Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: BwR09fxUclK5c4TfTitfCm+jDtU/TlJSuC003SyXbU0=
Subject key identifier: 7C:5D:E6:DE:1C:0A:2B:15:82:63:0C:C2:AD:96:CC:E7:3E:4B:14:C8
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019FAB2C3AACD0CA550FB857187A86A676CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 00:00:30 +0000
Manifest this update: Wed 29 Jul 2026 00:00:30 +0000
Manifest next update: Thu 30 Jul 2026 00:00:30 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: ZUFAKEtJ48mDEvdRjkfAVUju4HkIlaeYn/9AYa3Qu3g=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:3a:ac:d0:ca:55:0f:b8:57:18:7a:86:a6:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jul 29 00:00:30 2026 GMT
Not After : Jul 30 00:00:30 2026 GMT
Subject: CN=7c5de6de1c0a2b1582630cc2ad96cce73e4b14c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:af:f0:bb:c3:f2:53:55:3f:49:01:cd:30:
0b:20:00:90:04:9e:63:d3:66:37:cb:54:1b:e3:3b:
9e:aa:c4:47:7c:03:a3:2c:c0:f4:f8:64:ea:de:27:
ad:b4:c5:5c:eb:13:5c:36:72:b2:a5:d6:2a:3e:67:
9b:45:45:a8:93:0c:6f:d4:d4:cf:b1:de:d8:68:70:
78:c6:bd:81:f6:eb:e6:55:4e:c0:59:59:37:9d:13:
94:5f:9e:3e:bb:82:f0:4f:4b:7d:2a:d3:8e:9c:09:
ff:b2:61:0e:4e:41:f2:51:41:74:9d:f6:97:9e:df:
f0:91:1d:59:e3:95:72:ed:d2:71:6a:b6:eb:d5:2e:
69:8d:51:36:16:e6:4d:a8:97:63:40:ff:af:0c:e0:
7a:12:3e:67:1d:74:70:53:4b:e7:67:f1:a9:b8:9d:
a5:f0:3e:af:40:1f:7c:47:1f:01:3d:55:f7:41:1b:
0f:8c:90:60:c2:e4:b3:c7:62:17:d4:91:a6:73:04:
3b:ff:f7:91:2f:2d:8f:76:d8:8a:1f:dd:96:5a:25:
1e:e2:ed:2f:35:4f:37:ce:39:07:56:23:eb:8e:b5:
7a:d6:27:bc:6f:b0:5f:95:88:97:c9:27:7a:b9:fe:
31:c5:dd:61:dd:61:fb:e8:9a:55:86:a7:68:7b:26:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:E6:DE:1C:0A:2B:15:82:63:0C:C2:AD:96:CC:E7:3E:4B:14:C8
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cb:03:da:0c:54:6f:85:55:07:46:a3:ec:12:3e:6d:f4:01:
c7:b2:7f:7a:aa:a0:4f:38:d7:56:81:d1:a2:70:39:5e:f9:1b:
98:dc:86:dd:76:ab:b2:8d:a7:8a:6a:f5:31:36:ac:66:3e:20:
21:1e:2d:33:0f:a8:e8:25:69:8e:ce:21:7a:1a:99:35:de:b2:
5c:b7:67:78:c9:22:40:60:61:b9:aa:9f:f5:88:11:93:af:95:
ef:73:92:3a:20:0a:8e:ad:5a:b7:14:e5:84:1d:30:92:c1:4e:
e7:7a:fd:81:7b:5c:72:42:bc:20:e9:d2:19:a0:08:8e:88:d2:
2c:ad:0a:9c:bd:43:56:5c:20:c7:62:15:3d:f5:6a:78:a5:30:
83:6c:02:ba:6f:81:1c:fe:0f:23:ba:2b:e6:ba:38:1b:23:f5:
23:20:54:0e:44:96:20:37:ae:9b:77:05:05:6c:e3:2a:f6:44:
a7:d3:a2:f7:18:f8:c2:3a:61:cc:90:d4:36:04:78:3a:80:e5:
4f:eb:8a:df:1f:e9:cc:e5:0a:51:40:4c:cb:85:95:e5:d6:8f:
1c:dd:a5:31:a6:74:15:e8:70:ef:f6:e0:df:9a:2c:f9:4b:86:
b4:25:02:58:c1:9e:e6:05:79:da:5f:20:e7:e6:f7:11:e0:3e:
33:50:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:06 2026 by rpki-client