Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: MVmwe1OsLgOtU0Zdh/9AV8zxnym0Mv5RdQTuuZ4EmRE=
Subject key identifier: 67:29:B4:C6:D2:2D:25:EB:58:8D:AE:AA:C6:F1:74:E5:4B:E3:4C:4E
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01A001A5CB70DA06C144B11CA43DEB42180F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 13C4
Signing time: Fri 14 Aug 2026 19:00:37 +0000
Manifest this update: Fri 14 Aug 2026 19:00:37 +0000
Manifest next update: Sat 15 Aug 2026 19:00:37 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: nSCevls7G1Np69veGlHg/3XpEnTZoJm5vefsHiE2o/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:cb:70:da:06:c1:44:b1:1c:a4:3d:eb:42:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Aug 14 19:00:37 2026 GMT
Not After : Aug 15 19:00:37 2026 GMT
Subject: CN=6729b4c6d22d25eb588daeaac6f174e54be34c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:af:49:fc:d7:5c:c0:ba:ac:d2:63:de:38:
9e:22:a7:48:d1:78:11:62:64:cc:e1:d9:a9:ca:93:
c6:81:6d:2e:ea:c9:11:25:64:c6:16:cd:21:cf:3b:
db:52:e6:d6:e2:9e:ad:ce:f8:a9:8b:df:20:59:31:
04:b1:d2:e1:03:f2:0f:c0:7f:36:02:2a:8e:01:05:
b4:37:2e:1a:f9:49:9a:b2:fe:1e:49:b3:30:fc:e7:
2f:ba:b2:3d:0f:a7:e8:2d:ee:ad:81:4c:22:d2:fa:
4a:3d:ce:8a:4c:36:59:68:7c:c3:3e:e9:51:10:ca:
e4:7b:6f:b0:ac:fa:96:4a:b0:20:86:90:9b:5f:9d:
8e:1d:53:46:e5:e3:34:26:01:78:fa:b1:9b:f4:df:
08:94:b1:5e:ec:03:ec:35:d8:cc:40:fb:56:f7:e4:
1e:32:7f:a1:a2:7e:0e:12:ad:99:23:ba:d5:dc:48:
f4:b5:fb:73:00:71:17:6f:e1:c5:13:60:af:f0:24:
ff:33:c5:b7:21:ef:a8:4b:47:dc:a1:d0:47:5d:74:
31:4d:c9:4e:5e:19:76:8d:07:f1:a7:82:99:ba:4d:
f6:56:10:38:5f:79:35:38:24:af:92:91:3d:a3:6a:
97:bb:49:50:8c:5a:15:85:e6:dc:b3:de:6d:24:f1:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:B4:C6:D2:2D:25:EB:58:8D:AE:AA:C6:F1:74:E5:4B:E3:4C:4E
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:96:f8:f6:0b:e4:d6:da:b5:6c:59:7e:cd:34:77:3f:15:
eb:d8:c0:01:2b:24:4d:a4:a5:a3:7c:2c:8b:17:cf:8b:92:1a:
06:c7:a5:c9:62:61:da:ac:bc:dc:1b:2c:c9:75:1b:98:2c:11:
b4:89:d3:3a:e1:f3:6a:d3:8a:f3:48:c6:06:c2:2e:74:e5:9f:
a2:27:e8:d1:c7:79:54:4f:4a:2c:e2:0d:89:5c:5b:59:53:eb:
13:41:63:a7:85:8b:79:77:ef:86:78:de:01:6a:3b:54:64:0f:
68:a6:49:85:11:c0:5c:f8:82:6f:44:f7:27:90:a2:c0:bc:a1:
dd:a4:a9:38:71:68:b7:af:a2:16:46:00:d8:a3:fc:6f:53:9a:
48:af:a9:65:ab:2c:7a:c2:b7:77:89:7e:e4:ce:12:1a:27:da:
08:de:72:86:bc:14:24:8c:3f:fa:cf:ec:98:f9:f2:a2:18:5f:
3a:bf:bc:f0:ce:08:b2:a2:aa:d1:b9:6d:ff:eb:21:9f:ae:b3:
01:e2:3e:81:a4:d2:85:5f:87:7c:a4:d3:4c:d8:cd:80:d0:b8:
45:c0:ad:95:a9:ce:b6:8b:d5:5f:57:f3:02:d6:20:4e:e8:9c:
aa:4f:e1:20:35:fe:01:3a:18:49:e1:4e:3e:92:a5:3e:4e:95:
36:b0:ce:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpctw2gbBRLEcpD3rQhgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjYwODE0MTkwMDM3WhcNMjYwODE1MTkwMDM3WjAzMTEwLwYDVQQD
Eyg2NzI5YjRjNmQyMmQyNWViNTg4ZGFlYWFjNmYxNzRlNTRiZTM0YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxySvSfzXXMC6rNJj3jieIqdI0XgR
YmTM4dmpypPGgW0u6skRJWTGFs0hzzvbUubW4p6tzvipi98gWTEEsdLhA/IPwH82
AiqOAQW0Ny4a+Umasv4eSbMw/OcvurI9D6foLe6tgUwi0vpKPc6KTDZZaHzDPulR
EMrke2+wrPqWSrAghpCbX52OHVNG5eM0JgF4+rGb9N8IlLFe7APsNdjMQPtW9+Qe
Mn+hon4OEq2ZI7rV3Ej0tftzAHEXb+HFE2Cv8CT/M8W3Ie+oS0fcodBHXXQxTclO
Xhl2jQfxp4KZuk32VhA4X3k1OCSvkpE9o2qXu0lQjFoVhebcs95tJPHBtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcptMbSLSXrWI2uqsbxdOVL40xOMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrSW+PYL
5NbatWxZfs00dz8V69jAASskTaSlo3wsixfPi5IaBselyWJh2qy83BssyXUbmCwR
tInTOuHzatOK80jGBsIudOWfoifo0cd5VE9KLOINiVxbWVPrE0Fjp4WLeXfvhnje
AWo7VGQPaKZJhRHAXPiCb0T3J5CiwLyh3aSpOHFot6+iFkYA2KP8b1OaSK+pZass
esK3d4l+5M4SGifaCN5yhrwUJIw/+s/smPnyohhfOr+88M4IsqKq0blt/+shn66z
AeI+gaTShV+HfKTTTNjNgNC4RcCtlanOtovVX1fzAtYgTuicqk/hIDX+AToYSeFO
PpKlPk6VNrDO/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:25 2026 by rpki-client