Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: USrIxgXuDV9lsSLc/wtULaF0bOpKfD8eYzRut10iVaQ=
Subject key identifier: FE:03:68:16:9E:2F:FF:6D:34:6B:3E:36:7F:FE:31:42:5D:0D:F7:A1
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019FA7862A8CB42C34FA1B7CE450A12BB28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0DE9
Signing time: Tue 28 Jul 2026 07:00:15 +0000
Manifest this update: Tue 28 Jul 2026 07:00:15 +0000
Manifest next update: Wed 29 Jul 2026 07:00:15 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: ZTvisSrPA3TD5rP3cDzve3NaN4Fl2M9B799SRBfRLvw=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:2a:8c:b4:2c:34:fa:1b:7c:e4:50:a1:2b:b2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jul 28 07:00:15 2026 GMT
Not After : Jul 29 07:00:15 2026 GMT
Subject: CN=fe0368169e2fff6d346b3e367ffe31425d0df7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:ec:76:cb:02:fa:cd:14:5e:a3:d8:53:1b:
e4:ea:dc:67:a9:18:b3:d8:9d:b8:8c:0f:ba:5c:98:
96:a3:25:25:a6:b2:a1:c8:20:d0:fe:d4:25:88:5d:
10:c1:99:5d:ba:79:96:ad:b4:0e:0b:b8:84:1d:bb:
06:a4:d5:b5:80:b8:7c:79:f7:f8:da:35:b0:4c:40:
da:1f:68:81:10:73:32:f3:cd:d9:11:59:dd:9e:59:
74:27:f0:ae:e4:f5:31:62:52:3c:1f:96:84:22:1f:
72:e2:09:67:fb:c2:08:dd:3b:38:d1:76:02:c5:08:
b0:35:4e:d3:8c:0a:39:04:64:2c:26:d1:15:be:99:
39:90:82:37:e5:a8:c7:bf:c9:45:d8:22:97:68:fe:
1a:aa:a0:a6:3d:8a:ec:22:d9:ab:6b:76:8c:5f:7e:
0c:91:1c:f8:7a:79:34:ac:d0:22:0b:01:32:97:6e:
c9:96:b4:3e:ac:eb:e0:d7:fb:ec:cc:21:d0:51:a1:
ff:64:82:dd:d0:b0:01:ab:5f:0c:ce:00:4e:67:91:
ae:0e:c2:e8:e0:d5:0e:dd:06:a9:a1:d2:5b:53:85:
71:37:df:a3:6a:20:03:de:c1:62:b2:c5:b6:0b:42:
8b:a0:b3:e8:3e:1a:5f:10:45:b7:9e:60:cd:12:ff:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:68:16:9E:2F:FF:6D:34:6B:3E:36:7F:FE:31:42:5D:0D:F7:A1
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:cf:ba:53:6e:07:82:7d:c7:24:36:be:b1:04:3e:48:8b:
05:02:81:b5:69:2a:8a:39:0f:f6:80:da:b2:34:17:0c:dd:2a:
1b:db:39:d1:12:10:41:df:a2:82:ce:83:ad:dd:af:1f:9e:65:
b2:df:d0:76:b3:3e:49:e3:ab:28:3e:89:ef:b0:1b:6c:f9:62:
46:e4:58:09:d7:71:dd:ba:a6:db:11:c6:02:6f:f9:60:eb:9c:
de:64:19:f2:c1:96:ef:23:4b:23:4d:4c:50:de:3e:5f:b0:0b:
f2:26:55:0e:af:a5:a7:9d:24:4a:85:37:fb:db:a2:d3:b1:d6:
7c:27:4e:b4:74:f2:63:32:85:20:16:2b:00:f6:79:7c:be:8e:
8a:5c:d5:09:ef:c3:11:58:b5:b6:9f:2e:d4:88:aa:84:f3:bf:
bb:1b:17:f8:72:e6:36:63:e4:5d:1f:fc:c5:24:d4:ff:dc:6a:
08:6e:b3:cd:94:57:93:16:a3:8a:72:f9:07:86:b2:b6:f3:83:
c0:c2:b2:86:5e:fb:62:7d:97:d0:a8:d1:6e:47:35:07:6b:bd:
d5:09:51:07:1f:ad:63:4f:b4:1a:6e:16:f2:d7:1b:78:d6:e4:
d9:47:45:82:9f:9d:07:e1:3f:f2:be:67:8d:a8:cf:58:03:f5:
33:d0:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:33 2026 by rpki-client