Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: ii/Cfngvpj2H3yoa3Ig2sbdMRPg7WUwUAU8t9qjXsW0=
Subject key identifier: C2:7A:7F:09:B0:7E:99:85:35:43:DD:47:49:84:C5:F3:55:F3:71:AC
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 019E1D594230AA64A4A7622F5DAC92AE53DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: xY5A06NpaqIrwGVNMAQGkQ6qpFMDcBwdNb1ejd7MgX4=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:42:30:aa:64:a4:a7:62:2f:5d:ac:92:ae:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=c27a7f09b07e99853543dd474984c5f355f371ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:7d:cb:53:9e:27:56:76:a3:71:90:42:07:
93:93:8e:88:3a:ce:70:3d:c8:14:b9:6b:da:0e:4b:
4e:98:ba:d7:5e:48:12:be:b3:f3:5a:2c:1c:f7:e7:
f5:d8:70:d7:6a:ff:f8:4b:09:75:4c:04:8c:4c:64:
25:0a:00:5b:b9:23:ed:b5:b3:fc:10:28:de:ba:72:
ab:c7:2e:6e:7d:a0:ee:7e:f2:26:1c:a7:89:85:99:
b0:54:7a:36:d7:50:43:a1:96:94:f3:05:b2:fd:7a:
0e:11:97:c5:e7:2c:9c:36:8e:63:2e:f6:24:29:ad:
50:74:37:2f:9e:14:47:a2:55:09:db:19:d2:42:3e:
fd:46:2e:57:eb:8e:9b:cd:63:62:57:01:55:79:bd:
57:84:53:82:db:a6:03:6b:f5:85:8b:94:f4:db:f0:
e7:99:f6:94:91:8d:e3:62:17:72:6d:b2:38:13:3a:
77:af:92:ef:45:ac:ca:3e:94:96:11:fb:ec:b4:b8:
82:19:cb:e8:ff:82:9c:cc:88:fd:88:79:c8:52:15:
19:ba:8c:a6:c5:3a:4e:1b:63:fb:48:51:06:61:7a:
10:e2:dc:fd:4e:9d:aa:69:8a:de:b7:85:8d:7b:2d:
6c:93:3e:51:96:18:94:6c:88:99:71:15:47:3d:72:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:7F:09:B0:7E:99:85:35:43:DD:47:49:84:C5:F3:55:F3:71:AC
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:3d:5e:ff:c9:bd:41:47:a1:b1:c5:c6:04:76:b0:1b:94:
7a:f3:0a:38:16:8c:4e:29:cc:ad:13:3e:f1:7a:5f:10:2f:dd:
2d:b8:44:01:1e:43:30:51:ea:f7:ae:75:bc:75:d9:9d:bd:c7:
a9:98:4e:fc:ad:36:2e:27:98:e4:26:54:b4:45:e0:5f:20:06:
28:47:e9:0c:b4:20:16:fa:82:91:a0:70:ef:d4:89:97:a2:6d:
77:49:e3:93:d4:ee:e9:25:a4:80:4d:15:00:0b:88:f7:9b:ee:
d3:59:a8:1e:1c:70:e5:5e:3d:a4:29:ed:ab:d0:12:1b:08:d5:
52:f7:a9:1e:c8:73:6e:06:fb:53:5a:23:7f:bd:0f:c0:c2:bb:
f5:10:7d:25:4f:f6:4e:93:a1:ad:08:41:a2:11:7f:fc:95:b9:
99:61:31:25:c4:93:bb:f0:dc:7f:02:f1:2c:e1:27:1f:43:52:
67:6e:74:72:0c:e9:c0:3d:01:07:ad:d4:5d:fa:52:db:68:9a:
f6:68:55:f2:14:a7:17:f8:7c:43:bc:7f:ee:86:d9:42:8d:c8:
6e:ec:e5:90:ed:43:50:32:8b:8b:6e:5e:6a:91:96:be:eb:f3:
a9:5a:a7:80:c1:35:2f:f0:d3:b1:c4:54:b8:d4:bc:53:c9:e8:
5c:fd:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:46 2026 by rpki-client