Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: rlO8tH1RPsExfWMy8euMElN5apBoPFH72qyD0uF3nnM=
Subject key identifier: AD:49:7D:F8:52:D2:CA:59:66:0B:C3:52:DA:72:F1:DB:D2:DE:5D:2A
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01A1423AB8CD789E14B2E963D0DD45A165FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 146A
Signing time: Fri 16 Oct 2026 01:01:46 +0000
Manifest this update: Fri 16 Oct 2026 01:01:46 +0000
Manifest next update: Sat 17 Oct 2026 01:01:46 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: juBhXqyMv1eHpbet7Deq7N+JeTCGrn2VNau6feTQI/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:b8:cd:78:9e:14:b2:e9:63:d0:dd:45:a1:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Oct 16 01:01:46 2026 GMT
Not After : Oct 17 01:01:46 2026 GMT
Subject: CN=ad497df852d2ca59660bc352da72f1dbd2de5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:55:58:ec:e1:ab:9a:fa:6c:20:9e:6a:d0:
3e:67:3d:e2:bb:1a:14:71:88:e0:a6:cb:39:49:27:
ea:0d:7c:24:e1:f6:ca:54:e7:85:91:0c:89:62:a4:
8b:67:69:21:48:99:3a:c4:5e:f8:99:e9:60:ff:da:
5d:14:0d:ab:61:0d:8d:27:f4:84:bf:f4:07:b3:a1:
e3:fd:9a:34:4b:a2:97:34:5d:99:08:93:a0:77:9c:
09:f5:72:aa:95:aa:53:b9:54:66:7c:ff:0e:3d:0f:
1c:0c:cc:65:8d:1f:65:16:63:e9:e9:2d:de:2f:08:
ce:69:e3:33:0e:91:b6:7c:ea:82:b3:c5:78:a9:27:
32:c1:41:fd:89:ec:98:d7:da:70:49:2d:4b:8a:d5:
f3:53:d5:c2:8b:a3:e4:ed:3e:de:33:24:cf:d0:a2:
ae:28:66:f3:83:8f:fa:81:94:a3:4e:c8:90:9c:74:
c1:91:87:39:c5:23:18:ec:76:ab:0e:26:47:14:f6:
a4:26:93:12:5e:70:e7:27:c9:83:0b:fb:32:8f:a8:
60:b0:5b:11:b4:81:f3:92:13:0c:c0:5c:ff:1f:61:
9d:a0:d4:c5:98:06:e9:0d:86:0b:85:82:c7:76:59:
a6:26:89:61:ab:7f:32:54:71:4a:a7:63:bd:d5:23:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:7D:F8:52:D2:CA:59:66:0B:C3:52:DA:72:F1:DB:D2:DE:5D:2A
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c9:29:0c:c4:9d:2c:6b:00:39:c9:21:04:cc:39:23:51:ec:
37:af:cd:4d:24:48:7b:04:99:a9:2e:da:56:bd:f0:26:1d:0d:
df:f2:2c:4b:78:49:84:65:94:35:1b:4e:58:ab:48:4a:db:a1:
4c:42:3a:ba:dc:d5:a2:f6:0e:62:2f:89:a7:4f:9a:65:4c:01:
cd:df:7c:36:09:29:b0:ba:fc:8c:c7:f5:8b:fe:ee:52:09:64:
ff:f5:18:6f:d1:e7:31:59:26:46:be:cb:06:b3:61:1d:ed:1c:
ca:6b:f4:d6:10:15:17:bb:48:20:a0:af:00:ac:45:79:ae:6f:
9f:34:c6:01:c6:39:5d:7d:8f:53:87:2c:88:2c:6b:99:f3:d7:
e4:d5:f7:42:b3:f5:38:da:be:bf:c6:ff:64:4a:2d:d3:aa:be:
b4:ad:86:77:94:d7:ed:fa:65:69:4d:3c:b7:b3:fe:02:f2:1a:
97:93:a8:6a:12:aa:63:88:ee:46:0f:bc:c1:42:37:a6:1a:3e:
4c:7a:28:58:51:40:4f:97:60:31:fd:ae:8a:74:6b:d5:1c:6e:
c1:04:bd:86:98:36:62:ff:26:ea:00:cc:8b:4c:8d:68:ba:ff:
f7:49:a0:86:cd:81:5d:86:b6:90:d5:dc:57:14:29:42:98:03:
25:2a:d8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCOrjNeJ4Usulj0N1FoWX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjYxMDE2MDEwMTQ2WhcNMjYxMDE3MDEwMTQ2WjAzMTEwLwYDVQQD
EyhhZDQ5N2RmODUyZDJjYTU5NjYwYmMzNTJkYTcyZjFkYmQyZGU1ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdVWOzhq5r6bCCeatA+Zz3iuxoU
cYjgpss5SSfqDXwk4fbKVOeFkQyJYqSLZ2khSJk6xF74melg/9pdFA2rYQ2NJ/SE
v/QHs6Hj/Zo0S6KXNF2ZCJOgd5wJ9XKqlapTuVRmfP8OPQ8cDMxljR9lFmPp6S3e
LwjOaeMzDpG2fOqCs8V4qScywUH9ieyY19pwSS1LitXzU9XCi6Pk7T7eMyTP0KKu
KGbzg4/6gZSjTsiQnHTBkYc5xSMY7HarDiZHFPakJpMSXnDnJ8mDC/syj6hgsFsR
tIHzkhMMwFz/H2GdoNTFmAbpDYYLhYLHdlmmJolhq38yVHFKp2O91SMzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1JffhS0spZZgvDUtpy8dvS3l0qMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArckpDMSd
LGsAOckhBMw5I1HsN6/NTSRIewSZqS7aVr3wJh0N3/IsS3hJhGWUNRtOWKtIStuh
TEI6utzVovYOYi+Jp0+aZUwBzd98NgkpsLr8jMf1i/7uUglk//UYb9HnMVkmRr7L
BrNhHe0cymv01hAVF7tIIKCvAKxFea5vnzTGAcY5XX2PU4csiCxrmfPX5NX3QrP1
ONq+v8b/ZEot06q+tK2Gd5TX7fplaU08t7P+AvIal5OoahKqY4juRg+8wUI3pho+
THooWFFAT5dgMf2uinRr1RxuwQS9hpg2Yv8m6gDMi0yNaLr/90mghs2BXYa2kNXc
VxQpQpgDJSrYTw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:07:54 2026 by rpki-client