Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: lW08EWDxWLKdLdn5vY0yOjqcPdVE+1RIRDxESIanOTw=
Subject key identifier: 0D:EA:F9:C9:FD:37:91:F6:71:B1:6E:BD:EC:3C:C0:F4:2B:C7:A5:C1
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01A1DEA76A40045130788BBD1D736E7E56D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 14BB
Signing time: Sun 15 Nov 2026 10:01:15 +0000
Manifest this update: Sun 15 Nov 2026 10:01:15 +0000
Manifest next update: Mon 16 Nov 2026 10:01:15 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: Wcu1ToTNIJQEAbS+4ShZyiIgp7KOMgw7j9rh6rP7PrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:6a:40:04:51:30:78:8b:bd:1d:73:6e:7e:56:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Nov 15 10:01:15 2026 GMT
Not After : Nov 16 10:01:15 2026 GMT
Subject: CN=0deaf9c9fd3791f671b16ebdec3cc0f42bc7a5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:0d:a8:c3:5c:c9:af:b3:ac:6e:bd:4f:62:
79:aa:e2:ba:e3:d5:3a:b7:26:c6:17:04:fd:a6:92:
b8:14:d4:c5:a2:8e:cd:8d:49:89:1d:66:67:b5:57:
2b:b3:7d:ce:7a:69:fa:6e:3e:1c:37:76:90:f1:d4:
86:ff:69:a1:aa:5d:5c:e2:2e:d8:bd:24:23:87:10:
7b:2e:3b:80:6d:ec:24:c5:16:12:e3:90:d5:16:56:
72:b9:68:1f:9a:e8:44:cf:2a:76:14:d2:76:bf:6c:
d8:d2:6e:21:0a:71:a6:82:39:fb:26:26:d2:e7:60:
fd:6a:c5:ab:50:e2:82:82:54:d7:95:6a:5f:b2:32:
b2:80:6a:5d:83:9d:11:82:d1:e5:95:a9:fd:35:42:
1c:10:95:fd:40:5d:50:fa:ce:43:a8:88:32:ef:79:
d9:fe:56:c4:52:9b:37:71:20:75:1e:53:9c:b6:f3:
66:1e:e2:99:e0:bc:7e:d4:af:1e:97:f1:5c:e3:44:
79:1e:8b:d6:30:08:9b:6f:16:13:e9:57:1e:64:c4:
50:0f:09:23:51:90:da:81:0b:f1:51:94:f6:e2:02:
53:4e:0d:e3:36:9d:36:98:aa:97:95:fe:2e:3b:64:
76:b4:6c:0d:cb:ad:b2:92:a2:b0:5f:92:4c:b2:06:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:F9:C9:FD:37:91:F6:71:B1:6E:BD:EC:3C:C0:F4:2B:C7:A5:C1
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:50:a7:8e:62:3e:a4:a9:8d:e8:ba:4c:23:5e:62:29:32:
df:46:6e:ea:42:65:b4:8a:d4:b6:c4:b4:1c:54:a3:83:0c:ae:
94:34:1b:3d:8c:41:5d:e6:45:24:cf:c8:14:d6:ba:c4:64:cb:
a2:be:12:c0:2d:d9:29:93:65:c7:bd:c6:b7:a5:e0:c0:34:4e:
c0:15:45:dd:ed:d5:14:10:db:35:b3:f7:33:2a:cd:6a:ff:7b:
c4:5d:5b:ff:b2:62:3b:c8:e4:fc:83:83:dd:9a:04:ae:44:92:
bf:1c:58:8a:76:35:fa:79:19:6a:0a:c2:7b:d2:a0:f5:42:b0:
7f:89:57:8f:b0:fa:76:f8:23:cd:0c:5c:87:d8:8f:2f:65:e4:
36:cd:e1:01:26:42:05:ed:44:a7:72:f2:9d:cb:ee:0a:f1:fd:
b7:87:ae:7b:58:1d:d4:03:b7:a1:26:ff:b7:b9:6c:c5:fb:e3:
7c:aa:9f:11:74:34:03:41:61:c7:0b:aa:82:ac:d7:eb:f0:b0:
0e:eb:19:a0:78:60:15:f4:cb:91:cc:45:88:9c:6b:83:99:79:
28:a8:c7:99:38:d8:2d:e1:34:22:1f:11:ee:57:c3:34:5a:07:
58:35:de:58:71:bb:4e:f6:c0:df:72:d1:4b:74:5f:c7:80:78:
61:cb:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:04 2026 by rpki-client