Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: FAj9WuVeGyQLI1v8cYIKJV2Muoloe994BnK1C/ihopw=
Subject key identifier: 72:0A:9F:87:BB:82:45:DF:C9:FE:EA:79:14:E5:38:0E:F8:C8:81:C1
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 01A15409997D9008A7D9723A131F71310F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 12:01:17 +0000
Manifest this update: Mon 19 Oct 2026 12:01:17 +0000
Manifest next update: Tue 20 Oct 2026 12:01:17 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: nG34tEmDU21PuTMOKluQA0IW5UVMejdXJKg1t+GbC20=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:09:99:7d:90:08:a7:d9:72:3a:13:1f:71:31:0f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Oct 19 12:01:17 2026 GMT
Not After : Oct 20 12:01:17 2026 GMT
Subject: CN=720a9f87bb8245dfc9feea7914e5380ef8c881c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:63:3c:06:9d:45:67:4e:4e:7e:69:af:4f:
ba:1a:93:43:58:86:a8:16:47:49:4a:7d:c7:f7:53:
4b:6a:df:05:97:9e:fb:cb:6f:75:76:33:82:39:44:
d5:1b:48:d1:b7:dd:04:6c:a0:ff:90:82:79:74:19:
53:b6:4f:fe:ab:a4:14:eb:1a:a1:64:2f:6e:34:ef:
b2:00:dc:3d:76:78:d2:03:b6:ac:4b:57:f7:14:b4:
1b:0d:e4:e1:fc:55:69:86:29:1a:0c:34:e5:2f:d6:
77:65:97:80:da:6a:98:b0:76:b5:b8:44:33:89:b3:
5f:51:88:2c:42:d9:43:98:37:6b:a5:e8:df:d9:bb:
32:25:1d:2a:59:67:17:78:59:d9:93:dc:3e:7a:8c:
3e:81:06:26:63:4b:e5:49:98:f9:8f:d8:f1:e5:37:
11:b1:a4:01:f7:90:ef:55:90:36:14:b9:e8:67:a6:
4b:f6:b5:77:45:0d:c5:a3:56:73:f3:12:30:c3:ed:
e8:63:5c:40:b4:47:21:a5:f8:bd:c6:b8:22:0b:fe:
a8:81:ea:61:96:c3:c5:18:c9:4d:cf:fc:cf:fc:ef:
4d:cd:1b:09:d0:6c:1f:d5:35:42:88:a4:55:e0:1e:
e2:83:e9:04:c4:03:4b:98:71:52:b9:d8:ec:bd:04:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:9F:87:BB:82:45:DF:C9:FE:EA:79:14:E5:38:0E:F8:C8:81:C1
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:fe:f3:39:5e:71:cc:23:6c:ad:05:9c:39:07:93:16:cb:
0b:85:b9:06:a7:c7:01:b2:31:d1:5e:47:97:1c:d6:68:ef:7c:
d9:19:db:a5:ec:e8:3d:8d:62:4f:a8:f9:39:c5:7f:6a:b6:1b:
81:ab:7d:09:0a:f0:a3:37:dd:e9:e5:c9:44:4f:b9:29:2b:91:
05:e7:36:b5:85:8e:3d:52:ac:f3:83:be:29:0c:59:e0:62:48:
49:b6:82:10:ad:de:ef:f5:b2:e6:b4:93:63:7f:33:c0:87:53:
d1:5e:a7:36:98:06:41:e6:be:3f:7b:dd:5b:11:d6:e1:f1:30:
9c:12:4e:08:7e:ca:41:13:bd:e7:3b:fa:e1:9a:1d:87:54:87:
e0:db:a2:f8:10:bc:2d:8a:a8:96:cb:fe:fc:ae:e5:34:8d:0e:
ac:b1:aa:be:8d:ce:a6:97:5a:d2:41:9f:48:97:2d:b0:3d:e3:
fd:7a:23:9c:d8:e1:c6:1e:72:30:dd:54:f1:0c:9a:e1:51:ff:
6b:a2:ca:a7:8a:fd:da:c8:c9:8b:d1:68:8e:9e:33:1a:96:3c:
cd:d0:ed:b2:57:e9:07:b8:d7:94:67:cc:a5:dc:09:04:6c:1c:
8d:89:b2:26:fd:ee:e2:d0:a8:b4:59:28:5b:fc:f3:e1:5a:4c:
09:44:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:47 2026 by rpki-client