Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: mMXGZieQRrgwgKB/towgYoZeRHoEaBpxovqrJ27Zi5s=
Subject key identifier: EF:09:08:E9:7E:FB:5B:9F:38:7D:2B:DC:01:F4:04:53:5C:E4:DC:5F
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 01A0D4946302094C6F45582FEF45E58D47E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 18:01:29 +0000
Manifest this update: Thu 24 Sep 2026 18:01:29 +0000
Manifest next update: Fri 25 Sep 2026 18:01:29 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: w/n0uivBm1SsjxabM0D+dRHorn5TbMZhR+3zK2MMfGM=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:63:02:09:4c:6f:45:58:2f:ef:45:e5:8d:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Sep 24 18:01:29 2026 GMT
Not After : Sep 25 18:01:29 2026 GMT
Subject: CN=ef0908e97efb5b9f387d2bdc01f404535ce4dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:1b:01:8e:8c:59:1a:85:d8:24:e2:d2:13:
84:c1:19:3c:82:7a:5c:aa:1a:96:ba:ad:9e:02:ed:
6d:66:5d:0b:97:dc:b1:3a:46:f7:a7:67:ae:d4:9e:
bd:9f:92:21:1a:d7:b8:e4:ad:b8:42:9c:b6:ab:4e:
e6:a6:da:de:2b:ac:a0:1c:bd:b9:63:2b:ab:5f:2a:
fb:04:b9:56:08:e5:a4:78:4e:3b:f5:9c:b0:6d:7c:
c9:21:2a:5d:e0:5f:86:1f:08:74:ea:af:21:fa:81:
ee:ce:83:41:2b:7e:93:f9:39:eb:6f:e2:c2:07:a6:
4d:3b:bb:32:05:e1:78:0e:27:e7:8e:52:72:81:7b:
d2:f8:49:ca:bb:ec:31:56:9f:1d:09:7d:f6:d4:92:
03:ca:58:e1:03:f0:47:4c:2f:2f:f8:a6:d2:70:4a:
69:6a:fc:fe:bb:91:01:fd:84:db:05:b2:e1:d3:1c:
da:e8:3d:0c:08:de:65:80:c9:8a:78:6d:24:ac:d1:
14:e6:d0:69:b0:54:dc:d2:0d:1f:89:c3:3b:14:1b:
6c:a8:db:20:55:3a:3b:33:aa:25:af:a5:d4:1f:cf:
00:b7:bf:10:2b:bd:87:e0:88:09:26:42:0f:20:3f:
38:45:a9:df:c5:d6:0f:61:37:bf:62:f5:ea:01:60:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:09:08:E9:7E:FB:5B:9F:38:7D:2B:DC:01:F4:04:53:5C:E4:DC:5F
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b3:ad:fc:d6:35:c6:f7:c8:fe:ef:bf:78:d9:33:58:1f:34:
e0:7f:ed:d3:24:1f:05:2a:5a:82:83:bd:c2:df:5c:ba:2d:d2:
3f:e0:95:d0:32:af:a9:68:9a:28:28:d3:40:28:9d:08:18:f2:
a4:f0:80:f3:62:2a:b2:6d:34:04:98:12:1a:f8:1d:97:e5:75:
aa:20:82:7b:8b:2f:3e:cf:65:6f:38:1e:b8:38:0b:92:ad:3f:
ed:50:8a:12:e6:a5:fa:9b:9c:56:05:87:64:aa:c1:83:22:1b:
1d:a4:d0:8c:b5:f9:39:cb:74:5a:98:e8:80:e8:82:7e:18:07:
f1:ce:c7:11:80:81:73:f0:1d:83:ee:26:78:6e:1f:c0:49:17:
92:73:04:91:83:31:aa:0d:19:68:ef:7d:cb:6d:7a:40:84:ba:
a6:2c:20:2e:ac:db:b7:01:01:00:73:ab:60:11:aa:46:95:64:
da:b5:23:62:e6:45:73:18:6d:38:38:08:eb:23:a6:d2:8d:a1:
4b:5f:c4:b6:59:55:bc:13:05:4a:93:9d:92:95:b9:a2:ec:f3:
8f:ff:2e:58:52:91:7e:53:2e:f9:7f:83:f8:7f:bf:6d:dd:93:
4c:c2:12:2e:27:65:66:3e:40:e2:04:4f:e4:99:04:8e:ef:31:
16:b6:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:11:19 2026 by rpki-client