Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: PBpjLhftLDsJEzHW01wZzIGWSISRlOWiC7uLvrHE9Eo=
Subject key identifier: CD:4D:1C:9E:E1:46:D9:CD:26:11:64:EE:27:CC:D3:98:A5:FA:F6:6B
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019EBEECD6A88EC1B8C710F88148ABB9CBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 01C0
Signing time: Sat 13 Jun 2026 03:00:52 +0000
Manifest this update: Sat 13 Jun 2026 03:00:52 +0000
Manifest next update: Sun 14 Jun 2026 03:00:52 +0000
Files and hashes: 1: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: nw86lqkpo1f3pelAutbyh8ag+P9iv2gVDV2+hRmqRIs=)
2: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
3: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:d6:a8:8e:c1:b8:c7:10:f8:81:48:ab:b9:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Jun 13 03:00:52 2026 GMT
Not After : Jun 14 03:00:52 2026 GMT
Subject: CN=cd4d1c9ee146d9cd261164ee27ccd398a5faf66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:e1:9a:f2:f7:be:58:89:f6:ab:dc:82:35:
72:dc:90:8f:bb:d7:7e:5d:a2:3d:df:59:34:7d:4b:
f9:fd:dd:cb:dd:c8:fc:47:f2:10:10:91:96:00:d7:
e7:c6:ae:6e:1b:93:00:17:71:e9:dc:c3:85:25:40:
fe:03:d9:58:62:11:5b:ed:52:bd:6d:bd:55:d3:06:
e1:92:37:1f:1e:b6:98:90:7e:cf:ce:e1:4a:3a:8b:
de:3c:5b:86:71:4e:42:a2:55:f6:76:5f:2b:88:2b:
73:0e:f4:ba:27:6f:34:9a:b2:49:d0:26:17:f5:fe:
73:b7:63:91:ca:80:fd:20:b3:67:0c:41:bf:8b:d4:
88:76:c0:33:77:7d:84:f9:ff:43:7f:4c:d0:9e:b4:
90:4c:f5:f3:41:41:4e:d3:c4:8f:5e:0c:d2:ec:16:
f3:50:9c:c6:9d:04:e6:3a:9f:b8:e0:7f:b4:07:74:
a6:e7:58:ad:e2:0c:ae:86:2b:3b:9b:df:a0:73:ea:
ea:0c:39:ca:aa:57:1e:8b:fc:9f:91:7a:79:8d:76:
58:ef:4d:1f:4d:ed:b2:d0:d8:b9:e3:f7:2d:fe:fb:
fe:74:b7:b4:15:21:26:40:75:3f:ec:1e:c9:d1:2b:
28:24:ef:39:c8:ad:1f:b3:4a:61:00:f1:9c:f0:57:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:1C:9E:E1:46:D9:CD:26:11:64:EE:27:CC:D3:98:A5:FA:F6:6B
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e1:fd:df:5f:ce:06:db:fa:14:0f:c5:06:51:1d:27:ec:79:
ad:40:ad:b4:ee:ad:08:15:26:19:f1:32:3d:4d:ea:3b:71:4c:
7c:f7:ed:09:8e:02:9d:4b:a2:ad:67:32:db:08:56:e8:0c:a8:
e9:70:2e:eb:58:21:04:e6:62:3f:b6:fb:00:15:87:87:cb:12:
47:d2:ed:10:8a:e6:e6:00:8f:8b:67:3e:e6:f6:9d:80:9a:b8:
79:3f:4e:9d:39:30:03:e0:4b:b4:64:8f:f6:67:0c:d5:4e:bc:
1b:b3:ee:04:2b:06:71:e6:4b:2a:07:4e:49:61:85:80:83:07:
d4:eb:50:c3:6a:f4:46:6e:8d:d7:b3:4b:49:28:9b:57:46:80:
67:8e:5e:04:b5:c3:9c:c4:d6:1f:a4:31:aa:52:77:f1:51:09:
4b:0b:d7:67:67:23:76:c0:4e:02:76:d5:35:ca:00:50:d7:3d:
a5:26:8e:c8:77:90:27:13:e9:ee:06:75:62:8a:70:c9:a3:1f:
4a:fb:2a:4f:8f:e7:66:a8:a3:32:a5:c9:1d:e2:89:c9:c3:5a:
c1:85:20:3f:53:ec:06:a6:9a:67:9d:51:db:27:5a:6c:05:87:
d0:e3:70:9f:f3:66:a3:01:62:df:ff:02:1c:22:27:4f:ed:d4:
a5:cb:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:38 2026 by rpki-client