Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: Y+B+L6nuu+WxvYR+aNLO42ILPZ0qh5h1lXp+gvZCF0g=
Subject key identifier: DE:61:64:6D:FC:E2:03:CC:B0:AE:61:48:70:64:A5:50:34:2E:6D:D7
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019FAA875CF846D217E4747954824A63BDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 023A
Signing time: Tue 28 Jul 2026 21:00:25 +0000
Manifest this update: Tue 28 Jul 2026 21:00:25 +0000
Manifest next update: Wed 29 Jul 2026 21:00:25 +0000
Files and hashes: 1: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: aWqU6b69ywGXFOq7d2jKiGEAzUgiTOZ9HoUqHB3OH64=)
2: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
3: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:5c:f8:46:d2:17:e4:74:79:54:82:4a:63:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Jul 28 21:00:25 2026 GMT
Not After : Jul 29 21:00:25 2026 GMT
Subject: CN=de61646dfce203ccb0ae61487064a550342e6dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:4c:0c:fc:b3:2d:83:9c:2a:ba:6b:5e:d4:
28:0a:aa:ab:89:2b:fb:e8:6f:e7:12:d6:4d:69:3f:
9e:23:0a:bb:db:57:ff:91:db:bd:57:eb:20:4f:ca:
77:57:c6:91:71:af:9b:b6:c2:22:ae:ac:1a:24:0f:
f0:83:88:91:29:21:55:fc:6f:64:ea:ad:70:b7:19:
c9:0c:82:d3:be:13:ce:55:9d:5d:13:79:ef:f2:1a:
47:c4:81:12:73:5a:30:f3:bb:45:a2:72:eb:59:9c:
29:c7:67:df:8a:86:36:69:ab:d2:dd:f2:cd:7e:73:
ee:96:6e:8c:14:ce:67:23:fe:84:96:e4:6e:54:2b:
c7:36:7d:a2:9a:96:39:af:de:8d:8f:72:c7:aa:1c:
67:92:2c:a6:94:b1:c3:44:bb:44:6c:59:d6:2f:36:
76:45:d8:a6:21:27:82:3e:1f:79:6b:d0:94:8f:5b:
19:a6:58:67:88:56:4b:cf:03:ec:06:fe:a4:fe:5b:
04:e5:cb:b4:f5:6f:dd:12:1b:5c:31:dd:ca:15:45:
7e:6c:ce:ee:7f:8b:c5:e7:83:cb:75:22:c0:1c:17:
a0:d3:4b:2e:ff:4a:85:72:57:3a:ef:e6:74:6b:0b:
02:7e:6a:cc:ee:58:89:41:f0:85:6e:23:42:90:2c:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:64:6D:FC:E2:03:CC:B0:AE:61:48:70:64:A5:50:34:2E:6D:D7
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:16:52:a9:56:ab:dc:05:ce:7c:4f:59:8b:17:65:f3:6e:
44:5a:75:89:7a:b5:b8:17:75:9f:e8:96:3b:4e:fe:0e:dc:0e:
93:3e:f7:b7:6a:20:9e:a6:9a:f5:a7:59:56:c5:61:0f:23:91:
04:5b:8d:f0:6a:74:ab:fb:a5:5c:78:9a:19:b9:76:19:2c:d5:
fa:a2:60:63:90:0c:70:af:b6:9c:38:65:a2:43:87:48:51:a7:
b6:d2:ff:02:7a:a7:56:60:ac:ca:b3:23:52:fe:4f:3f:b9:4b:
d6:50:32:4a:7b:02:c3:70:a3:02:ec:f1:aa:b6:1e:00:76:34:
16:56:8f:7c:64:11:d9:21:b5:5e:ad:9b:1d:40:69:8e:2e:77:
8a:d4:ba:cf:cf:1f:9c:dc:ec:6f:77:99:0e:16:b7:2d:c3:c3:
74:e2:e6:45:9d:52:83:91:07:aa:6e:ad:ca:33:b1:a3:86:25:
0c:8e:7f:e0:a0:cd:0d:68:25:00:fb:76:4b:7d:91:f8:54:7f:
41:05:9d:14:f5:6f:75:a8:f0:bd:c1:34:57:be:ac:28:5f:14:
35:76:12:c7:00:13:66:a3:43:7a:93:77:67:8b:65:51:79:1c:
f6:05:fc:51:38:84:35:a1:92:bb:9a:14:d7:7c:5f:e9:2e:a2:
e1:66:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:45 2026 by rpki-client