Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: mVzeg0+qJIhGQSglkClChgH4J2iBH0fQnduwiV5FZsc=
Subject key identifier: 7F:4E:BB:26:37:FE:8C:99:07:E2:79:16:40:B7:2F:D1:12:17:34:39
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019CAD59A1652E25FA2A4C837812FA9AECEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: AD
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: 5b2a6XWxXgUSZDKt5JWqFB4W1Qw.roa (hash: hBPbCPHByhSWsVt7qW7PZzgH1YZH0pwO5Lkd4emW/JQ=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: 66HgWWh+28F5x6gx+CKIeb9uOiLvuP7uc/YwUhIu5g8=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a1:65:2e:25:fa:2a:4c:83:78:12:fa:9a:ec:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=7f4ebb2637fe8c9907e2791640b72fd112173439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:49:cb:2f:ec:56:1b:15:12:92:71:0d:c3:
91:3f:35:78:04:0f:4f:ec:a2:6f:30:82:15:30:20:
10:f8:bb:6f:a0:d2:8e:57:e6:18:51:df:7d:7a:69:
f4:7a:f1:41:43:4c:f5:e0:28:5b:d2:63:81:a5:1f:
f7:43:31:71:dc:5c:22:28:9b:e5:64:a0:a5:47:4c:
fe:ad:9a:97:01:82:a6:83:15:d6:0b:2f:cb:7b:14:
05:3c:4f:0b:21:4d:a6:34:b9:ac:b3:c7:f3:71:1f:
c6:f9:06:32:59:21:ad:6c:8e:f6:9f:1e:e9:af:c7:
5c:1c:19:9b:aa:98:47:4f:a9:0a:f2:47:5b:57:ed:
57:93:9c:f5:c3:75:1a:33:52:d4:bb:8c:f4:1c:15:
1b:cb:f6:7a:83:ea:f0:ec:5c:af:1f:50:d4:2f:74:
6f:b1:11:0f:43:aa:33:3b:dd:1e:ca:a9:f6:f6:22:
17:ae:67:1d:ca:00:6a:2f:67:3a:8f:33:f1:88:6b:
c4:26:62:12:7a:c8:79:3c:8b:a3:7b:71:85:f4:a6:
fd:c7:d0:70:17:39:a8:a3:28:a2:3b:0c:87:65:9d:
49:a9:66:95:6e:20:32:0c:ab:b9:23:b9:af:24:24:
3a:ac:8f:7e:9a:fe:f3:ec:83:cc:27:6b:00:83:a9:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:BB:26:37:FE:8C:99:07:E2:79:16:40:B7:2F:D1:12:17:34:39
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5b:8e:ff:f7:c9:0f:85:76:73:1e:ed:20:24:ac:cc:cf:ce:
f1:c2:c4:cc:66:58:cb:7b:ec:76:6a:ec:21:34:02:97:a6:a4:
3b:ff:76:51:88:67:ed:66:ff:52:7b:3a:a8:85:6b:d5:27:35:
7b:c7:7f:a8:7f:00:9b:12:fa:30:d3:7c:56:41:ee:00:45:6d:
7e:51:7f:a6:52:88:44:ea:ca:9f:77:4b:c4:41:40:13:76:1f:
b2:e7:ee:f3:2a:e9:ff:dd:13:f1:9b:72:12:cc:97:01:5b:ec:
c4:26:65:ce:8a:b3:f6:9c:c3:58:9a:10:34:55:06:2f:20:3b:
be:55:c0:66:ec:6a:db:2b:5e:75:ac:63:2d:f1:ed:dd:e5:d3:
14:3e:b4:3c:61:ac:7e:2f:14:fb:e3:34:7b:da:01:fa:bb:bd:
46:70:b7:63:e4:bd:5a:46:c0:fc:7a:5e:1b:18:56:87:35:07:
a4:49:97:81:0f:b7:db:cb:8a:b4:90:3d:e1:0e:a4:fb:cc:81:
e5:dc:03:41:63:5c:49:09:9e:1b:21:f1:b1:f2:82:78:ff:7f:
a2:d7:77:d6:17:83:d4:e6:f6:90:f4:b5:5b:39:85:23:40:7c:
5a:35:5e:ff:f6:2b:51:02:3c:c5:04:b9:ca:36:e3:7b:54:86:
c7:2f:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:47 2026 by rpki-client