Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json)
Hash identifier: Uvj1CDV5xGvhiO6okXfqGHcl7Uz9Cqu9uIbAKj5pRdY=
Subject key identifier: 33:17:C5:58:D3:2D:0D:9B:AC:2D:86:08:B3:00:B1:82:CB:CE:FA:05
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 019F11F82AF1375EFD71B79E6AA39AA7A2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
Manifest number: 01EB
Signing time: Mon 29 Jun 2026 06:01:44 +0000
Manifest this update: Mon 29 Jun 2026 06:01:44 +0000
Manifest next update: Tue 30 Jun 2026 06:01:44 +0000
Files and hashes: 1: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: ZpQeu97Gvc3g3K4smmscLljcA7EcP/41IRPC+fuV7OM=)
2: WmlDEUeRJgEuT9FiOgoBRemRFYU.roa (hash: X4+5Ojmd3HzQvP5UtGyFLElK9M6t4MEOrTqB6Wxff40=)
3: kv9pFGmNrnrEn3iG31AcZNVME2w.roa (hash: V3qQrFdx9pYmcJm3jWVMOZZb4mhzpn6jHrRFgXqAAtg=)
4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:2a:f1:37:5e:fd:71:b7:9e:6a:a3:9a:a7:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Jun 29 06:01:44 2026 GMT
Not After : Jun 30 06:01:44 2026 GMT
Subject: CN=3317c558d32d0d9bac2d8608b300b182cbcefa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:7f:88:41:d3:c3:10:09:81:3b:6d:cb:3b:
65:c6:af:dd:b2:23:78:a0:27:d9:72:eb:7a:1c:f8:
68:c3:72:25:69:1a:5b:0b:8f:a3:59:81:5c:3e:0a:
85:9b:64:d4:4c:29:26:40:2f:e5:5a:2d:e2:b2:3a:
39:5f:41:02:9d:35:a2:9d:38:41:ba:7f:1f:54:84:
1c:88:27:c9:37:52:12:65:0d:29:c4:45:4e:96:d4:
ae:7e:66:85:53:ec:68:a5:d8:54:a9:04:cd:f7:c7:
4a:1c:89:f2:bd:2d:96:89:c0:8b:6d:dd:1f:a4:ae:
2c:9f:ef:dc:bf:eb:44:27:f4:37:58:cf:9a:6e:ef:
0c:e9:ab:a4:49:3c:c5:99:4f:34:fe:9f:00:aa:e8:
39:f7:75:90:a0:e8:b1:fc:60:9d:66:bd:82:8c:4d:
06:0e:93:9a:d0:81:89:20:48:57:a8:f7:d6:15:81:
fa:df:74:d9:c1:01:9d:1a:bd:f5:54:39:6e:fd:46:
90:9d:c5:85:13:b1:b9:c6:74:9e:f4:b3:da:4c:a1:
29:73:7b:03:bb:fe:9f:ba:7e:f6:4f:78:e3:6d:60:
92:e6:18:c6:d5:8a:a4:00:08:c2:7c:28:12:8e:91:
f8:2c:0c:b6:ce:26:87:a4:4e:11:54:f0:16:0c:ec:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:C5:58:D3:2D:0D:9B:AC:2D:86:08:B3:00:B1:82:CB:CE:FA:05
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:63:69:20:ff:ab:9b:4b:d1:a7:5f:71:6a:06:7f:f0:11:
1d:34:7c:71:b5:f0:5f:22:5d:7c:37:3e:0f:66:07:b1:ef:29:
51:f2:f2:9b:cd:90:8f:fd:d8:3b:68:14:05:eb:4c:5d:cd:99:
34:50:ff:e4:ca:9c:45:7c:c7:91:4f:1e:00:8c:4f:21:cb:c9:
f3:70:c2:bd:33:8c:8f:d1:8a:86:f3:08:f9:04:61:8b:f1:85:
d7:f0:d7:86:19:94:e6:97:41:12:cd:1f:61:ab:1c:a1:c0:e1:
32:dd:ea:df:18:ad:3c:56:4b:20:df:aa:6d:4d:a1:a7:64:aa:
2a:e8:22:bb:3c:90:7d:85:2b:35:06:04:f4:7b:b4:48:df:94:
d0:d3:67:70:24:1e:3d:c5:e6:f5:75:4e:34:9e:54:95:2e:e1:
35:90:74:5f:fb:2a:5d:9e:45:28:16:c8:d2:dc:f0:34:cf:34:
c8:61:f7:50:06:db:a5:3f:8b:64:5f:f4:a8:5b:f3:0b:98:4f:
69:87:c6:b0:57:ce:d3:6b:78:63:09:73:4c:9a:2c:ba:68:41:
58:fa:52:3f:74:9f:42:06:01:ea:79:aa:f3:67:ba:b5:b4:f5:
d3:1b:f9:81:c8:c8:23:ff:14:b1:93:0b:f2:4a:bf:ed:e8:d3:
16:d4:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:38 2026 by rpki-client