Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: YJZeyfYmlzerxg2c19CdLi9vKSgBRrn+pa9QyB8+jIQ=
Subject key identifier: 8E:51:78:70:61:E1:5B:0B:DE:62:6E:59:05:A9:F3:C0:03:37:D1:F9
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019E29CBA1C7811D2ACD79148B74F8DADBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 0172
Signing time: Fri 15 May 2026 04:01:11 +0000
Manifest this update: Fri 15 May 2026 04:01:11 +0000
Manifest next update: Sat 16 May 2026 04:01:11 +0000
Files and hashes: 1: 5b2a6XWxXgUSZDKt5JWqFB4W1Qw.roa (hash: hBPbCPHByhSWsVt7qW7PZzgH1YZH0pwO5Lkd4emW/JQ=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: GYfT7R9kOw89LIzXi4s2lfOEUOWerqN2avvmuwZQZ9c=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:a1:c7:81:1d:2a:cd:79:14:8b:74:f8:da:db:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: May 15 04:01:11 2026 GMT
Not After : May 16 04:01:11 2026 GMT
Subject: CN=8e51787061e15b0bde626e5905a9f3c00337d1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:79:46:5e:bc:80:fa:54:ed:97:c0:c2:6b:
7e:3f:7d:d3:cb:99:64:1c:24:55:3f:e3:a9:89:cd:
6a:ad:92:f1:4f:c9:0a:01:19:62:c0:01:58:55:f1:
d5:6e:58:12:9f:4a:f9:b8:67:e0:14:a5:67:59:be:
fb:99:65:0c:63:d4:46:2d:7a:85:1e:88:3f:52:63:
af:a3:50:64:59:42:99:eb:de:bb:65:40:97:b1:da:
6f:7e:47:b1:21:3c:e3:5a:80:99:d2:42:2b:74:33:
92:f6:ad:3d:1d:94:a9:6c:27:83:98:5b:4e:c7:13:
55:74:3a:cd:2e:b8:79:e9:21:db:5b:86:eb:7e:e8:
6f:59:3e:98:3d:c5:ed:aa:d0:f9:f4:ef:10:ad:3e:
78:ce:ab:ad:33:90:d1:2f:0a:e2:8b:93:19:77:9e:
e4:6c:6b:65:ea:51:b2:f8:1b:05:08:72:be:b1:2f:
cf:78:30:72:21:db:c8:74:58:19:4b:dc:d9:a7:23:
1e:21:53:0e:38:41:a9:75:cc:a8:ec:20:f0:dd:de:
49:75:71:0d:b4:1e:21:5a:96:89:51:3e:4e:a9:32:
d1:68:58:90:05:70:a4:dc:85:b4:7c:0d:a1:2d:54:
f6:44:ea:a3:49:eb:ca:39:3f:0c:47:d2:f1:ba:c8:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:78:70:61:E1:5B:0B:DE:62:6E:59:05:A9:F3:C0:03:37:D1:F9
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f7:14:07:42:60:40:c7:fc:d5:c5:33:d5:1c:b6:61:75:f9:
74:cd:ed:c3:3b:7d:2f:85:c8:98:c7:11:3d:90:f1:8e:da:21:
5f:32:c7:13:c9:20:a7:a5:3a:e0:76:a7:f5:af:56:97:a6:e1:
b8:8f:d6:01:d8:16:25:7b:ea:a8:f8:00:5b:ef:44:c6:84:25:
57:d0:d6:a3:6b:51:20:f8:04:70:04:f6:dc:8a:94:3a:d2:91:
83:46:09:80:8d:57:6e:0d:41:f8:03:18:28:21:dd:95:94:e8:
60:49:98:f8:fb:a9:3c:a4:0c:a5:87:f4:a7:68:f3:f9:eb:17:
c0:25:6f:55:d1:6c:02:b5:6e:14:b9:a9:ac:f2:26:7a:26:2e:
92:50:b8:88:5c:74:ee:37:00:c1:e5:72:10:11:ad:38:bb:f8:
1e:31:0e:60:85:5c:6f:36:2a:75:ff:d1:a9:83:9c:aa:87:dc:
6f:52:48:fd:3c:87:75:ef:0d:1e:5d:8a:46:de:fc:67:9f:6d:
02:88:1a:0a:59:d5:19:ab:31:c7:45:80:b0:a1:c7:a7:70:69:
1f:d2:7b:16:9d:fd:37:fc:81:6f:7c:d2:bd:3f:d3:3e:2b:78:
58:07:3f:76:0f:42:cc:83:4f:bb:e0:fc:e2:f7:cb:96:6b:d4:
4f:a8:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:13 2026 by rpki-client