Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: FXlzRHi7+AddH+erkh3iN7itFj5vKqTVKm41MvmFEz0=
Subject key identifier: 71:0F:A2:AA:45:83:82:7F:18:BE:3D:3D:CD:E8:32:6D:C6:A9:41:05
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019D9A070A92A3BDF90B3FAF8FEE58D3E807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: BCEn+cc4myMxeCP1WeJHmZ8WOdmlBkVehybmosYHPRY=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0a:92:a3:bd:f9:0b:3f:af:8f:ee:58:d3:e8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=710fa2aa4583827f18be3d3dcde8326dc6a94105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:ca:74:b2:e3:98:37:c2:46:86:77:b6:a7:
34:23:9c:a0:d7:2f:20:62:a9:51:48:b6:cc:bc:e5:
fe:af:df:5f:77:d7:eb:a1:09:9f:41:2d:ee:b9:d5:
2e:b2:ba:99:73:bb:1f:8b:e8:ff:b0:11:40:fd:66:
98:ea:6c:39:ff:14:38:ce:b8:a5:df:bf:33:ab:bb:
7b:6e:6d:74:6c:f3:a9:96:8e:c9:e4:0c:97:a7:f2:
a1:ee:2e:3d:ff:65:bd:5b:64:2c:a0:8f:e3:cd:35:
50:51:e0:a6:ca:f7:06:f8:a5:e1:74:fc:d4:58:6d:
27:c6:a3:05:29:41:45:63:0b:62:35:21:3d:74:31:
01:5b:be:7b:e5:fa:4e:35:87:24:84:90:58:39:fc:
e6:3b:2a:c6:04:dc:9c:68:58:d8:c7:dc:a9:7d:6a:
7a:b0:17:c7:45:77:f1:b9:e5:30:7e:22:74:d3:52:
7f:c5:e7:12:8a:38:05:eb:32:a8:a7:53:7f:e8:57:
f8:80:b4:5c:cb:c5:d7:0c:13:8d:d7:f7:05:3a:19:
3b:f9:e4:43:36:63:36:e9:72:c6:af:40:e7:8b:75:
62:b6:76:76:61:90:da:7d:be:de:51:04:fd:d9:da:
4f:e0:25:63:85:4b:8e:f8:3a:46:c4:65:55:cd:1b:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:A2:AA:45:83:82:7F:18:BE:3D:3D:CD:E8:32:6D:C6:A9:41:05
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:82:a1:de:bc:39:ba:fe:50:eb:0c:b6:65:af:28:94:68:3c:
95:1e:a0:78:e6:2e:3e:e9:55:d4:20:d6:e8:36:b3:b0:cc:e6:
d4:5f:61:53:40:cd:d0:76:6e:74:cc:20:e9:14:b7:08:dd:88:
e9:25:41:5d:f0:24:97:85:97:af:49:96:db:03:56:d3:9f:de:
01:56:b3:9e:c7:aa:e9:22:82:16:25:aa:63:70:84:bb:e4:83:
a7:2c:8c:dc:60:be:7a:2d:bf:d2:3c:d0:c9:35:65:bd:d1:f3:
dc:ee:ae:b9:cc:8d:cd:84:31:50:7d:6e:7f:17:e2:af:9f:b2:
2c:5a:fe:7c:54:ee:9a:bd:0b:60:b1:91:c3:ad:74:3e:c0:4f:
1b:8b:78:6c:37:f8:e5:99:0a:81:cc:77:e5:3c:6b:1e:24:0a:
a8:c1:8f:b6:32:50:9d:70:ec:22:ad:9d:3a:8a:7f:fd:fb:69:
8b:9b:bb:40:e5:d2:51:df:e0:f2:cc:06:9d:ba:cc:c5:6f:ef:
2c:9d:30:39:70:99:43:8a:30:8f:58:e8:98:d0:df:7b:9d:28:
87:51:cb:77:a8:79:7e:3c:e3:31:14:6c:90:1b:f9:ec:6b:90:
ac:1a:5e:ec:ef:7f:8b:a9:cd:f7:80:ed:2b:85:9c:5c:04:c3:
5c:75:22:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBwqSo735Cz+vj+5Y0+gHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0
ZjAzYmYwHhcNMjYwNDE3MDYwMDQ1WhcNMjYwNDE4MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg3MTBmYTJhYTQ1ODM4MjdmMThiZTNkM2RjZGU4MzI2ZGM2YTk0MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnrKdLLjmDfCRoZ3tqc0I5yg1y8g
YqlRSLbMvOX+r99fd9froQmfQS3uudUusrqZc7sfi+j/sBFA/WaY6mw5/xQ4zril
378zq7t7bm10bPOplo7J5AyXp/Kh7i49/2W9W2QsoI/jzTVQUeCmyvcG+KXhdPzU
WG0nxqMFKUFFYwtiNSE9dDEBW7575fpONYckhJBYOfzmOyrGBNycaFjYx9ypfWp6
sBfHRXfxueUwfiJ001J/xecSijgF6zKop1N/6Ff4gLRcy8XXDBON1/cFOhk7+eRD
NmM26XLGr0Dni3VitnZ2YZDafb7eUQT92dpP4CVjhUuO+DpGxGVVzRtEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEPoqpFg4J/GL49Pc3oMm3GqUEFMB8GA1UdIwQY
MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt
MmE2ODVmNzhiMjlkLzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk
LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Kh3rw5
uv5Q6wy2Za8olGg8lR6geOYuPulV1CDW6DazsMzm1F9hU0DN0HZudMwg6RS3CN2I
6SVBXfAkl4WXr0mW2wNW05/eAVaznseq6SKCFiWqY3CEu+SDpyyM3GC+ei2/0jzQ
yTVlvdHz3O6uucyNzYQxUH1ufxfir5+yLFr+fFTumr0LYLGRw610PsBPG4t4bDf4
5ZkKgcx35TxrHiQKqMGPtjJQnXDsIq2dOop//ftpi5u7QOXSUd/g8swGnbrMxW/v
LJ0wOXCZQ4owj1jomNDfe50oh1HLd6h5fjzjMRRskBv57GuQrBpe7O9/i6nN94Dt
K4WcXATDXHUinA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:38 2026 by rpki-client