Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: H+/g0I2HUGskQ4L/yKcDegoPkkNXyRjDJMEptmKoILY=
Subject key identifier: E0:64:7B:73:EB:0F:17:77:38:EE:77:3F:98:8A:CB:70:05:1E:7A:82
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019E1ED9F70DEB488F430D3A4E3A79E897BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 12CA
Signing time: Wed 13 May 2026 01:01:01 +0000
Manifest this update: Wed 13 May 2026 01:01:01 +0000
Manifest next update: Thu 14 May 2026 01:01:01 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: jyMAPmacVwfAluv25Ngj271OhstxP1dG2k61GuVHaOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f7:0d:eb:48:8f:43:0d:3a:4e:3a:79:e8:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: May 13 01:01:01 2026 GMT
Not After : May 14 01:01:01 2026 GMT
Subject: CN=e0647b73eb0f177738ee773f988acb70051e7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:ef:ba:37:92:f6:7d:1a:93:36:db:63:19:
05:88:98:fb:63:45:c4:bc:d0:a3:fd:14:1b:ed:42:
3f:5e:a1:83:e0:d7:3f:d8:4d:c6:e0:e2:1b:ff:d9:
15:e4:8d:04:1d:57:0a:c6:62:a0:4f:fe:12:0c:e6:
45:65:1b:f4:fb:12:c3:de:d1:5e:5f:f2:c4:48:ff:
42:4f:ce:60:87:42:d2:c8:0e:97:22:6f:95:d3:bc:
fd:3a:0a:98:d7:66:e4:10:eb:14:eb:ff:9f:0e:be:
61:98:3c:30:b9:f7:18:37:1e:e2:b5:a3:93:d2:10:
d8:f9:ed:35:37:5e:44:00:b1:07:5e:0a:15:42:97:
3a:be:41:b8:94:95:62:dd:b2:13:d4:3e:7f:02:58:
b6:bd:1c:d6:66:b9:b2:f1:a0:1b:c1:d2:9f:de:51:
07:3a:04:d4:cc:1e:24:90:3c:a0:16:bc:86:9c:39:
a7:0c:dc:20:ee:69:31:4c:75:23:a2:54:34:c2:1a:
a5:69:46:10:f8:81:e1:5f:05:41:e1:c9:f3:b1:fa:
6e:2a:41:b1:f1:f0:51:d4:11:b8:c0:0b:b4:99:b9:
b0:c2:9c:1c:86:23:33:dc:69:bf:96:3e:52:61:38:
c0:a8:aa:52:eb:8f:2f:52:0f:80:4f:c5:15:4a:9a:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:7B:73:EB:0F:17:77:38:EE:77:3F:98:8A:CB:70:05:1E:7A:82
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:0e:12:a8:f1:10:d5:2c:1b:c7:aa:3a:aa:b7:e6:29:a7:
d7:f9:f5:0c:8b:27:14:c7:57:d3:58:e8:78:f8:90:18:b1:2f:
12:e4:54:b2:86:6e:3a:a6:41:4e:35:69:fa:cf:0f:a3:a9:23:
8c:08:2b:e3:22:02:b7:46:f2:02:8f:46:ea:87:5c:c7:d5:20:
34:14:d7:9a:ab:6d:77:20:d9:6c:cb:ec:ee:c1:ab:e9:b7:36:
95:b5:a2:67:e9:aa:0e:e6:ac:5c:a4:bb:f4:82:af:e3:91:39:
9d:d5:1f:78:ac:f0:fa:58:8c:8e:ad:de:d6:24:55:96:dc:bd:
cd:f7:d5:8f:a7:7d:ba:40:a6:62:f1:81:ea:3a:1a:87:63:2a:
23:08:95:a0:87:55:0f:54:a7:4a:3a:21:9e:cf:26:7b:1e:15:
1c:d2:a8:70:c8:9e:45:1b:2e:18:34:97:70:6f:18:46:e2:1e:
54:59:66:c6:80:6d:c4:ff:93:51:16:d6:ef:4f:f6:76:56:04:
20:c1:4f:d1:a7:39:94:25:c8:21:ad:f7:4e:b0:f8:3c:03:94:
73:41:53:5e:0c:05:fd:cd:1e:a8:49:ca:5e:0b:8b:f7:ed:e4:
02:a7:76:b4:c6:91:cc:35:69:ff:f6:75:ae:de:bc:2b:b2:5e:
8f:39:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:31 2026 by rpki-client