Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: zE6+J+0cGt4r+Y7KoVUeapvzyRCSKGsk7m0yv8eHUTI=
Subject key identifier: AE:51:19:39:CA:7D:85:09:3D:08:C1:48:FE:C5:37:18:9B:40:EE:4B
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019FAABE47C7689739F8AEABC0037B9D1BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 1397
Signing time: Tue 28 Jul 2026 22:00:24 +0000
Manifest this update: Tue 28 Jul 2026 22:00:24 +0000
Manifest next update: Wed 29 Jul 2026 22:00:24 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: QMX3pEJ2bsnFbMLPlkAvVDywP+fQb1j5NlAgPYub3sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:47:c7:68:97:39:f8:ae:ab:c0:03:7b:9d:1b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jul 28 22:00:24 2026 GMT
Not After : Jul 29 22:00:24 2026 GMT
Subject: CN=ae511939ca7d85093d08c148fec537189b40ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:1d:14:e3:89:cf:8f:ac:49:a3:81:3d:95:
03:29:af:e8:fc:db:30:06:78:65:2d:ef:fb:ce:4f:
23:71:99:62:32:c2:8b:71:5a:52:a7:b9:d8:d8:f1:
9a:6d:60:a5:20:c1:45:be:fe:7b:be:cc:98:4b:d3:
b4:b0:03:15:00:03:95:e9:ff:08:00:2c:0a:8f:4a:
42:62:2c:a6:2b:6d:17:a3:ed:13:7d:8d:1d:88:ca:
48:aa:6e:47:3e:ef:8f:95:70:b9:76:ee:07:18:ea:
50:72:75:3a:f7:dd:11:f9:98:9c:db:49:d5:6a:93:
ed:a1:6e:be:27:5a:26:28:42:21:c6:a5:6b:60:06:
59:af:9f:17:9f:b2:34:17:ec:23:06:26:f2:96:75:
ec:3c:80:2e:b8:5b:bc:40:ab:76:b1:35:fc:62:8c:
31:08:34:73:13:1c:91:02:b3:43:01:b0:d7:88:04:
26:61:94:a5:a3:d8:52:79:f5:58:8c:db:08:80:d7:
bf:4a:60:d7:8d:5d:9e:3b:38:3b:31:83:aa:19:5b:
70:76:d9:21:56:a8:9c:1e:f9:00:05:9d:6e:f9:21:
28:e0:c0:0e:c6:ec:f1:f9:99:88:8b:47:d1:8f:8c:
7d:be:90:f4:b3:3b:8b:a7:32:ee:50:64:af:43:3f:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:19:39:CA:7D:85:09:3D:08:C1:48:FE:C5:37:18:9B:40:EE:4B
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:75:87:5c:af:43:f7:9b:5f:22:38:46:7a:9a:7e:15:86:66:
c0:f0:6a:09:c6:41:49:fe:75:09:1b:fe:39:a7:91:0a:14:bf:
48:24:44:d3:d5:6d:fb:2f:44:44:ea:e3:a1:ae:a1:f8:2a:d3:
94:8a:0b:8a:88:50:27:c9:2a:4f:3a:02:e7:93:88:27:36:22:
2e:de:6e:ab:41:6c:8e:0e:95:e6:7f:b1:ad:a5:4b:70:1e:53:
f4:5e:5a:4a:de:62:e5:c2:b6:4d:3f:3e:e8:77:d9:99:2f:57:
e6:49:0e:c3:de:2c:ea:8c:5a:2a:b5:55:56:75:38:eb:89:55:
da:83:2c:73:07:68:e9:3f:bc:3d:cb:07:35:12:66:19:ba:33:
98:cd:aa:c7:9a:82:5a:dc:25:1b:4e:f9:12:70:97:9e:0c:05:
a9:e7:ec:bd:f0:39:b0:d3:f2:2e:e5:25:da:0d:b0:be:06:aa:
bc:6e:a4:77:9f:dd:77:59:b3:ed:6b:f3:1a:18:f9:0f:26:89:
09:73:ec:7f:a3:1c:a6:d9:09:1d:86:6d:35:57:b1:c2:b9:3e:
3d:5c:45:53:16:51:dc:d5:4b:af:f7:23:c3:a6:f1:06:55:7a:
d5:a7:b7:87:74:dc:0e:3c:f4:6a:7c:01:5e:19:82:c8:69:4d:
1b:ef:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:43 2026 by rpki-client