Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: Hdf3OdxTk0+L3Rv0S3ldpNg/vEnTDR/P5AL3TAbIkAY=
Subject key identifier: C9:EB:0D:F3:EA:45:BF:5F:59:69:19:66:6B:5E:68:36:0D:A3:77:6B
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019EBDD9B1139FB3F54980C8D5A17DC49ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0D70
Signing time: Fri 12 Jun 2026 22:00:20 +0000
Manifest this update: Fri 12 Jun 2026 22:00:20 +0000
Manifest next update: Sat 13 Jun 2026 22:00:20 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: dy2NMl1B0v6DDfbA/D/lGYGwPQINPahF9C+cXQkXbeA=)
2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=)
3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:b1:13:9f:b3:f5:49:80:c8:d5:a1:7d:c4:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jun 12 22:00:20 2026 GMT
Not After : Jun 13 22:00:20 2026 GMT
Subject: CN=c9eb0df3ea45bf5f596919666b5e68360da3776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:6b:da:71:7e:90:fe:de:0d:30:33:de:9d:
91:1d:ed:e5:b5:0b:b7:62:de:cd:fd:5a:44:a9:73:
d4:f3:3a:02:bf:ac:97:51:b0:da:a3:2b:20:3f:18:
40:b1:03:01:00:18:00:02:25:c6:8d:07:e5:e0:bf:
fc:f2:c8:b8:01:6d:42:29:fe:b6:5d:ef:03:d4:32:
af:08:91:ad:59:5f:99:50:59:47:ae:62:7f:8f:c3:
5f:5c:08:5b:8d:79:65:b5:18:52:6a:0e:2a:47:66:
fa:7a:9f:f8:fc:59:a9:24:75:3a:fb:2a:92:3a:35:
09:1a:c2:1b:e7:cc:68:9a:1f:05:23:f2:1f:d8:ea:
24:cc:5e:c5:06:11:ea:f4:b9:ab:37:82:19:4c:45:
d5:c7:21:80:49:c4:d6:65:28:a1:be:74:ec:2e:ec:
5e:16:51:9e:bd:29:50:ec:07:a1:01:53:a9:9c:93:
5a:83:9f:d0:fd:62:d5:65:d6:4f:36:15:b6:34:dd:
a2:4e:47:2f:f1:5f:fd:a4:85:f2:07:39:e7:26:b8:
2b:20:4b:eb:6c:cc:ec:7d:8f:8d:af:2c:be:63:69:
6f:13:75:a2:18:a6:4d:2e:01:66:bc:17:bc:87:89:
ad:c9:11:aa:24:91:11:9c:29:9e:ed:23:64:02:27:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:0D:F3:EA:45:BF:5F:59:69:19:66:6B:5E:68:36:0D:A3:77:6B
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:cb:14:1f:2f:f6:7e:6d:e1:e2:f5:89:cc:b8:5e:92:8d:
06:aa:6c:9d:ca:28:55:84:50:72:dc:ad:81:90:93:4f:8f:e7:
21:93:20:43:8a:27:da:cf:0e:13:79:72:30:bf:e2:df:01:f2:
7e:3b:8b:cf:82:cd:2f:29:30:0d:e8:a8:ee:eb:c5:04:6c:72:
30:06:23:a6:62:ef:b1:fc:97:34:45:e0:ac:66:60:88:33:2d:
f5:1e:28:31:78:bb:75:32:55:72:64:4a:33:a5:a9:ac:27:d8:
27:31:b7:90:a1:c2:75:21:cb:9d:05:d2:09:23:c5:3f:38:c8:
bd:f3:2c:35:8d:07:88:51:e9:0c:d1:61:52:2b:6c:d0:cd:49:
6d:6d:9f:e7:00:1c:81:9c:68:ef:32:24:80:fc:fb:7d:b9:12:
7a:99:96:4c:45:76:d1:50:fe:89:83:d7:8a:43:2e:8f:5c:0d:
d8:f7:3b:bf:24:52:4e:ad:41:16:3f:03:31:4b:83:ce:a0:08:
8e:f1:6a:34:70:be:30:19:86:14:e8:36:b4:b3:b8:18:56:73:
aa:12:8e:07:18:dd:29:af:32:7b:12:c2:5b:4b:c6:cc:4f:6c:
04:6e:cb:15:57:a7:1e:a1:d7:7a:04:9c:72:f9:a2:e4:22:86:
c8:db:4f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692bETn7P1SYDI1aF9xJrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm
OTdhMjEwHhcNMjYwNjEyMjIwMDIwWhcNMjYwNjEzMjIwMDIwWjAzMTEwLwYDVQQD
EyhjOWViMGRmM2VhNDViZjVmNTk2OTE5NjY2YjVlNjgzNjBkYTM3NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGdr2nF+kP7eDTAz3p2RHe3ltQu3
Yt7N/VpEqXPU8zoCv6yXUbDaoysgPxhAsQMBABgAAiXGjQfl4L/88si4AW1CKf62
Xe8D1DKvCJGtWV+ZUFlHrmJ/j8NfXAhbjXlltRhSag4qR2b6ep/4/FmpJHU6+yqS
OjUJGsIb58xomh8FI/If2OokzF7FBhHq9LmrN4IZTEXVxyGAScTWZSihvnTsLuxe
FlGevSlQ7AehAVOpnJNag5/Q/WLVZdZPNhW2NN2iTkcv8V/9pIXyBznnJrgrIEvr
bMzsfY+Nryy+Y2lvE3WiGKZNLgFmvBe8h4mtyRGqJJERnCme7SNkAicXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnrDfPqRb9fWWkZZmteaDYNo3drMB8GA1UdIwQY
MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt
ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1
LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfjLFB8v
9n5t4eL1icy4XpKNBqpsncooVYRQctytgZCTT4/nIZMgQ4on2s8OE3lyML/i3wHy
fjuLz4LNLykwDeio7uvFBGxyMAYjpmLvsfyXNEXgrGZgiDMt9R4oMXi7dTJVcmRK
M6WprCfYJzG3kKHCdSHLnQXSCSPFPzjIvfMsNY0HiFHpDNFhUits0M1JbW2f5wAc
gZxo7zIkgPz7fbkSepmWTEV20VD+iYPXikMuj1wN2Pc7vyRSTq1BFj8DMUuDzqAI
jvFqNHC+MBmGFOg2tLO4GFZzqhKOBxjdKa8yexLCW0vGzE9sBG7LFVenHqHXegSc
cvmi5CKGyNtPMA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:53 2026 by rpki-client