Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: YnoHHNsTe1IdNJB3KCeHr9mWWHa6ziLqID6y0M8fFVc=
Subject key identifier: 62:C2:6C:92:17:EB:28:98:37:FB:7A:A0:6A:FD:10:6F:0D:8B:EC:23
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019CAAFD2B9AB181F381C6FBAA90B607E2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 155F
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: 1-GRTqjXQkFHtHIjRYwLZi1KTRJc.roa (hash: MSUgSHZW6Ea4DvJIbdr2FWIlr8/ozfs7TeeObXa1zoY=)
2: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: 9fm1WneYqOsDpLasJGm8AXgn3CWdtkTSA3/xnZovFTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2b:9a:b1:81:f3:81:c6:fb:aa:90:b6:07:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=62c26c9217eb289837fb7aa06afd106f0d8bec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:f6:af:c4:00:95:30:30:dc:d7:41:b3:bb:
95:d1:8f:2f:14:8a:ed:bd:c6:02:7e:b6:b4:ab:55:
97:0b:7f:e7:4a:60:84:47:46:ce:84:49:7f:d5:f5:
16:27:b7:70:51:63:14:0e:0a:18:1b:35:38:94:f4:
21:ac:e7:7a:da:86:15:b1:24:38:81:20:bb:94:d4:
76:54:1f:47:73:21:39:24:92:69:a7:79:4b:a8:8a:
66:47:99:9b:75:3e:59:28:d3:24:47:8a:36:69:f1:
a9:11:c8:59:1d:d0:a9:54:8a:15:18:18:e4:0c:3e:
4d:0d:04:61:73:29:97:ab:14:12:06:54:21:3c:81:
79:17:5d:52:00:f8:b7:09:dd:a9:3d:7e:09:00:f9:
41:48:57:d5:df:d6:09:d6:4e:cb:f8:9e:18:33:a4:
f7:ff:8e:68:a4:85:fb:83:b0:4a:23:91:8e:13:cc:
29:72:8e:94:73:cb:2a:af:ae:45:ca:22:4b:44:96:
67:d6:e5:4d:72:ac:a9:55:cf:33:5b:63:4b:d6:d3:
99:7a:ed:18:a6:31:bc:a7:1a:63:8e:ad:a8:2a:75:
b2:07:04:fc:73:b1:57:b7:62:ec:70:a2:b8:43:00:
d8:3b:ae:31:67:33:7b:8b:54:65:23:24:31:39:36:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:6C:92:17:EB:28:98:37:FB:7A:A0:6A:FD:10:6F:0D:8B:EC:23
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:8f:64:49:72:86:62:6d:d0:b6:d2:d6:6d:a1:6d:ac:30:
db:c9:fb:18:c0:f1:aa:56:51:23:29:61:d7:11:28:84:59:5b:
5f:de:e9:92:54:fc:2d:90:a7:5b:b2:b9:79:49:29:5f:c4:52:
cd:37:9d:7c:69:3d:ee:80:9b:9f:7e:f0:9d:89:c3:3f:8e:d1:
46:71:ad:62:24:6d:47:82:91:54:dc:f9:d8:5c:58:18:b7:d8:
51:67:0b:c8:35:bc:b3:5e:02:db:82:1a:5e:3c:33:78:e9:3e:
f2:60:e1:6f:a7:fd:dd:93:77:9e:75:fe:36:fc:3d:9c:5f:7a:
09:f0:21:63:67:d6:28:a4:43:91:77:ac:0f:e9:4d:49:e2:85:
9d:3f:0b:ef:41:39:8a:b3:dd:9b:1e:c5:45:f6:4d:96:a6:bb:
a8:64:6c:88:44:46:8b:77:f6:a9:24:94:a1:00:41:3d:6e:64:
9d:bd:99:ff:0a:f3:60:5e:53:e4:31:97:05:13:08:c4:7e:5e:
84:4c:d8:10:4a:12:17:9b:0e:40:78:8d:3a:40:d4:66:7b:8c:
7a:51:30:2a:a9:1e:84:f7:8d:93:89:54:16:fa:d0:b1:ac:ed:
95:b5:40:69:ff:67:82:29:38:f6:30:ee:1c:ab:c3:77:0d:06:
a4:cc:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:20 2026 by rpki-client