Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: OXouUS27Z+2Iq62ZhGLrqPVWjZ8O8WV0CGmmpNnPf+s=
Subject key identifier: 7E:DB:E2:98:0A:EC:4E:A6:E6:86:7C:88:33:70:65:2C:B1:8B:6D:E5
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019CAC1057A310AB8F35E0FC0263C4FE3738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 120A
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: iOISIhb/L9YiT4/AUoAwMyRKF3VCfA3jDeWJs4nyCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:57:a3:10:ab:8f:35:e0:fc:02:63:c4:fe:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=7edbe2980aec4ea6e6867c883370652cb18b6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:a9:40:95:be:eb:ad:1a:7f:9e:3a:2a:51:
b5:0b:5b:8d:18:0c:bd:2b:e0:a8:18:0e:5f:5f:ea:
ce:88:0a:39:0c:56:2d:93:40:c0:80:5c:a5:5a:e7:
7a:a0:96:59:ad:1f:8a:1d:4c:a5:00:04:ad:d8:3c:
f2:f3:81:97:34:39:93:e4:33:9e:bb:f1:db:72:c9:
0e:af:3a:41:ba:d9:d1:3b:6a:47:0b:06:16:c3:a4:
74:10:a1:b8:de:ce:0e:e2:0c:a3:bb:e7:91:55:1b:
89:c2:11:ce:16:20:d8:40:97:bc:dd:72:b7:c0:9e:
a8:94:b7:c5:79:f1:e1:ba:6c:78:4c:bb:af:8d:49:
f7:af:b2:64:68:2f:d6:4b:5e:76:8a:3d:66:df:50:
3c:5b:08:7e:d3:02:a6:d4:4c:6f:87:b8:85:c7:8a:
cf:0a:3b:14:6e:c1:1f:28:28:48:72:49:77:08:7e:
d3:67:c3:3a:c2:df:68:2e:84:3c:02:bf:3f:b8:2c:
4e:07:f2:54:f2:86:18:1c:57:64:57:00:a1:ff:7d:
c4:ed:03:7d:1e:d2:7d:5c:96:77:9c:36:fe:41:5b:
49:e4:79:3d:c7:9c:19:33:ca:3a:14:f5:4c:ec:b1:
94:a5:68:79:ae:b4:a0:71:57:34:4e:f8:b7:bb:16:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:E2:98:0A:EC:4E:A6:E6:86:7C:88:33:70:65:2C:B1:8B:6D:E5
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:88:12:2c:6c:d4:06:dd:46:74:d7:e4:34:02:49:73:f4:
f7:01:72:30:6a:df:57:54:4e:94:36:6b:99:e8:4e:14:40:ab:
94:6b:d1:5e:40:9d:98:c7:cb:6f:8b:92:53:24:a4:19:f9:50:
b6:5c:86:f9:24:93:ac:e4:23:b7:02:3c:72:05:c0:88:cc:4a:
91:48:0b:88:37:45:ab:e1:61:cf:2d:6c:f5:9a:a7:ac:97:be:
0f:e3:10:da:94:2b:e0:58:67:04:e3:59:56:91:e4:12:99:04:
0b:57:3e:3d:87:33:34:0c:43:89:ce:ef:80:f8:a1:bb:00:c2:
ca:ca:91:eb:49:02:6f:c7:b9:ac:d4:ea:f2:8a:33:32:28:ce:
61:a4:e1:d9:c6:16:38:4a:5b:f6:af:ef:c0:02:58:ab:2d:5f:
d1:ef:ea:f1:b0:a8:13:46:ba:1d:3f:32:9e:9a:c8:7e:01:a1:
c7:05:fb:18:86:7e:f7:21:38:55:39:cb:7e:05:37:5a:e8:42:
f4:17:09:e3:df:52:58:ca:38:8d:3e:ea:f4:fb:92:a9:01:76:
c4:3c:6c:f0:09:61:5f:c5:a6:3a:1b:64:98:dd:15:85:01:0e:
2f:53:38:d7:45:e2:50:ea:33:c5:1d:5d:8d:5f:6d:21:66:8a:
b6:ac:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:20 2026 by rpki-client