Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: DfLHO+PO3qcSSAAK2VgCHAA/iGt/b96WVMvuBy9OL+g=
Subject key identifier: 52:ED:45:29:FD:21:50:36:C8:2A:62:FD:D5:68:60:74:7C:D7:E3:AF
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019F9022DE4D99AD0BED2A6EFD3595CD86E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:31 +0000
Manifest this update: Thu 23 Jul 2026 18:00:31 +0000
Manifest next update: Fri 24 Jul 2026 18:00:31 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: xaXLPGEgUqDrL1GoFQdfjekGxp//nXtQxE/uhUp793M=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:de:4d:99:ad:0b:ed:2a:6e:fd:35:95:cd:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jul 23 18:00:31 2026 GMT
Not After : Jul 24 18:00:31 2026 GMT
Subject: CN=52ed4529fd215036c82a62fdd56860747cd7e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:24:64:fe:6e:57:05:ae:5a:60:6c:ef:ff:
c8:3f:bc:95:18:1c:5e:6e:09:2c:0e:5c:92:ab:01:
a8:c4:b5:91:c9:51:67:50:2c:c1:a1:69:d5:4a:24:
22:d4:7e:0f:c0:a3:f4:4b:2f:d9:83:9b:ba:4a:7f:
c1:85:9a:44:79:e1:eb:5d:c8:2b:39:1a:d5:7f:3d:
cc:2d:de:00:ef:01:a8:52:f9:1b:d0:5f:8a:d1:08:
a5:5f:c3:07:4d:35:7e:10:02:cc:87:66:f3:f3:2e:
3f:98:17:16:b8:c3:95:6d:e3:fb:b3:9b:14:de:a6:
67:3b:f7:32:8d:ac:e1:3d:87:15:44:ba:79:5f:0d:
a7:84:97:2f:7c:16:a5:6e:bd:1a:58:13:1f:97:fe:
ad:95:2c:62:46:1e:25:1b:aa:76:3e:bb:a4:0b:a6:
d0:63:f9:3b:e7:13:b3:8c:9c:a5:92:7a:ea:be:af:
bc:80:0b:9b:31:a8:82:f1:c7:29:3d:85:21:db:c4:
1d:34:96:7a:e4:3d:a5:01:ec:22:00:73:d2:95:b4:
56:f6:45:66:25:1e:93:af:79:f4:39:e1:24:c1:9b:
3c:15:3d:04:96:b0:75:45:d8:2a:58:40:2c:21:a5:
41:aa:38:ef:0e:53:de:d8:af:44:ae:8e:fa:a5:a4:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:45:29:FD:21:50:36:C8:2A:62:FD:D5:68:60:74:7C:D7:E3:AF
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ee:9a:73:8d:d6:c7:3a:99:6b:15:b2:87:ff:46:b1:a4:9e:
23:c8:49:15:84:a3:67:2f:ad:0d:31:06:6f:5d:17:3b:48:2c:
91:07:70:9c:7b:cb:a1:2d:13:53:62:81:43:9e:5f:32:79:c9:
2e:0d:f2:70:e0:45:ab:43:34:17:ad:30:3d:43:e1:16:16:2f:
d4:bc:18:3e:55:5d:5d:dd:3a:7f:75:c4:b4:e4:8a:5d:af:6b:
94:4e:d7:1f:d6:7e:5e:ef:1a:db:1d:fd:e7:c2:07:19:8b:37:
f6:18:eb:ba:27:2c:28:f0:fd:93:83:14:4f:7c:f3:e4:af:f8:
88:f0:a6:4a:fb:35:cf:58:82:28:d5:47:19:aa:16:d6:76:33:
20:b4:ae:e4:18:8b:b7:8a:3f:42:2a:65:4d:89:08:fc:62:9b:
ae:24:2f:28:4f:86:8f:cd:fa:b7:ce:34:a2:06:af:60:4a:7c:
3f:eb:c2:34:f4:59:52:db:f6:13:8f:d8:08:76:19:af:82:73:
04:a7:38:91:67:b6:42:b7:17:51:ea:bb:35:79:66:b4:a6:fb:
ad:9e:88:f6:13:7f:03:f1:f7:b9:7a:9d:d2:d0:fe:46:6f:1b:
ff:d1:f6:f8:03:22:12:74:63:4b:c2:c7:7d:95:0f:6a:46:e4:
83:d1:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:05 2026 by rpki-client