Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: Cr9m79LB7Uu4rUEDVd/OB4N4j1IdWQ/R3y8u+rXXr3k=
Subject key identifier: 14:D2:E8:9A:DF:36:28:9D:B6:F5:9B:CA:8E:80:90:0B:EC:D7:EB:0B
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019D2A04C242B11F58B7ECC8F68EF60977EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: txx5PL9f6MvlBCoqbFzLV9L+0g7XtvlWAVTADvACySc=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c2:42:b1:1f:58:b7:ec:c8:f6:8e:f6:09:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=14d2e89adf36289db6f59bca8e80900becd7eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:7d:96:21:3f:d4:bf:21:0a:6d:be:40:04:
3c:cb:2c:5a:78:3b:97:94:98:21:37:16:7e:5b:64:
0a:3f:cf:f4:9a:53:cf:24:76:f6:2e:a4:91:0d:9e:
fa:53:4e:e5:5b:9a:ae:1a:7d:68:02:3b:a5:b9:2b:
b8:46:8a:3c:01:a5:52:75:9d:cf:0a:68:60:79:15:
fc:bc:40:81:d0:e9:d9:25:0c:3c:ce:1e:08:31:80:
48:c6:f4:fb:13:4f:76:b1:32:69:ed:4d:c5:6c:24:
c8:57:ea:98:68:a4:6a:0b:9d:db:db:3c:4f:69:3a:
85:4f:59:1a:40:1f:78:3d:c8:88:37:ad:d3:f1:90:
57:d7:48:4d:71:4d:10:3f:ac:10:3c:ad:ac:45:a9:
86:77:b6:63:cf:f9:df:19:9e:2e:b0:17:41:3f:2a:
93:fc:16:97:f1:e5:cf:47:df:af:39:a6:5f:30:ed:
e9:f6:33:ff:0a:87:cc:06:16:8d:73:66:9f:e8:4c:
7a:fd:41:37:69:53:93:33:68:0f:2e:b7:05:1e:31:
42:14:ca:70:5a:64:49:37:e2:03:7b:07:78:a7:c2:
1c:8f:46:fe:e4:3d:e4:4e:ab:f9:25:be:5f:6e:4b:
e7:b2:d8:9a:9e:c0:66:93:a0:4f:6f:ae:9a:c1:d1:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:E8:9A:DF:36:28:9D:B6:F5:9B:CA:8E:80:90:0B:EC:D7:EB:0B
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:42:b8:d6:9e:7a:f0:90:6e:73:ea:de:94:4e:70:f1:f0:1c:
c7:94:5c:3e:88:e1:ee:34:0f:52:ba:b7:25:4d:58:50:7f:00:
bd:d6:40:6a:aa:c8:ad:5f:5c:2d:1a:63:7f:b7:b4:1a:e8:be:
13:9d:c1:b9:40:24:7a:b9:0c:01:07:4b:d6:0f:3a:bb:b0:b2:
57:e5:8f:1c:5a:0c:3f:64:a3:df:33:83:1a:35:0d:f9:dc:c8:
4a:16:27:6c:2c:34:40:54:40:93:0b:3a:af:a4:db:7e:ef:f6:
5c:25:9c:b3:24:52:89:da:d6:3f:26:b9:bf:b5:7d:30:b7:58:
e0:92:cc:95:50:c9:b8:48:8a:26:d2:a8:47:e5:23:2c:3c:af:
96:41:e9:a3:74:84:c6:42:fa:33:ee:ee:72:58:50:a7:d1:56:
47:fa:32:f6:7f:7f:8d:38:d4:33:9a:1f:09:db:ed:92:e5:4c:
fa:93:17:84:21:c7:ce:d0:d7:38:b7:58:ab:f4:9c:17:b8:e8:
71:54:6f:42:f5:8c:2a:48:3a:04:3b:ba:6b:e1:b7:94:cc:c6:
06:c0:92:6f:eb:4c:fc:39:89:63:b2:93:a1:37:0d:08:ec:d8:
93:7b:a5:a9:e7:17:1a:5b:aa:0f:e0:ac:67:e7:6b:a0:66:1f:
09:73:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:49 2026 by rpki-client