Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File: CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier: AQwVBINuWTL4fNbDBpsoZGXwxSToMUZiFg6gktqOd98=
Subject key identifier: 8C:43:E8:47:34:7F:D2:B7:56:C6:4D:9A:A1:2F:8E:24:6B:2D:48:03
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 019CACEB68872ACDACDA1126B23C95A18F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number: 1482
Signing time: Mon 02 Mar 2026 05:00:34 +0000
Manifest this update: Mon 02 Mar 2026 05:00:34 +0000
Manifest next update: Tue 03 Mar 2026 05:00:34 +0000
Files and hashes: 1: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: s0F+II3BEU0Lt+L6Fb6UavZCT51My1DujP3nmhCrg1U=)
2: Zd7N4oi7jgCKvlVl_PSF0xPERYA.roa (hash: EyGQp9Tr3UHMVF5vszwF0WIX2jRn29S+5KpDje4nblg=)
3: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (hash: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw=)
4: gebfehKBm0ZMvC6QIM8PvsoEboo.roa (hash: IX5MGc/yeIa0cd1NLArqnrmm5WQdn3pQJr9AOfiIcCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:68:87:2a:cd:ac:da:11:26:b2:3c:95:a1:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Mar 2 05:00:34 2026 GMT
Not After : Mar 3 05:00:34 2026 GMT
Subject: CN=8c43e847347fd2b756c64d9aa12f8e246b2d4803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:6b:9c:fa:ab:74:b9:c9:73:f3:0c:1c:19:
bd:6d:5c:01:72:86:f7:b2:70:22:c7:93:ce:e3:9a:
60:0b:9a:ba:12:54:3b:29:66:62:e2:e0:c7:bb:e4:
58:55:49:ea:2e:6c:64:e7:a6:80:80:16:95:d1:c1:
91:c0:8a:ff:c9:59:8f:db:4b:58:c6:41:41:9e:ef:
a0:b7:f2:1e:64:5f:7d:4f:21:9c:82:76:c8:9f:d8:
ee:b2:41:b3:74:ea:4a:c8:1d:3c:84:a1:dd:76:85:
2b:82:ce:40:e5:5c:23:77:38:b4:96:4c:c0:d2:d0:
e8:95:69:f9:05:26:bb:30:5b:44:bd:c1:7f:83:be:
36:65:7b:17:62:1f:c1:44:fc:11:74:a9:0a:e8:e3:
d2:7c:7b:92:53:55:f4:9f:3c:3f:75:c6:d1:c1:64:
b9:cf:7e:32:d6:8a:88:6d:1f:c0:4b:d3:4e:2e:11:
43:dc:cd:2b:b2:96:f9:ac:f4:27:1b:8c:d3:4e:b7:
25:f3:47:7f:68:eb:04:95:29:16:58:1d:dc:16:46:
86:07:82:db:02:86:11:e3:cc:0d:8c:59:a3:69:51:
ab:3d:f0:ce:f6:de:4f:b5:7c:a2:e3:ce:7f:65:1a:
1a:cd:58:50:6a:cf:44:b9:36:13:81:30:9a:6c:0b:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:E8:47:34:7F:D2:B7:56:C6:4D:9A:A1:2F:8E:24:6B:2D:48:03
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c0:e2:10:f7:4f:c8:bf:9d:4c:d2:81:64:91:20:ed:13:73:
8f:98:a7:07:8c:26:e1:c8:ba:f3:08:1d:9c:ce:03:ed:3f:64:
62:8a:84:a8:7d:98:8c:6a:75:32:17:77:10:45:b2:ef:64:76:
de:1e:e6:08:30:e0:a1:25:0f:a9:47:73:0d:0c:6c:b3:69:c3:
30:de:fb:20:d3:1b:df:1b:c5:6c:4d:8d:46:36:f8:5c:e3:a9:
d0:b4:d7:f8:4b:68:58:ec:5f:68:39:ac:c7:70:b1:b2:b5:7b:
2e:90:33:d4:df:af:a8:33:88:ca:af:0a:0e:41:82:a8:12:31:
c9:26:87:40:dd:68:e2:32:fc:b3:90:50:7f:8e:00:95:59:18:
3d:ab:1c:eb:2c:36:7a:ef:f3:d7:32:61:7f:88:ec:98:63:14:
0b:2b:b6:28:f9:53:ec:3e:c8:27:31:e1:b1:b4:ff:b5:e7:39:
28:8f:0e:6d:b9:73:2c:6f:b6:30:f7:f8:c9:12:3f:7f:85:40:
8b:f8:33:dd:75:69:44:2c:b5:66:0e:50:69:2d:93:b6:29:39:
22:4a:c5:83:e4:51:bf:69:4c:50:bd:64:31:4a:0c:3c:ec:11:
bb:8f:4c:06:a3:62:3c:e6:12:32:77:eb:d5:53:6e:05:bf:38:
7e:e5:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:55 2026 by rpki-client