
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: 9CJsMe+g9We5FhdmtZGsw15S/ZUgUD/VqiTuNB9bPJE=
Subject key identifier: 29:09:A6:18:33:9D:59:A9:36:84:A0:57:A0:1E:B3:B1:4C:F9:C6:52
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019FF9B6358975C5175E45D42650E246C4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 0263
Signing time: Thu 13 Aug 2026 06:01:35 +0000
Manifest this update: Thu 13 Aug 2026 06:01:35 +0000
Manifest next update: Fri 14 Aug 2026 06:01:35 +0000
Files and hashes: 1: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: imxUB4lQ/Q3F09ZMBn4yp2IvRWUeUWhzvbZUn2+x8ow=)
2: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
3: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:35:89:75:c5:17:5e:45:d4:26:50:e2:46:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Aug 13 06:01:35 2026 GMT
Not After : Aug 14 06:01:35 2026 GMT
Subject: CN=2909a618339d59a93684a057a01eb3b14cf9c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:2a:ad:2a:23:af:e5:b9:5c:b7:2e:b9:83:
e3:09:2b:e0:bc:cf:1b:eb:49:31:7b:04:a7:0d:a5:
ca:e9:79:64:3b:18:d2:ca:1b:49:6e:68:7d:56:50:
7f:7e:e3:da:17:b8:c0:f7:05:83:cb:9e:b9:d4:b6:
56:1b:9d:0e:da:53:65:a8:e8:02:93:bc:c8:5f:3f:
f9:58:0b:76:57:f1:23:fc:66:09:e5:fe:0b:15:21:
44:5c:d5:d0:27:d6:6f:cb:64:e0:05:e8:0c:18:e3:
ae:20:35:0b:18:46:90:35:61:1b:48:4e:b3:34:db:
73:55:2e:8f:8e:d6:9d:df:c4:85:45:a2:6c:36:31:
37:87:e6:de:eb:21:d4:e2:f2:6e:cb:80:3d:79:f3:
a5:35:d3:eb:9b:06:8e:e7:08:f9:57:6f:90:23:ef:
91:02:4a:c8:bb:aa:72:9d:07:31:af:1f:50:63:b8:
2a:1f:9a:dd:7b:8d:0e:ce:ec:63:01:7f:80:d8:7e:
4e:5e:ae:0c:b9:80:00:63:22:7f:34:78:00:90:47:
b3:73:29:34:65:4e:f9:6e:67:f3:37:5f:92:41:c3:
e5:98:44:c8:36:ef:e4:52:af:df:cb:08:4a:2e:cf:
ea:01:a9:3a:e7:14:d5:c2:35:44:2d:f0:ce:54:87:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:A6:18:33:9D:59:A9:36:84:A0:57:A0:1E:B3:B1:4C:F9:C6:52
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:00:ee:3d:90:54:a5:71:c7:9a:e9:47:6d:d7:10:ca:4b:d6:
87:b1:71:42:3a:2e:36:4a:c4:72:fe:a1:23:65:b4:a4:a5:18:
52:a8:9c:aa:8b:6a:00:51:41:8b:01:cf:28:90:35:19:62:ce:
84:ef:9b:cc:82:28:c7:d7:8d:4a:b1:d7:84:92:b3:81:2b:a0:
5b:da:67:c4:90:6c:e9:1e:81:60:0d:7b:d6:b7:1f:9f:23:97:
67:41:e3:26:4d:9c:58:32:f1:a1:cc:5e:2c:f9:4d:7f:b3:78:
7e:35:10:a1:51:5d:a2:1f:e0:12:d1:d8:9b:d0:1f:1e:f0:4f:
93:20:b0:34:cc:74:0f:97:aa:a5:76:39:1f:3d:90:de:d2:13:
fb:d5:8a:cf:5c:29:0a:3d:ad:e8:e7:30:93:6c:6a:60:69:81:
20:da:37:a5:94:ca:87:da:22:79:40:ec:e4:c3:5e:d2:fe:70:
a0:a6:f3:dd:93:ff:d4:9d:3e:d0:ae:aa:5b:82:d0:6a:a6:b1:
c6:93:63:5f:81:7b:c8:4c:33:92:32:c4:ea:20:f2:03:7c:0e:
45:dd:89:98:b5:d4:fe:5f:7c:46:82:dd:0e:fc:23:f9:4f:46:
b9:0d:7c:cc:60:80:12:61:d9:87:f0:2d:a4:d6:45:90:36:6e:
29:63:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:10 2026 by rpki-client