Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: KCQ86pclYdYxSn97NNph4z0l8AvEH1Y/AVAcIOpwseI=
Subject key identifier: 3B:C5:45:5F:62:01:B8:DE:0E:3E:0B:88:EB:36:96:51:DC:D7:42:35
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 01A0C70EDAAC240E124E312FDBD4D71B37FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 03:00:34 +0000
Manifest this update: Tue 22 Sep 2026 03:00:34 +0000
Manifest next update: Wed 23 Sep 2026 03:00:34 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: wx/sFQisSEaxgfHdFG82wlN5O3lI+WZlMJqi5gFYLbg=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:da:ac:24:0e:12:4e:31:2f:db:d4:d7:1b:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Sep 22 03:00:34 2026 GMT
Not After : Sep 23 03:00:34 2026 GMT
Subject: CN=3bc5455f6201b8de0e3e0b88eb369651dcd74235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:76:9c:90:c3:31:9c:e5:d8:16:fa:9f:35:
9e:11:eb:bc:96:1d:02:c4:63:ae:a0:57:27:90:f8:
fb:ca:48:22:e9:b9:fb:31:01:06:1f:dd:3b:eb:93:
aa:df:c9:2d:1d:be:4e:00:00:0d:29:41:4f:d6:3d:
d5:05:ba:27:7f:7a:4d:fe:f3:7f:4c:e3:31:b3:2a:
8d:4f:98:95:3b:58:4c:34:40:b7:95:cf:d4:aa:67:
3d:8a:fa:93:23:bf:c4:c7:5b:26:75:82:90:63:c0:
19:fd:43:41:66:f5:d0:f2:11:09:b4:b1:c7:26:73:
7f:2e:19:38:60:10:63:aa:66:fe:83:b4:17:f6:c6:
d0:4d:4e:20:84:e7:97:80:9e:ec:94:63:8a:75:19:
a9:70:d0:65:38:17:92:0f:89:fe:dc:c1:d1:08:1b:
d8:ac:7e:15:ea:2b:3f:4e:8d:06:aa:40:f6:84:1a:
57:d6:28:29:ca:41:35:11:38:57:70:70:b6:3b:56:
0b:c9:25:f6:34:e9:ec:e0:3c:26:9f:27:20:f0:e0:
0a:f1:af:79:05:fa:58:c5:b0:ad:ce:5c:47:a1:04:
31:ae:69:6b:fd:c1:80:84:0b:fa:c7:88:c7:35:ed:
51:d9:94:0e:2c:fc:22:b2:3d:64:d2:05:04:25:4d:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:45:5F:62:01:B8:DE:0E:3E:0B:88:EB:36:96:51:DC:D7:42:35
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:c0:69:83:ac:6e:65:e7:cd:6f:1f:bc:4a:ac:57:72:b0:4c:
58:45:e3:9b:01:13:4b:bf:10:10:2f:07:fa:ea:75:7b:b7:98:
ab:93:f4:2c:0e:14:7e:c7:4b:ba:a7:80:ba:fb:14:8f:8f:15:
69:fe:56:6a:e9:6f:4f:24:0e:46:b2:a1:58:c5:4f:3a:41:ff:
5c:ff:e4:12:e5:11:7c:b6:5e:f9:10:99:0e:06:b5:67:67:8b:
07:50:58:e9:8c:c3:a1:f3:4c:98:db:72:80:b4:f7:7c:f4:52:
ee:a1:f5:fa:df:1f:bf:24:52:17:ad:8b:73:ad:b2:5e:9b:06:
70:c8:4e:e8:bf:24:c9:96:fc:71:7a:aa:1c:ca:85:ed:ef:d8:
fc:b4:1d:36:c3:3a:f3:76:a4:ed:f7:67:a8:b1:8b:1d:1f:a9:
82:c5:3c:d2:b4:15:92:77:61:bd:48:7a:79:39:be:d0:04:65:
18:8b:bf:9c:b0:56:16:c8:ad:71:17:92:57:92:de:48:32:08:
ea:14:d0:94:a7:71:8b:9d:bf:f3:07:c6:d8:f8:46:46:7f:8c:
55:51:d2:19:c0:b2:92:91:0e:99:e4:6e:77:f0:fd:c1:4a:3c:
11:f5:f4:00:2a:e1:69:14:a3:ad:8f:be:6d:30:86:84:35:36:
bd:10:58:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:02 2026 by rpki-client