Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: 7zTQcLM5YZmN6TRQyZB62w71jD2/ERAUQ8FioI+o4yg=
Subject key identifier: 3D:32:30:6F:38:00:74:0A:CB:76:33:17:F6:11:5D:C6:6E:2D:B9:E3
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 01A0BD9E7D4C0A1D0F287A92C1A26F7590CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0E79
Signing time: Sun 20 Sep 2026 07:01:15 +0000
Manifest this update: Sun 20 Sep 2026 07:01:15 +0000
Manifest next update: Mon 21 Sep 2026 07:01:15 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: Prsv7kM3EliGYgK9xpKuOt+HipukD6dYU3huhdq9TBA=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:7d:4c:0a:1d:0f:28:7a:92:c1:a2:6f:75:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Sep 20 07:01:15 2026 GMT
Not After : Sep 21 07:01:15 2026 GMT
Subject: CN=3d32306f3800740acb763317f6115dc66e2db9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:0c:5c:41:7e:68:29:56:b5:3e:ec:54:30:
73:e4:8b:3d:f3:a0:9e:d6:4d:5b:26:db:6d:12:2c:
7d:d5:37:aa:9e:f2:ad:29:d3:57:94:aa:6d:65:f9:
b1:64:8a:b4:52:7c:5c:ac:89:23:f1:da:29:05:57:
47:a8:c6:f5:fb:95:a8:9f:a9:96:25:47:4f:4f:37:
2f:cc:91:f3:56:1a:03:ad:74:72:21:05:e2:93:93:
8a:cf:d0:78:90:18:da:83:a3:08:95:7f:1f:96:d2:
35:4d:eb:f0:61:bf:05:ca:aa:d8:74:e2:c0:f3:b0:
3c:b6:15:74:c4:a8:1e:e4:db:52:56:d8:86:e1:a3:
b7:f1:38:76:2c:82:3d:38:a2:d8:c6:7f:29:8b:de:
cd:3a:1e:4a:09:4f:bc:c3:63:61:53:db:d7:0c:dd:
b2:2d:9f:34:19:b5:b2:94:52:59:dc:5f:8e:90:d2:
c4:83:09:2c:b1:8d:85:d1:30:c8:1f:84:62:b9:5c:
70:6b:13:d0:88:10:4f:0a:bd:b0:e4:b8:f4:8d:e0:
6d:e5:33:07:c4:f7:ee:50:70:2c:e6:f8:21:0c:2d:
d5:1f:23:ff:37:0e:9a:08:18:9d:e3:3c:88:9f:da:
3f:58:4c:35:ad:1f:1d:18:96:81:3f:0d:4d:1a:38:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:30:6F:38:00:74:0A:CB:76:33:17:F6:11:5D:C6:6E:2D:B9:E3
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:af:f6:f5:3c:95:f2:ed:2b:e5:a2:4e:a9:0a:d7:b8:45:
96:f0:bf:d1:f3:eb:2b:62:bf:3f:bb:09:06:c7:3a:6e:6b:df:
88:29:41:53:0f:47:ab:42:1a:72:45:80:d5:2f:8f:2f:bf:97:
60:98:91:7c:13:13:a5:ee:a4:65:43:ff:54:69:c9:f3:92:aa:
5f:fe:89:d7:cc:a8:13:f3:e9:03:e2:3a:fa:f0:15:04:ea:2b:
82:4c:6f:3b:ba:58:0a:cc:63:22:21:fb:62:e3:be:46:d7:9c:
74:b8:ed:c8:81:b2:b8:1e:37:49:44:c0:f4:ff:82:72:48:7d:
f2:91:38:41:c0:83:41:cf:6c:4b:24:63:41:df:33:78:00:7a:
a8:db:57:4d:e9:e9:91:ec:1a:f4:9a:50:57:21:49:52:22:a9:
55:57:e3:f1:74:4e:17:80:8b:c0:0e:71:5e:11:6d:26:2e:64:
22:48:6e:21:d8:e2:b7:68:4f:8f:d2:ff:c5:81:10:19:51:05:
b9:f8:04:57:af:42:e9:9a:5e:16:50:25:69:08:dd:4c:dd:55:
06:ef:4b:65:29:42:8e:e6:0e:e7:79:ea:59:94:ca:fa:be:da:
6a:e5:25:3b:52:22:77:75:5e:0f:3a:1f:85:03:90:d6:8f:39:
24:6d:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:57:19 2026 by rpki-client