Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: +UsPA+5KbwifAKH3/Ud76dC2GMSQCwi+5hyvWggQJWQ=
Subject key identifier: 92:CA:C8:BA:19:A0:6B:0F:69:7E:7D:30:4D:96:54:97:8D:14:8A:CB
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 01A171A604386671F0AC60EA72DAF8D9CF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 0326
Signing time: Sun 25 Oct 2026 06:01:07 +0000
Manifest this update: Sun 25 Oct 2026 06:01:07 +0000
Manifest next update: Mon 26 Oct 2026 06:01:07 +0000
Files and hashes: 1: Bz7pimrAPn_drIt3hwTMVQrO7_s.roa (hash: hAiaXIxPUqnmkWArseV5KiXxTVvTzSgWXYHTg8qnn7Y=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: 5TcOirbOOlavuCKPMeTiYFiYvjoIaWG+cgVsWZazeD0=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
5: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a6:04:38:66:71:f0:ac:60:ea:72:da:f8:d9:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Oct 25 06:01:07 2026 GMT
Not After : Oct 26 06:01:07 2026 GMT
Subject: CN=92cac8ba19a06b0f697e7d304d9654978d148acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:82:c8:69:a9:81:8b:f0:d6:cc:79:9d:5f:
b3:b4:be:75:47:fb:0d:27:c2:11:3b:2c:03:00:bb:
e0:3c:50:8d:2f:a0:90:80:6d:32:3a:b3:4e:32:22:
5b:3f:e4:ec:97:3e:a8:50:10:cc:2b:9a:53:3a:96:
04:02:05:04:0e:f9:91:db:02:c0:41:dd:78:b1:7d:
36:96:a0:c9:41:96:c6:ea:84:ef:17:bb:50:0c:a0:
41:6e:bd:5c:20:23:00:b7:96:ec:bf:f3:3b:f5:f5:
db:de:9c:69:d7:54:fc:66:e8:58:56:eb:6b:75:b3:
39:7d:d2:9f:f2:aa:dd:2f:19:97:b1:ce:ab:ef:f0:
59:6c:bc:01:a1:86:18:48:1d:11:b1:0f:69:51:1d:
c1:ec:e8:35:7e:33:b0:fc:d6:01:e9:03:28:bf:1c:
ab:79:46:4b:ad:be:31:29:fe:8f:40:b4:4a:b5:5e:
6f:cd:0d:1f:4e:29:c7:db:d7:bb:6a:db:f6:38:4b:
74:cb:41:62:a2:34:b2:3f:04:cc:31:4e:c6:f8:a2:
9d:9b:cc:5c:91:cb:41:71:29:72:0e:09:1b:1c:19:
6f:ae:e8:1b:08:3d:5d:df:1c:73:4e:c2:38:51:df:
a3:08:87:e5:ab:5e:8b:36:46:d0:85:43:36:0b:e7:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:C8:BA:19:A0:6B:0F:69:7E:7D:30:4D:96:54:97:8D:14:8A:CB
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4b:42:e1:73:db:c5:01:80:0e:63:38:b5:4b:18:0e:a5:73:
18:ae:40:9e:aa:0c:a8:f9:32:87:cb:f0:a2:37:85:73:35:f6:
f1:33:ed:eb:02:8f:82:b0:cd:42:b1:90:36:bc:e1:f4:a2:bd:
fd:1f:aa:17:7b:97:a3:8e:9a:1e:a2:f6:f9:7c:51:bc:c7:c6:
9c:c1:e3:4a:7a:e6:bd:2f:fc:14:3f:f1:4e:17:b3:ae:81:93:
68:33:79:c5:0e:93:fe:4e:6d:7e:04:45:56:71:c2:22:c8:a4:
b6:9d:df:23:c6:c4:56:0c:ef:3a:24:3f:18:86:61:e5:ed:ac:
7b:8f:a3:2c:9b:87:c7:4a:9c:ac:58:5c:49:12:79:66:77:8c:
83:70:f3:9c:9e:21:1d:5f:e7:96:ba:50:59:7c:31:02:29:2c:
be:ec:23:04:1d:e2:d6:3b:ad:9b:6e:18:65:81:5d:49:c7:7c:
9f:23:b1:4d:f0:b2:04:b9:ca:7a:d5:e7:f0:09:dc:17:8b:b9:
91:07:01:78:22:14:a4:29:46:f7:88:78:db:b5:83:70:73:1d:
e3:18:0c:da:3a:9e:f3:b5:da:03:26:af:cf:4d:cd:b5:86:11:
8a:09:90:c5:d4:ba:e8:8d:e4:54:4a:ca:32:3d:0a:19:c4:da:
71:ef:90:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFxpgQ4ZnHwrGDqctr42c+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTY4NmUzNzBkNmQwNjA4MTE5ZWViMDA2YzhhYWRhYWIw
NzhkMjIwHhcNMjYxMDI1MDYwMTA3WhcNMjYxMDI2MDYwMTA3WjAzMTEwLwYDVQQD
Eyg5MmNhYzhiYTE5YTA2YjBmNjk3ZTdkMzA0ZDk2NTQ5NzhkMTQ4YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8qCyGmpgYvw1sx5nV+ztL51R/sN
J8IROywDALvgPFCNL6CQgG0yOrNOMiJbP+Tslz6oUBDMK5pTOpYEAgUEDvmR2wLA
Qd14sX02lqDJQZbG6oTvF7tQDKBBbr1cICMAt5bsv/M79fXb3pxp11T8ZuhYVutr
dbM5fdKf8qrdLxmXsc6r7/BZbLwBoYYYSB0RsQ9pUR3B7Og1fjOw/NYB6QMovxyr
eUZLrb4xKf6PQLRKtV5vzQ0fTinH29e7atv2OEt0y0FiojSyPwTMMU7G+KKdm8xc
kctBcSlyDgkbHBlvrugbCD1d3xxzTsI4Ud+jCIflq16LNkbQhUM2C+fmDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLKyLoZoGsPaX59ME2WVJeNFIrLMB8GA1UdIwQY
MBaAFAmmhuNw1tBggRnusAbIqtqrB40iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQt
ODE3NjhjNjBlZTA4LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQtODE3NjhjNjBlZTA4
LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUtC4XPb
xQGADmM4tUsYDqVzGK5AnqoMqPkyh8vwojeFczX28TPt6wKPgrDNQrGQNrzh9KK9
/R+qF3uXo46aHqL2+XxRvMfGnMHjSnrmvS/8FD/xThezroGTaDN5xQ6T/k5tfgRF
VnHCIsiktp3fI8bEVgzvOiQ/GIZh5e2se4+jLJuHx0qcrFhcSRJ5ZneMg3DznJ4h
HV/nlrpQWXwxAiksvuwjBB3i1jutm24YZYFdScd8nyOxTfCyBLnKetXn8AncF4u5
kQcBeCIUpClG94h427WDcHMd4xgM2jqe87XaAyavz03NtYYRigmQxdS66I3kVErK
Mj0KGcTace+Qwg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:11:49 2026 by rpki-client