Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: R5PcXFybyA1Q/VX+xNoub4e8RM46IFtwosAKK9K2uuM=
Subject key identifier: 09:86:3C:94:D8:AB:0A:77:44:35:23:08:76:B3:C4:BC:F3:DD:5D:55
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 01A0D538D52917B88216AFB16835C3739A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 02D5
Signing time: Thu 24 Sep 2026 21:01:06 +0000
Manifest this update: Thu 24 Sep 2026 21:01:06 +0000
Manifest next update: Fri 25 Sep 2026 21:01:06 +0000
Files and hashes: 1: Bz7pimrAPn_drIt3hwTMVQrO7_s.roa (hash: hAiaXIxPUqnmkWArseV5KiXxTVvTzSgWXYHTg8qnn7Y=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: 6MulnzZo7UgX7Slts9e66+eqHfBdrlA3Ta40OxWouIs=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
5: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:d5:29:17:b8:82:16:af:b1:68:35:c3:73:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Sep 24 21:01:06 2026 GMT
Not After : Sep 25 21:01:06 2026 GMT
Subject: CN=09863c94d8ab0a774435230876b3c4bcf3dd5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:32:3a:94:1b:0f:1b:f1:31:9b:f0:be:f8:
80:0d:9e:9c:c1:5f:8d:93:57:c4:63:b7:7a:89:b2:
7e:63:be:90:07:72:7f:ba:80:e6:d7:ac:b6:bc:91:
38:52:36:c1:e0:07:24:a2:3e:4e:d0:47:df:bd:29:
2e:ad:87:b0:81:5b:d6:34:30:ec:a2:c7:f8:21:2f:
51:c2:80:8a:6d:6b:15:f4:e9:cb:b5:01:76:91:df:
c8:57:e9:32:6e:a4:90:40:eb:ab:7c:29:5d:e2:cb:
4d:59:1d:9e:af:6b:04:74:13:41:22:7d:4b:84:0a:
2b:14:33:46:bb:e6:dc:f1:f3:72:c3:75:b2:54:92:
68:f0:7c:f2:89:36:17:41:63:72:08:80:87:3e:be:
aa:9d:94:82:89:96:6b:78:b7:d2:a5:b5:43:e5:1a:
41:ab:51:52:46:5a:ce:d7:63:89:a8:ca:d0:e3:cb:
be:ee:59:f1:e9:22:73:00:46:00:87:9c:19:25:bb:
d5:41:46:37:78:61:0b:07:29:67:5c:b8:80:8c:e7:
16:29:86:fd:23:dd:e8:2e:7f:cc:1a:77:2f:b6:f1:
31:66:5a:38:4f:33:2a:cc:8a:32:8c:d8:c0:5c:1e:
b1:dd:10:ec:c9:34:3c:45:20:5e:f3:6f:b8:ec:e8:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:3C:94:D8:AB:0A:77:44:35:23:08:76:B3:C4:BC:F3:DD:5D:55
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:1e:d4:79:ce:ce:d8:f9:e9:f0:b1:7c:9f:73:8b:b6:bf:
1a:d9:23:28:b9:be:ac:7b:da:7d:4c:ff:2f:f7:01:5a:48:68:
46:40:6d:14:33:84:a9:da:4b:9c:2a:75:fd:ad:5b:76:21:87:
9d:a0:7c:c4:77:c6:68:ac:a6:ca:ee:19:1b:8a:f4:98:8b:ec:
f8:af:af:ee:fa:ea:0e:cc:98:f4:6f:86:4e:11:c0:c9:bc:20:
a5:85:17:46:28:e2:06:21:5b:c9:ca:77:9f:49:b0:57:2b:64:
fb:b7:66:d1:33:be:84:58:e1:33:23:6d:23:ab:4b:99:fe:51:
31:9d:9d:e7:56:a3:64:2e:7a:f4:e6:f4:f1:2f:70:44:2e:ae:
8d:67:27:d0:4c:ce:dc:ec:13:8a:8d:13:8b:ad:7e:38:01:e2:
8e:21:17:dc:23:7e:64:83:2c:af:25:33:0e:7f:59:c5:1f:da:
54:c6:d5:8a:b4:07:ed:ef:76:c9:ed:b2:19:07:0f:ea:67:aa:
14:e6:44:d1:e8:5a:34:06:db:58:84:71:84:dd:61:dc:5c:ae:
48:2d:97:ef:4a:98:83:f9:33:4d:67:a0:f3:57:b0:b2:8b:5a:
54:e0:f5:21:89:4e:39:86:11:78:b3:41:c1:d0:0b:b5:47:02:
4a:34:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:09:19 2026 by rpki-client