Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: +zZ7tuiz4n1PXVdszRewYf2mz07jtBUdQGg96pTRku8=
Subject key identifier: 6E:BB:67:BD:9F:AE:7E:24:60:41:32:C8:BB:99:74:DF:31:3D:46:47
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019D27A8F2D8A2698891251AA1309133A860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 124A
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: Ga1qOBWi9zZ5GAo89KInOL1A6zLcc/ZOCMc9kZeTFpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f2:d8:a2:69:88:91:25:1a:a1:30:91:33:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=6ebb67bd9fae7e24604132c8bb9974df313d4647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:37:b8:2e:e8:39:a2:cf:91:20:2c:13:dd:
a7:ee:c9:40:f5:bf:35:c4:e0:8f:f7:94:95:dc:6d:
d2:30:4a:84:f8:69:ac:b2:89:64:7c:8e:f8:39:fd:
e3:5a:b7:8b:1e:af:7f:3b:16:44:e7:41:41:52:59:
66:1d:5a:8e:7d:97:f0:28:bc:c3:c1:a9:42:56:b8:
a5:3f:1c:b5:01:f3:a0:20:99:12:bb:ef:26:b2:b0:
68:29:a4:4d:26:f5:a9:2b:eb:04:2b:0b:89:37:1a:
81:a0:5b:f3:49:d0:a8:e5:18:db:0f:eb:6e:75:74:
12:8c:fe:8c:8b:d2:7b:1a:2c:06:39:d9:bb:6a:22:
81:e4:f2:28:9e:e3:ef:b8:0e:30:14:61:14:30:a6:
7e:9e:ee:f5:d6:8a:83:b0:71:5f:5a:80:14:18:1f:
9b:a5:ba:29:08:09:15:2f:fe:71:40:a8:81:d7:a0:
1e:72:09:5f:af:ac:9e:89:7b:5d:e3:51:61:73:fc:
ef:fc:3d:28:e8:fb:6d:0b:f7:03:e2:0b:ae:98:b5:
e0:71:b8:d9:79:3a:78:69:d4:d1:27:5e:8a:df:9e:
b4:33:4b:3b:96:61:f9:cb:fd:74:1d:14:8a:d9:16:
c8:8a:4e:e7:61:5c:87:21:f6:58:88:50:1a:1c:30:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:67:BD:9F:AE:7E:24:60:41:32:C8:BB:99:74:DF:31:3D:46:47
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:1e:2a:19:28:85:1c:ff:81:1e:e2:21:99:85:4f:56:33:
f4:55:a8:aa:54:fd:eb:b1:27:f8:f9:4c:71:47:2e:d0:8e:77:
5e:d3:4d:eb:1b:b9:40:60:de:fe:48:34:4c:98:64:5d:ab:30:
aa:5e:c4:03:4a:43:46:df:8a:92:44:b1:92:dd:1d:a2:71:0b:
b4:95:3f:76:b7:f7:05:85:44:0f:5c:49:78:1e:1c:72:ef:4b:
5d:63:fe:b7:8e:44:80:98:78:61:39:8e:82:91:5c:ba:29:da:
c5:93:bb:48:1e:70:3b:75:ef:54:60:7e:08:54:c6:72:ce:8a:
e5:04:ff:12:af:b1:15:07:6a:34:93:8e:f3:98:dd:11:2e:1a:
22:ab:da:de:37:3d:40:2d:f0:75:e2:75:2e:92:f4:4f:99:8f:
35:b2:ea:c3:08:35:6b:06:15:d3:c3:3a:2d:35:14:7b:a9:e7:
51:cf:51:c0:7e:15:a1:b0:b0:09:6e:27:8b:38:00:33:46:4f:
8d:1f:8f:64:8c:5b:53:ad:4f:94:fb:38:ca:06:e7:9b:9c:2c:
34:0c:2b:57:b9:2b:d7:39:bf:01:41:2d:c6:f1:d6:b5:41:e6:
17:8c:d4:c2:b5:9c:48:50:8e:9d:37:ec:1b:7c:1e:01:d2:35:
e2:06:57:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPLYommIkSUaoTCRM6hgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
Eyg2ZWJiNjdiZDlmYWU3ZTI0NjA0MTMyYzhiYjk5NzRkZjMxM2Q0NjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYM3uC7oOaLPkSAsE92n7slA9b81
xOCP95SV3G3SMEqE+GmssolkfI74Of3jWreLHq9/OxZE50FBUllmHVqOfZfwKLzD
walCVrilPxy1AfOgIJkSu+8msrBoKaRNJvWpK+sEKwuJNxqBoFvzSdCo5RjbD+tu
dXQSjP6Mi9J7GiwGOdm7aiKB5PIonuPvuA4wFGEUMKZ+nu711oqDsHFfWoAUGB+b
pbopCAkVL/5xQKiB16Aecglfr6yeiXtd41Fhc/zv/D0o6PttC/cD4guumLXgcbjZ
eTp4adTRJ16K3560M0s7lmH5y/10HRSK2RbIik7nYVyHIfZYiFAaHDBxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG67Z72frn4kYEEyyLuZdN8xPUZHMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5IeKhko
hRz/gR7iIZmFT1Yz9FWoqlT967En+PlMcUcu0I53XtNN6xu5QGDe/kg0TJhkXasw
ql7EA0pDRt+KkkSxkt0donELtJU/drf3BYVED1xJeB4ccu9LXWP+t45EgJh4YTmO
gpFcuinaxZO7SB5wO3XvVGB+CFTGcs6K5QT/Eq+xFQdqNJOO85jdES4aIqva3jc9
QC3wdeJ1LpL0T5mPNbLqwwg1awYV08M6LTUUe6nnUc9RwH4VobCwCW4nizgAM0ZP
jR+PZIxbU61PlPs4ygbnm5wsNAwrV7kr1zm/AUEtxvHWtUHmF4zUwrWcSFCOnTfs
G3weAdI14gZX+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:37 2026 by rpki-client