Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: AHek8HmBfh2sZ/IlVHhDMO6yzwlu8nuPrF2spRLOQLM=
Subject key identifier: C9:0C:C1:62:A8:6C:F4:B8:94:3D:02:AB:41:72:88:17:4C:2D:34:FC
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019EBF918A7D358B98EB2C61A065C1165172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 06:00:46 +0000
Manifest this update: Sat 13 Jun 2026 06:00:46 +0000
Manifest next update: Sun 14 Jun 2026 06:00:46 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: jGaP2PkZsvxzNwq9yEwoNvNoWAaR+FA77v1WRbRjgWg=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:8a:7d:35:8b:98:eb:2c:61:a0:65:c1:16:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jun 13 06:00:46 2026 GMT
Not After : Jun 14 06:00:46 2026 GMT
Subject: CN=c90cc162a86cf4b8943d02ab417288174c2d34fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:0b:d1:00:0c:67:b3:ff:51:0e:86:45:b5:
ad:af:69:db:11:d4:5d:a4:bd:d0:07:6c:af:5b:13:
3e:7a:9e:3d:ad:f4:f9:99:e5:86:f6:a3:a1:b0:e3:
2c:87:aa:04:14:72:a2:1e:c8:c2:6a:65:a3:bb:ae:
86:b2:00:a4:ab:0c:04:d2:88:d8:72:0a:f5:10:7a:
5e:60:d5:52:ac:7b:d6:17:8c:e8:06:45:69:da:92:
bb:b0:0f:fb:70:9b:c9:d7:03:9a:5d:dc:70:f1:d7:
19:56:05:2d:48:94:37:21:32:3a:2b:eb:b9:eb:99:
cf:b9:99:61:0e:9b:56:53:93:37:46:b3:c5:94:f7:
9d:b1:1e:2a:04:f5:e8:d5:41:61:73:08:be:86:66:
e4:a1:99:fe:8d:7e:a6:91:1c:6f:21:ed:83:cc:a5:
d2:13:2f:7f:3a:27:ad:35:c3:45:df:a2:a5:9d:f7:
8c:67:c6:03:16:50:fe:9d:22:b8:c6:83:47:32:0a:
12:ad:07:37:5d:a2:d7:cf:0c:82:e7:1e:f9:82:ca:
57:a9:97:80:f5:48:b5:3c:ee:55:78:e5:19:ed:57:
7e:54:7f:b8:67:3d:ce:2a:79:95:e0:82:d5:66:0d:
4d:58:5e:99:6e:80:6b:a5:fd:41:a2:26:1c:86:81:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:C1:62:A8:6C:F4:B8:94:3D:02:AB:41:72:88:17:4C:2D:34:FC
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5f:59:31:37:64:ce:81:d0:d3:b6:d8:8f:55:20:c8:b2:e7:
58:e3:8f:5a:a1:c6:31:c1:51:66:44:db:54:4a:70:8d:ef:23:
2a:59:3a:ac:ee:e7:38:58:9a:e8:f5:88:9b:81:5b:10:b3:28:
91:a9:13:4d:22:0d:d5:1d:fa:61:2e:eb:fe:c2:91:f6:56:78:
17:90:87:e7:e1:ab:50:43:43:ef:2f:88:f6:aa:07:36:58:cc:
cc:60:2c:40:5f:e2:e0:54:ad:a9:88:7a:8f:69:0b:ac:6c:89:
38:2e:ec:a7:d3:ed:88:e3:f5:36:f6:02:6a:39:1a:9e:a1:94:
e0:08:e8:dd:e5:84:8d:03:4f:bb:59:bb:55:00:fc:8b:00:87:
a5:4c:64:9e:ba:13:9b:5f:4f:2c:01:3d:33:44:1f:60:75:b6:
31:80:0f:fb:9f:d4:61:a4:40:94:3b:1d:9d:f9:fb:0c:9b:22:
8c:74:af:8d:4d:9b:da:6c:fa:ab:7a:29:30:71:8b:71:5a:8c:
9c:60:34:cd:8c:14:e1:4e:39:bb:2a:ff:3c:cf:7e:0b:7e:52:
d2:24:99:07:a4:f7:ea:ce:42:f4:7d:f3:54:75:24:02:f9:7e:
69:db:10:d2:f2:19:fd:38:41:6d:ab:0a:a3:d1:48:92:f6:62:
a2:e8:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:58 2026 by rpki-client