Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: TCPMOPAqm7q8B/x7e2/tQVCJXQT6Syo8S2LXokfOSv8=
Subject key identifier: 17:3D:2B:1A:FD:BE:8D:0A:F8:7A:E3:61:77:0C:D3:4E:9E:5D:DE:68
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01A0CC6C7D89CB9C06D13FF541DFDECA60D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 142D
Signing time: Wed 23 Sep 2026 04:00:57 +0000
Manifest this update: Wed 23 Sep 2026 04:00:57 +0000
Manifest next update: Thu 24 Sep 2026 04:00:57 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: lrlv9VUCkFn42AmuFLvARu9jFpA6tbhknPQUBSEqzhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:7d:89:cb:9c:06:d1:3f:f5:41:df:de:ca:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Sep 23 04:00:57 2026 GMT
Not After : Sep 24 04:00:57 2026 GMT
Subject: CN=173d2b1afdbe8d0af87ae361770cd34e9e5dde68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:e3:8f:4b:2d:89:00:91:df:d1:55:9e:40:
71:8a:73:63:e2:4a:f1:59:2f:48:5f:e9:33:1a:0a:
28:f6:b6:bb:ab:02:05:07:d5:83:71:51:45:2e:05:
98:6c:15:be:d5:0d:10:22:22:98:14:99:2f:05:0c:
57:e6:d9:d1:d4:be:43:89:4b:ab:b4:82:40:7c:28:
ac:65:fb:8e:9a:42:70:0e:d6:23:91:2e:e7:f9:9d:
3d:f6:66:9e:53:61:76:8f:03:47:2b:ba:ed:88:ab:
a9:e0:8b:3c:c0:e6:93:d6:db:91:71:7e:fd:27:d4:
d7:76:5b:02:d4:b8:57:25:53:c8:bf:70:c9:de:81:
97:ca:39:ef:86:b7:fa:51:3a:86:8a:75:5f:50:12:
4d:81:e5:e5:64:9c:02:0a:a3:96:df:ec:8c:a4:db:
7a:b0:b2:66:a7:e4:ff:d0:7c:fe:f8:11:a9:e4:0f:
bd:0d:01:ef:17:60:ee:4e:41:c8:25:ff:5e:d8:2d:
5e:94:44:6e:b1:74:78:97:a9:05:9b:5a:79:1c:4b:
a9:80:c3:07:98:3a:13:06:23:72:2e:03:e3:59:5d:
fa:97:3c:6c:97:f4:9e:74:ba:db:ca:d0:77:2a:e5:
4f:e9:c9:8c:10:5d:06:c0:2c:a0:58:4b:5c:65:0c:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:2B:1A:FD:BE:8D:0A:F8:7A:E3:61:77:0C:D3:4E:9E:5D:DE:68
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:a2:aa:27:44:bc:b4:ec:75:1c:3e:dd:61:9c:0d:9a:c4:
cb:bf:0f:5c:89:d8:36:58:e9:e1:2c:da:8f:be:08:28:ac:74:
48:32:bc:71:e1:53:eb:18:15:76:0b:09:1b:44:e1:1a:d9:be:
8e:6e:77:04:42:a6:d6:7e:5e:6a:d7:87:ee:a4:7a:70:81:6f:
ab:9a:cc:7f:ed:84:a3:2d:68:cd:bc:16:65:43:4d:7d:89:0f:
08:6d:31:f8:cd:7d:cb:2e:02:f4:6c:ba:02:18:aa:37:38:b2:
e7:86:c6:ce:10:aa:5b:ed:e3:1b:33:ba:6a:c6:d8:93:74:ee:
9e:55:25:5b:c0:e8:4d:9b:ce:b9:74:9d:e9:14:36:62:ab:b4:
50:b0:aa:7e:cb:0f:99:df:52:56:9f:56:25:cb:c8:45:cf:a1:
19:c9:f9:da:67:76:0b:82:29:98:f8:3f:cd:dc:7d:23:16:50:
a7:57:4c:1d:b2:dd:12:ff:f6:05:ce:3e:ea:ae:df:3c:c0:0c:
ac:92:1b:31:d7:45:cb:a8:37:14:ec:24:50:df:13:10:1a:f4:
ac:45:7f:9f:80:19:32:c9:11:f6:4d:f8:f2:1a:98:19:23:2f:
6c:93:dc:b5:4d:0c:7c:a2:00:98:94:af:a0:dd:93:dc:a2:95:
d6:36:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:37:06 2026 by rpki-client