Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: /x1iPvoq6CpAYdPEc9JR68KS3Hqx5YSdpF3TwYLhrLo=
Subject key identifier: DE:12:2B:53:FD:9D:A9:88:D3:41:66:F7:5B:70:0F:51:62:66:E2:05
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 01A0EA770AE131DB7156BC0EA96DA7019F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 02E0
Signing time: Tue 29 Sep 2026 00:01:05 +0000
Manifest this update: Tue 29 Sep 2026 00:01:05 +0000
Manifest next update: Wed 30 Sep 2026 00:01:05 +0000
Files and hashes: 1: Bz7pimrAPn_drIt3hwTMVQrO7_s.roa (hash: hAiaXIxPUqnmkWArseV5KiXxTVvTzSgWXYHTg8qnn7Y=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: R2w1fxJjTKdG9Guw+5p1RIk2nxtgipy3FPvy++aexkA=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
5: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:0a:e1:31:db:71:56:bc:0e:a9:6d:a7:01:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Sep 29 00:01:05 2026 GMT
Not After : Sep 30 00:01:05 2026 GMT
Subject: CN=de122b53fd9da988d34166f75b700f516266e205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:57:01:90:7e:2b:9d:d6:24:09:4a:36:e3:
2f:fe:d1:bd:7f:3a:86:12:ef:5d:93:c2:4b:54:90:
e7:80:e6:a6:70:5b:e9:fc:9c:d2:31:b5:17:35:01:
ed:6f:2b:a4:2b:c1:e0:65:88:89:2d:3f:3c:9a:28:
61:e0:22:8e:c0:85:ad:27:2d:7e:12:da:c0:13:5b:
a5:e5:8a:4e:45:00:02:fa:bf:f9:3b:22:7a:1a:e2:
06:d7:0a:31:3d:60:de:b2:56:aa:aa:4c:5c:78:dd:
14:85:32:62:cd:5f:98:a5:43:a8:fd:aa:a7:14:21:
db:93:c1:01:3c:22:67:fa:83:1c:0d:55:21:8b:93:
c4:b1:ec:6e:44:ad:d3:4b:26:49:fb:a6:7b:4a:a5:
1d:52:03:b0:f3:19:38:67:76:ba:8f:b1:4b:86:40:
67:eb:2d:e4:26:84:d3:ff:3a:6a:af:0c:5e:2c:68:
98:c5:e5:1a:98:6c:ec:4a:8e:a7:e6:8a:de:31:7b:
33:3c:85:a0:c0:77:42:00:63:85:7d:11:db:33:3c:
18:fa:27:be:d1:36:62:2a:83:43:1e:bd:55:32:64:
31:a9:d4:09:01:be:ac:c0:d3:d1:ef:1a:c9:1e:59:
77:76:5d:1d:f2:25:4e:56:ff:0f:35:e2:77:85:f0:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:2B:53:FD:9D:A9:88:D3:41:66:F7:5B:70:0F:51:62:66:E2:05
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:51:ca:b0:d9:11:44:83:58:6b:4d:90:27:06:03:e6:7d:c2:
57:93:43:40:c5:a1:db:ce:e7:2c:81:2a:44:62:e1:a8:16:bd:
8b:d3:fb:74:80:27:29:4c:d2:ee:67:2a:17:09:36:cd:c2:58:
60:0b:15:a6:88:84:02:1f:09:63:48:d3:5d:7e:53:dc:53:f3:
e0:84:23:73:76:d3:4d:c0:1f:0e:b3:49:e3:63:d2:15:96:33:
68:c2:da:a1:02:a7:62:5b:32:ba:01:9c:4d:8b:14:99:29:45:
f7:61:f4:29:03:a3:14:76:b8:45:21:98:53:f1:2a:59:ed:52:
df:a8:72:e6:1d:19:82:f7:9b:e3:dc:0a:df:61:81:19:a7:49:
69:4d:1d:f8:7f:10:ce:83:c5:52:11:58:f0:26:65:dc:4f:3d:
3f:94:9c:a1:91:7b:6d:47:0d:20:0d:f7:ae:9d:fe:bf:f3:89:
0a:bc:c9:c3:67:10:08:7f:a5:e4:e8:1d:da:f2:27:e5:d9:0a:
4b:da:8b:f7:32:70:94:44:dc:0e:d5:7b:9c:55:02:99:5a:be:
60:16:40:51:31:4a:32:40:13:da:74:1f:e0:75:e8:9f:c9:bf:
d9:95:6b:4a:0b:64:a8:3a:45:20:b9:d9:10:5e:6a:2b:34:a0:
b8:fb:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:04:27 2026 by rpki-client