Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: fMDOZSOwo+m95avpgxI0CrBUkbc/KRJLQS3/EkEpxoI=
Subject key identifier: 05:0F:30:76:61:C1:0A:F2:A9:9F:22:B1:4D:BF:8A:BE:17:A9:42:34
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019CAA8FA0832E7FC9C787D6DAD1026D6752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:01:05 +0000
Manifest this update: Sun 01 Mar 2026 18:01:05 +0000
Manifest next update: Mon 02 Mar 2026 18:01:05 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: MzMFFrzo+jr1OKjZE8WM2CIGjwL6wEcI4YGHHqZ1wPw=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a0:83:2e:7f:c9:c7:87:d6:da:d1:02:6d:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Mar 1 18:01:05 2026 GMT
Not After : Mar 2 18:01:05 2026 GMT
Subject: CN=050f307661c10af2a99f22b14dbf8abe17a94234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:f2:97:fb:34:c5:cd:69:98:d1:61:74:bc:
a0:70:05:ea:31:cb:3f:38:31:66:a0:5d:9a:8e:c3:
8c:63:a1:bc:ec:f1:ce:4b:e4:d3:99:5e:e1:8d:c3:
07:ae:92:fd:c1:a8:92:92:8f:34:7e:88:ed:ac:0c:
66:51:cd:87:a5:38:84:51:69:66:9f:8a:75:41:aa:
2d:9e:c7:8e:9a:53:66:64:6a:84:c9:2e:0d:0d:48:
51:ca:fb:7f:85:be:3f:71:85:05:d7:02:9c:be:c0:
7e:97:c9:6f:cd:29:a5:f3:c0:68:20:92:37:f7:2b:
e1:9b:0b:d0:12:45:50:82:7f:b4:83:bd:4e:57:33:
d1:91:a8:3f:d8:67:f9:6f:90:31:69:3a:27:19:01:
55:ed:eb:6b:0a:3c:6a:13:72:77:48:eb:93:85:30:
72:6e:a9:57:39:97:bc:04:24:8b:b3:d7:20:ce:d1:
e1:08:93:68:3a:b2:b2:5f:5c:14:b4:02:fd:ee:69:
b5:c6:f7:a6:14:3c:c6:8e:14:59:0d:7b:2d:b5:f9:
56:3c:a3:fb:bb:94:f8:68:c6:23:46:50:21:2b:3f:
a3:7f:ad:6b:cc:84:d7:b2:81:b3:03:21:ee:a0:b9:
c1:2a:85:c2:c2:ee:6c:05:e9:80:04:90:ed:79:71:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:30:76:61:C1:0A:F2:A9:9F:22:B1:4D:BF:8A:BE:17:A9:42:34
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:c2:5a:ce:78:20:05:f7:42:22:f9:cb:8b:8f:d9:28:24:
3a:c1:d7:4b:7d:81:36:4c:81:2f:c7:d6:3f:a4:3d:6d:80:b7:
53:0c:0d:29:b7:99:b4:ac:82:4c:ef:16:87:90:1f:a8:6b:55:
d9:04:f5:e0:5f:b6:2f:99:db:45:f8:c4:06:b7:67:5f:42:5d:
49:f3:6a:26:b8:16:bf:87:f3:20:dc:71:09:ea:76:58:54:4d:
d3:87:00:6d:ed:d8:ad:f8:c8:1b:e8:56:d0:df:85:db:15:0c:
08:3c:3a:e1:7f:9f:db:79:59:f9:d7:be:84:78:b4:21:ec:a4:
ed:e9:5f:1d:b1:36:38:54:14:cd:5e:90:67:6d:fc:5a:d5:cd:
37:53:3e:2e:e0:bf:1e:d7:3a:79:94:18:fd:d3:ea:77:c3:ec:
d2:8a:12:c8:27:3d:9c:9e:b2:7e:0b:59:9e:a7:26:3a:ea:e6:
23:9c:b2:ea:fd:aa:7c:02:86:d5:43:35:4b:fc:ed:3a:ce:67:
a4:d6:ab:a3:cd:b7:ad:dd:51:5a:e9:90:dc:38:49:5d:f7:f0:
83:a0:17:e2:c1:1e:87:1e:ea:8e:66:19:b3:60:38:15:73:a6:
b0:b5:5d:3d:22:e6:08:4b:f9:97:b2:2e:d2:ca:0d:7a:90:dd:
7e:2c:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:45 2026 by rpki-client