Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: ZoXABCLaN5JUcHAEZN3TlhRixIWyeA8v15D+mlsVjrU=
Subject key identifier: C3:AC:40:D5:51:70:D7:20:AD:90:12:03:F6:86:3F:28:76:44:FF:C5
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019EBE111CBFA853FC55D0618556F02779F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1672
Signing time: Fri 12 Jun 2026 23:00:52 +0000
Manifest this update: Fri 12 Jun 2026 23:00:52 +0000
Manifest next update: Sat 13 Jun 2026 23:00:52 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: 9HMO4i6/9nvxxbYsWiRZR0xOK5RXKo8Rnt1cztpigS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:1c:bf:a8:53:fc:55:d0:61:85:56:f0:27:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jun 12 23:00:52 2026 GMT
Not After : Jun 13 23:00:52 2026 GMT
Subject: CN=c3ac40d55170d720ad901203f6863f287644ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:33:ed:1d:28:d5:31:ac:56:83:5a:d4:d4:
7e:3f:bf:46:c0:32:05:af:d1:c4:05:3f:bb:76:14:
92:dd:ff:f3:d8:ad:ee:45:58:d4:18:9e:50:f3:1c:
ff:ae:c3:11:59:af:ea:18:e0:73:9a:32:83:fc:7e:
52:04:fd:25:56:b1:0e:38:46:aa:31:6f:17:9f:f3:
c3:10:a7:57:28:0c:9f:f2:9c:47:b8:b4:0b:1f:6f:
0d:93:39:52:86:a1:b9:8c:41:b1:18:4c:17:53:0a:
f3:4a:7d:11:7c:14:41:dd:1c:5e:49:0a:c2:51:d5:
87:ea:14:6f:7d:12:b1:54:61:49:cb:e8:be:ea:b0:
58:19:25:e8:62:23:58:fd:16:c0:da:bd:16:56:35:
dc:09:07:11:2c:dc:a6:a4:cf:f0:01:dc:42:e2:3c:
ba:58:fe:58:40:39:d2:fd:c9:d3:2b:02:16:20:d7:
cd:9e:ae:b4:7a:3e:1f:e9:df:1f:75:20:c8:07:39:
55:07:b2:b9:f0:ac:b0:77:d3:ff:d5:91:c9:a3:13:
72:29:64:54:c9:f7:ce:86:73:bd:e3:77:5c:e9:c7:
79:5d:e4:48:cc:e7:47:39:e1:2d:13:8c:39:45:bd:
22:27:e6:43:23:ab:06:07:12:ec:b9:4e:3a:2d:b1:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:40:D5:51:70:D7:20:AD:90:12:03:F6:86:3F:28:76:44:FF:C5
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:f9:00:e5:91:57:a3:21:6f:22:b1:19:d6:87:d7:2c:52:
58:10:4f:06:04:d0:fa:ac:67:94:57:17:91:af:ac:bc:1f:0d:
48:b6:d4:0f:97:b1:e7:c4:93:22:5b:00:80:a6:17:3d:ac:07:
23:c9:12:85:4e:06:71:60:d6:c8:26:83:f1:c6:b7:65:d9:dc:
d1:75:ad:3a:a7:c0:d7:17:9d:aa:86:15:cb:14:3b:0b:00:ae:
ee:11:8f:11:08:4f:bd:ea:5d:85:f9:ca:53:0a:47:b2:8a:ba:
30:94:e1:4c:d7:42:04:ba:bc:20:25:39:77:05:7f:9c:81:13:
a3:c8:99:31:f6:1d:5f:ed:b4:2f:30:18:2d:c6:b4:b9:4d:fc:
98:4e:1b:3c:1e:43:6c:1f:0b:53:d6:99:fd:61:dd:cf:26:5a:
d8:d4:b2:7c:c1:27:4b:8f:86:9d:8b:67:2a:11:bd:ab:3c:c2:
90:f6:9d:89:28:50:d1:aa:bc:db:c6:21:ce:52:5e:f5:2c:20:
ff:e2:86:dc:db:6c:51:1a:01:60:c5:86:89:86:fa:2b:60:e4:
2b:53:cc:16:8f:42:27:ab:b7:7c:57:db:bb:d9:cf:b4:56:c5:
16:6e:b6:9c:80:b0:94:38:61:c2:ef:c4:ee:ed:a2:88:2a:5f:
2a:54:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:53 2026 by rpki-client