Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: eMcvp9wFH3nVTgwv03Yn8fowlSvDV7xcwpyYhPqVqNs=
Subject key identifier: 68:44:A5:50:DC:2E:34:4E:8D:89:2C:1A:E7:E3:56:E0:CA:C0:C9:5F
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019DA52FDEC2FA7EA3EDA596FFAFCD9F2C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 128B
Signing time: Sun 19 Apr 2026 10:01:10 +0000
Manifest this update: Sun 19 Apr 2026 10:01:10 +0000
Manifest next update: Mon 20 Apr 2026 10:01:10 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: EUIFgP6e2aGrnc0kzPEbTAKyrxn9LiS7WG/J4SUYA7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:de:c2:fa:7e:a3:ed:a5:96:ff:af:cd:9f:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Apr 19 10:01:10 2026 GMT
Not After : Apr 20 10:01:10 2026 GMT
Subject: CN=6844a550dc2e344e8d892c1ae7e356e0cac0c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:73:18:a7:12:5f:ad:e1:87:d5:80:15:59:
9e:76:27:0d:b1:46:de:82:77:b1:5d:61:72:cb:7f:
8e:37:89:ca:42:7e:c5:86:99:8f:d5:31:3f:f8:0b:
c3:07:1b:08:c1:56:a1:da:6d:08:82:35:17:e6:57:
82:ea:0f:df:bf:9b:82:ca:d8:59:46:8d:48:13:20:
eb:90:80:cc:1a:35:16:88:b0:29:e4:f0:87:92:72:
f8:a9:2d:36:de:93:48:64:40:26:ef:a9:94:23:23:
ed:6d:e8:63:b5:d3:d0:b6:db:b6:3a:c0:a1:8c:83:
ea:d8:f5:49:33:1f:3a:b4:33:dd:a3:74:d7:14:61:
e8:ce:3f:ac:84:d2:48:b5:e5:2d:ef:45:a2:75:41:
e0:f6:75:a0:7e:00:8b:3d:d6:4c:e4:fa:a7:ae:9a:
f1:9b:6d:0f:9d:f5:44:c6:3a:48:1e:da:74:eb:b3:
46:05:86:29:ed:3f:50:e2:ab:ca:2c:59:10:d5:71:
19:f0:f9:fc:70:99:9f:8a:20:2e:e8:dc:44:d2:fe:
83:82:46:f6:f2:89:57:48:e4:4f:89:63:18:d4:e5:
6e:1c:08:0d:04:75:7c:a7:03:99:2d:90:3d:92:f7:
6b:83:7e:73:28:60:3a:c1:88:92:aa:12:f5:78:53:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:44:A5:50:DC:2E:34:4E:8D:89:2C:1A:E7:E3:56:E0:CA:C0:C9:5F
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:b0:dc:e8:81:e0:ae:ff:ab:73:62:22:59:1a:df:6a:c7:
04:a1:ed:d8:03:4a:94:dd:7e:ec:07:9c:13:17:a9:81:52:9b:
7a:ce:e3:78:ed:5d:89:fa:73:3d:8c:d4:b5:45:37:32:22:c5:
92:3b:68:9f:ae:75:ec:d8:66:37:3e:9d:51:df:59:2e:e4:4c:
a2:1f:78:3f:71:aa:42:52:d5:46:02:95:cf:8b:f7:3a:f0:35:
f9:c7:c1:e5:1e:32:d9:6f:47:0d:06:56:20:ca:cc:d1:98:a8:
86:52:f3:44:ed:68:18:8d:b6:a1:b1:1f:38:c8:19:83:87:40:
35:cd:f8:18:25:67:9f:dc:fe:f4:b2:30:2e:ad:4a:0b:fc:c0:
2b:ff:ee:2b:15:3e:1c:66:26:df:a3:0a:ea:3b:ab:82:87:fc:
ed:fa:69:54:bf:21:fc:ab:2f:bd:f3:6c:f0:1d:18:6e:32:2a:
36:77:76:23:1b:95:43:89:c2:e6:9b:94:2a:e0:44:1b:8c:64:
40:ab:38:da:98:c4:a2:87:7f:51:4b:68:e6:4d:fe:ba:82:7c:
93:96:60:bc:5d:d9:db:d8:09:a3:62:9a:a8:13:e7:22:92:f1:
d3:a4:ea:de:1a:4c:13:c3:35:b7:4e:3b:a9:0d:78:c5:09:86:
bf:b0:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:23 2026 by rpki-client