Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: OPDbjnYLivofKzxjhyWm7x/MKRsnbzr1ecKYZL5i+Rw=
Subject key identifier: 63:E4:30:DD:34:29:D7:67:B8:25:15:0C:21:78:39:E3:50:97:54:07
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019CC298277B2FAF4C85492A222C9D860958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: B8
Signing time: Fri 06 Mar 2026 10:01:17 +0000
Manifest this update: Fri 06 Mar 2026 10:01:17 +0000
Manifest next update: Sat 07 Mar 2026 10:01:17 +0000
Files and hashes: 1: 5b2a6XWxXgUSZDKt5JWqFB4W1Qw.roa (hash: hBPbCPHByhSWsVt7qW7PZzgH1YZH0pwO5Lkd4emW/JQ=)
2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: poXS9Y64929XF4LYBX9Upa3hZvtZWfvpNp+018BxRHU=)
3: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:98:27:7b:2f:af:4c:85:49:2a:22:2c:9d:86:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Mar 6 10:01:17 2026 GMT
Not After : Mar 7 10:01:17 2026 GMT
Subject: CN=63e430dd3429d767b825150c217839e350975407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:6d:48:cc:d1:d2:b6:83:d7:7a:f4:31:aa:
41:dc:19:03:3e:7f:91:d5:1d:08:78:0a:80:81:74:
e6:f1:4a:21:20:5e:38:e8:7a:33:f0:dc:3d:d5:10:
f6:3d:68:f5:d5:b7:3a:31:27:1c:54:c4:f8:51:06:
a3:ee:d8:82:2c:96:35:2b:a6:d4:9c:ae:1d:12:dd:
43:c8:3d:b0:4b:dd:42:2f:54:9e:e5:a6:88:b3:62:
98:ae:cb:f6:0b:37:7f:d0:75:9d:48:34:ad:05:a6:
85:28:d5:96:3a:ff:2a:e2:52:ce:a9:d3:c4:ca:af:
c1:a2:df:1e:8c:61:ea:3d:69:60:d8:04:7b:3d:42:
30:bb:14:b4:26:9d:77:17:74:2e:20:46:f7:e7:c1:
4c:d9:95:67:95:bb:46:13:01:dc:b9:73:28:54:ce:
45:04:2a:f8:b9:c2:25:6b:9d:d3:d6:46:03:8d:88:
2e:11:f4:63:c5:0a:86:ae:bf:a5:85:4c:28:db:e1:
bc:29:52:81:85:79:85:a2:a0:30:7e:7d:ac:ae:10:
3b:68:3e:43:44:b6:db:24:3c:a4:de:ab:f0:41:4c:
27:d7:72:8f:f3:c6:54:b9:f6:c2:01:0f:be:7b:f3:
6c:0e:30:ff:a5:c6:aa:f6:e6:da:65:35:31:61:bf:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:30:DD:34:29:D7:67:B8:25:15:0C:21:78:39:E3:50:97:54:07
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:8a:36:17:b9:52:60:4f:57:4a:2a:c1:aa:9a:b0:53:79:
87:ec:08:db:a7:11:8e:3f:61:fb:7d:fd:63:fb:79:2a:1c:1d:
aa:d9:91:db:da:62:b3:75:b2:14:a4:0f:a0:08:ad:57:bb:69:
4f:03:b0:5f:1c:38:d1:42:a2:b3:51:47:dc:d0:f7:4e:1a:aa:
57:1c:af:40:4a:a1:19:14:34:a3:e5:31:b5:eb:60:bc:94:08:
4e:d1:20:77:cf:f4:3c:49:3e:44:bc:fc:5f:dd:8b:e8:39:16:
2a:17:b7:45:6a:67:25:c6:2c:ad:27:c6:1a:79:41:b6:b7:a3:
3c:04:dd:c0:21:37:98:15:e5:12:59:63:f0:a3:56:2e:a2:1d:
5b:5e:d7:a6:ab:9b:d8:c1:21:ec:64:52:c1:92:3a:44:7c:f4:
4a:75:88:17:de:f9:e0:6f:ee:51:12:ac:0c:3a:9a:a8:c1:47:
a5:aa:0f:98:fb:ef:27:30:ec:57:94:5c:a6:7a:2c:c8:5d:55:
f1:5b:0a:de:85:5e:58:3c:7f:97:8b:c2:74:44:b8:a0:f0:3c:
35:d2:43:d0:67:6e:e8:d9:35:65:dc:70:81:39:53:ae:92:6d:
85:84:19:93:95:2f:d6:73:54:77:67:48:ac:cc:f0:86:d2:99:
59:a9:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:37:58 2026 by rpki-client