Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: 7jY/zvOFAfCpbvzPp9Wq+WepZlTbxXTI+BWyzD5IAVs=
Subject key identifier: 7A:59:E5:DD:64:F8:5A:68:D3:C6:FD:9F:4B:44:80:5A:97:24:88:1B
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01A0C2C49424AC42B78A25162FC2CF67B22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 1428
Signing time: Mon 21 Sep 2026 07:00:57 +0000
Manifest this update: Mon 21 Sep 2026 07:00:57 +0000
Manifest next update: Tue 22 Sep 2026 07:00:57 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: 8PF6gXqbC9N4h95O8R/B/BWr8kKGBrMjcABk21JV/cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:94:24:ac:42:b7:8a:25:16:2f:c2:cf:67:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Sep 21 07:00:57 2026 GMT
Not After : Sep 22 07:00:57 2026 GMT
Subject: CN=7a59e5dd64f85a68d3c6fd9f4b44805a9724881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:d0:32:4d:3d:bc:cd:92:8d:76:4e:51:a4:
c1:4d:e0:86:53:3b:36:45:de:c8:d5:42:fc:d8:46:
6c:4c:d4:70:1f:63:aa:18:ef:b2:c1:29:69:ba:dd:
81:c9:82:a8:e4:c9:46:d3:df:c5:61:38:96:15:e0:
46:37:1d:5a:cb:96:db:5a:e0:92:f1:6f:25:9c:0d:
a4:89:bb:f5:f0:3a:ef:02:69:0f:18:d7:1e:90:c3:
49:de:ea:bd:16:97:bb:68:84:ab:c3:98:06:0a:02:
ed:00:0e:a9:c2:aa:3f:65:f4:16:70:23:d5:e4:d9:
63:84:6f:b5:01:05:f5:5c:47:82:ef:fd:64:7a:cd:
7f:63:71:64:42:8e:c3:66:cf:26:b8:dc:00:f0:44:
ab:de:42:55:8d:9e:5e:3e:71:65:1f:e9:4b:a6:ea:
f6:52:0b:3a:cb:9f:7e:2f:ea:6e:4b:b5:f1:d8:8f:
68:68:a8:cc:aa:08:d5:12:a0:a2:d8:ce:4f:b9:80:
6c:56:22:eb:f3:5c:02:60:68:1d:f1:87:57:4d:d4:
8d:24:8a:21:ae:5e:e6:cb:61:5d:a7:46:1a:bd:45:
b7:0b:32:bd:fb:aa:5c:9f:31:df:6d:be:ae:48:4c:
f1:c5:e3:8e:41:45:93:4e:78:b2:60:81:4a:1b:bc:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:E5:DD:64:F8:5A:68:D3:C6:FD:9F:4B:44:80:5A:97:24:88:1B
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:66:30:5f:a3:36:86:b2:48:01:dd:e6:4b:0e:c0:f3:80:25:
43:75:84:f1:1e:ea:bb:29:8e:89:30:ef:c3:bb:65:cd:9c:ad:
a9:16:71:a6:ea:40:d6:1a:ab:35:7c:60:1e:da:2e:55:55:d7:
a5:e9:72:79:22:3d:e0:c2:94:53:69:46:46:20:0b:fd:ad:05:
1b:e2:08:ea:58:a6:f2:0f:37:7e:3f:dc:5b:7d:7d:ec:86:c3:
16:cf:76:b3:a9:0f:f2:52:34:6f:b0:d2:60:55:ca:ba:ce:ff:
c6:3e:16:4c:79:3d:a4:43:2d:fb:b9:49:df:d6:a7:d0:a5:b2:
a1:8d:6f:c8:03:ff:6e:e5:14:1d:9a:f3:7d:c8:46:a2:5a:73:
87:47:50:ef:68:86:b1:d6:19:69:81:a1:c2:61:1b:9b:10:0c:
5d:1f:52:57:da:3a:f3:35:67:87:27:46:3d:4b:c2:f9:52:9d:
a4:99:a8:b1:b9:c9:1c:6d:e9:5a:1f:98:ad:70:17:f0:b4:77:
78:c4:8a:f9:ae:dd:68:38:94:63:f3:d5:82:aa:d8:dc:ee:2d:
6d:10:c5:2c:ca:7d:c1:47:ec:e1:d7:65:aa:13:21:7b:00:86:
79:b2:1e:02:36:28:73:df:6b:43:8d:06:7a:21:9d:2b:46:1f:
7b:e8:83:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxJQkrEK3iiUWL8LPZ7IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjYwOTIxMDcwMDU3WhcNMjYwOTIyMDcwMDU3WjAzMTEwLwYDVQQD
Eyg3YTU5ZTVkZDY0Zjg1YTY4ZDNjNmZkOWY0YjQ0ODA1YTk3MjQ4ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dzQMk09vM2SjXZOUaTBTeCGUzs2
Rd7I1UL82EZsTNRwH2OqGO+ywSlput2ByYKo5MlG09/FYTiWFeBGNx1ay5bbWuCS
8W8lnA2kibv18DrvAmkPGNcekMNJ3uq9Fpe7aISrw5gGCgLtAA6pwqo/ZfQWcCPV
5NljhG+1AQX1XEeC7/1kes1/Y3FkQo7DZs8muNwA8ESr3kJVjZ5ePnFlH+lLpur2
Ugs6y59+L+puS7Xx2I9oaKjMqgjVEqCi2M5PuYBsViLr81wCYGgd8YdXTdSNJIoh
rl7my2Fdp0YavUW3CzK9+6pcnzHfbb6uSEzxxeOOQUWTTniyYIFKG7yX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpZ5d1k+Fpo08b9n0tEgFqXJIgbMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGYwX6M2
hrJIAd3mSw7A84AlQ3WE8R7quymOiTDvw7tlzZytqRZxpupA1hqrNXxgHtouVVXX
pelyeSI94MKUU2lGRiAL/a0FG+II6lim8g83fj/cW3197IbDFs92s6kP8lI0b7DS
YFXKus7/xj4WTHk9pEMt+7lJ39an0KWyoY1vyAP/buUUHZrzfchGolpzh0dQ72iG
sdYZaYGhwmEbmxAMXR9SV9o68zVnhydGPUvC+VKdpJmosbnJHG3pWh+YrXAX8LR3
eMSK+a7daDiUY/PVgqrY3O4tbRDFLMp9wUfs4ddlqhMhewCGebIeAjYoc99rQ40G
eiGdK0Yfe+iDaA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:45 2026 by rpki-client