Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: 7eC3QjQ9xB0mYN+L4Uhd6h5U+IX5YeIJVXo0mjWKG7k=
Subject key identifier: C9:FC:59:2A:AE:7C:38:AB:BA:AB:D2:B4:AD:DC:0D:12:25:69:4A:11
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019D9A74C5AD8289D863D8C9A3E0AA0A3360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 15DB
Signing time: Fri 17 Apr 2026 08:00:37 +0000
Manifest this update: Fri 17 Apr 2026 08:00:37 +0000
Manifest next update: Sat 18 Apr 2026 08:00:37 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: 8YU8peiLvotL3DVMMyH0A/CxmDXWaSIEaZd8v0B8+1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c5:ad:82:89:d8:63:d8:c9:a3:e0:aa:0a:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Apr 17 08:00:37 2026 GMT
Not After : Apr 18 08:00:37 2026 GMT
Subject: CN=c9fc592aae7c38abbaabd2b4addc0d1225694a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:c0:cc:b0:9d:c8:93:3e:c9:24:8e:79:6f:
ea:69:44:e2:dd:b2:61:ad:62:35:6a:ea:7c:0e:ef:
26:62:e9:37:2e:0c:16:35:2a:40:a6:d0:23:af:56:
aa:44:3d:f5:bc:bb:37:22:9c:63:8d:62:24:f8:01:
02:09:cb:83:eb:41:a3:a0:ba:49:97:ed:39:d2:97:
10:bb:6b:4a:0a:ce:87:17:d7:b4:61:53:e3:03:5e:
97:56:b9:21:09:44:95:b9:33:7f:8b:f2:56:77:f1:
45:e0:7d:bd:fa:76:a9:ab:b1:f8:56:2c:af:ff:2a:
be:96:fa:65:43:c7:db:be:12:35:d9:27:23:ff:6a:
e2:7c:cd:ad:30:e0:2b:08:0c:74:40:db:58:a9:1e:
26:28:33:78:b9:1b:c6:25:76:6f:a0:61:91:fe:ee:
57:b6:18:ec:d9:62:b8:7b:38:b5:ed:56:62:f3:74:
7a:ef:f6:90:31:34:a5:69:eb:92:d9:be:d5:22:d2:
ed:b1:71:73:45:1a:83:98:fa:2c:aa:65:e7:80:b3:
db:55:96:62:f0:66:ca:00:83:be:f7:f8:50:c2:e2:
ef:e3:8d:14:b7:12:df:e9:90:7d:08:bf:09:79:15:
19:6b:ab:62:f9:0e:0e:f2:10:ed:12:08:81:19:87:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:59:2A:AE:7C:38:AB:BA:AB:D2:B4:AD:DC:0D:12:25:69:4A:11
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:34:38:8a:42:56:6c:b5:fe:76:ba:a4:ec:e3:ea:15:05:
2b:84:d8:d5:17:2c:32:a5:1b:66:c0:ea:ab:74:85:b8:14:8d:
aa:c0:73:e7:99:7b:a0:d9:80:06:e4:a9:ca:c1:2b:44:40:2a:
cb:ba:d7:e5:6e:ef:5a:5a:14:21:18:01:34:28:6d:fd:34:93:
83:12:79:83:26:02:b8:ab:31:39:0f:79:91:d2:33:52:b8:70:
8c:85:27:14:8b:4c:c4:08:80:61:11:b8:6c:91:74:c4:e1:73:
f6:1c:55:39:b6:bb:cf:5f:fa:46:c9:0d:89:54:66:16:de:1d:
a2:07:d3:55:41:42:61:f6:93:c7:75:02:23:23:28:7a:22:e9:
bb:55:68:2b:07:09:67:ac:9e:b2:6a:ac:19:6d:b0:4e:13:f5:
78:5d:b0:ff:6f:09:a6:f0:8f:7b:7b:9b:56:83:5e:c9:60:c8:
68:93:6c:74:34:7b:74:e6:18:4a:bf:b4:e8:eb:df:bb:c1:8e:
e0:6c:4c:a5:a8:a6:b0:32:ad:b6:1f:3b:67:5a:60:d8:ee:0e:
4f:81:51:5d:d1:9d:cb:a6:20:89:0e:0d:26:5d:a7:cb:de:d1:
57:26:79:39:77:dd:39:70:44:3a:73:b2:49:4b:e5:98:71:63:
f1:9c:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:14 2026 by rpki-client