Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: olPcMwwDJkYY9qP/9sQcuLss1PaRyZ22Ims9HRUbtgk=
Subject key identifier: 2F:ED:73:2F:9B:4E:5A:DB:A0:24:91:90:52:CB:AC:E8:4A:AC:E2:84
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019FA9AC1FDD6D1299C7186CEBCB571F1878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 16EC
Signing time: Tue 28 Jul 2026 17:00:57 +0000
Manifest this update: Tue 28 Jul 2026 17:00:57 +0000
Manifest next update: Wed 29 Jul 2026 17:00:57 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: N9TJrBVzPf/12TAn9Q+4tVP7yaomWOEGGgp5KS0X5X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:1f:dd:6d:12:99:c7:18:6c:eb:cb:57:1f:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jul 28 17:00:57 2026 GMT
Not After : Jul 29 17:00:57 2026 GMT
Subject: CN=2fed732f9b4e5adba024919052cbace84aace284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:8d:96:21:12:21:42:ca:d5:cb:f2:37:fa:
ee:ef:ba:9e:18:11:c8:16:b5:95:43:a2:18:31:9e:
2a:55:1e:7e:1e:b4:34:11:42:db:93:ec:0a:fc:fd:
23:ba:2c:7d:d5:96:90:59:44:54:24:b4:51:99:9a:
ea:7b:f0:a0:39:11:44:65:ec:22:87:79:5f:e0:e9:
e9:7b:64:5a:aa:be:6d:6a:92:eb:27:d1:d2:d8:43:
81:93:c1:a7:a2:d7:ba:46:d4:f5:fe:25:f2:c7:f5:
15:97:69:b2:1c:df:e2:d2:a1:27:fa:57:36:02:49:
86:9e:85:55:3c:f1:de:16:cf:5e:48:56:54:dc:a5:
1b:ea:66:8b:3a:88:cc:39:7c:5f:d2:ae:48:b4:a7:
5f:56:5c:42:74:e2:99:c1:86:f6:aa:84:ba:c1:5d:
07:99:6e:69:5c:dc:77:35:b4:76:2d:5a:6d:e9:a1:
d2:f4:38:23:82:d5:0b:a8:40:36:ba:ea:2b:ee:e3:
89:9b:a0:39:c0:2e:3d:3a:82:82:81:d6:70:ff:98:
65:bd:73:5f:df:87:36:26:10:5c:ae:bb:85:7d:71:
86:63:74:59:bc:26:21:d3:f9:07:f5:1f:7c:fe:b3:
75:22:25:eb:55:71:93:0f:fd:d2:9c:39:f6:66:69:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:ED:73:2F:9B:4E:5A:DB:A0:24:91:90:52:CB:AC:E8:4A:AC:E2:84
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2a:46:30:d2:01:56:e2:ec:77:66:60:36:f5:8e:73:f6:a0:
79:51:4a:cd:2c:bb:7c:d0:57:97:bf:fa:43:5f:54:6a:37:1a:
c1:85:b2:02:73:be:4b:a4:8d:cc:95:cb:12:d6:be:14:d1:e4:
d6:f9:d9:79:bc:87:0c:94:57:6b:5f:7c:89:c3:8e:ad:d8:f3:
3e:ca:aa:f4:6e:ec:9f:46:39:75:14:55:2c:fa:d0:93:f4:57:
00:88:7a:2a:17:44:26:78:0a:f5:25:bc:63:a4:df:31:b4:1d:
ec:db:a7:0b:23:34:75:8d:79:6f:62:aa:16:55:0a:8b:df:d4:
d0:f3:2e:7c:23:50:d4:6e:fd:53:ce:87:c2:89:5f:b4:ae:6d:
a0:b3:eb:ad:68:bc:44:a9:89:e4:5f:2b:cc:d6:b0:00:40:9d:
e6:60:f5:49:a0:5c:fa:fa:a7:81:72:7c:e6:36:b6:04:e5:df:
c1:a0:60:93:18:33:a9:e1:87:4e:da:b0:34:fe:6a:f6:20:7e:
0e:da:c1:0e:5c:57:66:f0:18:d6:8d:6f:59:2f:79:ea:68:19:
8f:4a:32:d1:51:9c:ca:3a:af:2d:64:05:88:22:2a:ab:c9:d2:
9c:38:4f:d6:56:36:2f:42:58:12:d3:6b:b5:8b:07:21:58:01:
36:0a:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:36 2026 by rpki-client