bb:66:67:7c:
68:36:3a:90:ae:36:57:87:f8:6e:f9:86:7c:56:37:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:36:C2:2E:49:66:34:22:1B:9E:4A:28:8C:A8:7D:35:A6:77:3D
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:89:d0:5f:40:60:64:b6:4b:72:47:f3:8d:ca:6a:32:45:f2:
3f:b8:0b:be:d6:52:d2:22:44:93:e5:a3:69:14:da:9e:5c:b4:
dd:87:04:60:ac:0f:78:09:bf:a6:6b:3b:56:9a:c8:01:56:e7:
bf:28:95:ed:bc:f0:3c:aa:1d:1c:9f:f5:a7:61:ed:22:9e:e9:
3f:60:7f:bb:b4:70:38:0a:38:87:39:99:32:6f:22:da:f9:97:
b9:1b:8a:7f:98:f1:6c:32:55:31:65:31:6f:02:6f:61:b7:c9:
97:d5:0a:aa:e4:86:69:69:74:ee:e2:fd:db:ca:4c:33:15:ac:
b7:a5:76:47:5b:db:be:64:37:e0:b3:c2:be:ed:65:10:9b:28:
d1:79:75:83:44:26:73:b3:3c:57:d6:73:8b:0b:b6:53:b3:ff:
41:1a:1d:d8:29:54:b5:f6:ef:ec:4d:38:18:9c:90:13:17:e5:
10:46:db:d0:c9:9d:73:b0:95:53:91:10:5d:84:12:8e:a1:b1:
92:23:37:ef:bb:75:34:6d:b8:6e:61:97:df:63:d1:e5:3d:8a:
81:81:c3:43:b1:ab:c9:27:5e:fd:26:b0:ff:8d:44:87:99:e9:
c5:3c:41:52:40:77:d0:88:29:0f:7f:40:58:44:28:f0:42:f8:
b4:65:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:39 2026 by rpki-client