Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: 6UCFc1jzVaPWQ3IVAUEuCLuUdI9m0LFTxqvfDhkkwKM=
Subject key identifier: AD:E3:E3:15:AD:99:AB:AC:7E:40:BC:28:43:39:01:61:7E:C4:0C:DD
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 01A0021406D80BA44EF50D88094F678CF96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 21:01:01 +0000
Manifest this update: Fri 14 Aug 2026 21:01:01 +0000
Manifest next update: Sat 15 Aug 2026 21:01:01 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: 5MdqKkeYcnAclDRr48hB/7SbeLXOpQPsXGANd/ejQ8g=)
2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:06:d8:0b:a4:4e:f5:0d:88:09:4f:67:8c:f9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Aug 14 21:01:01 2026 GMT
Not After : Aug 15 21:01:01 2026 GMT
Subject: CN=ade3e315ad99abac7e40bc28433901617ec40cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:dc:ff:57:1b:6b:1e:7e:35:49:fd:f6:15:
25:15:81:59:29:f2:20:44:42:cb:f4:bc:68:f9:eb:
45:d2:1c:33:c8:b8:23:3a:f5:9b:bb:0f:7c:39:33:
f9:4b:17:bf:0d:75:00:b6:ba:17:a8:3e:89:d9:13:
a3:aa:04:9c:b5:87:02:a6:a3:59:54:bb:0d:a7:f1:
cb:e5:bf:97:f7:9d:be:aa:d2:ee:f9:db:23:e8:0b:
ab:b5:b2:a3:1d:87:dd:0d:ae:88:05:df:7c:51:75:
96:f5:68:9a:50:22:d8:37:8b:bf:df:4a:0b:e5:6a:
af:db:51:14:25:67:d2:c3:88:72:1c:39:8d:a3:23:
a8:ab:8b:a0:0c:05:2a:45:f6:96:41:c3:16:f4:73:
40:4c:fb:a7:04:ee:3d:7c:f0:f5:11:90:95:42:5c:
7b:0f:92:10:c2:41:1a:46:a4:aa:85:1f:7b:58:32:
11:19:d7:0c:d7:24:c9:e5:19:13:35:fe:66:9f:03:
a4:68:43:c5:89:5c:62:46:0c:1b:71:65:b5:ec:18:
da:b5:8f:c2:9b:33:3b:84:14:0e:84:ae:a5:8f:75:
5a:9d:45:3d:81:e2:ec:2c:df:1e:9f:58:25:30:0c:
58:c5:2d:8e:e3:63:79:eb:8b:5e:d4:51:0c:df:08:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:E3:15:AD:99:AB:AC:7E:40:BC:28:43:39:01:61:7E:C4:0C:DD
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1e:c9:7f:cd:2a:7d:22:d1:89:94:c4:be:76:08:9a:17:12:
31:e3:b2:18:e3:84:7d:47:5b:67:db:40:2c:01:56:39:31:da:
73:4b:69:2a:6a:df:8e:71:c2:77:a3:b5:06:a9:52:e7:cf:f2:
73:a9:74:fb:26:de:36:95:71:b2:dc:37:16:f3:ef:fa:3c:5e:
82:f6:33:f8:bb:4a:70:ef:02:fd:98:6d:ee:b1:97:01:8f:ea:
4d:7b:6d:b5:c2:85:0b:41:f6:c5:68:7d:02:c2:c1:08:54:3c:
1f:f4:ae:4a:be:09:0d:0b:db:d3:2f:23:b6:04:34:3a:5c:a5:
a7:cf:a9:b2:73:da:d6:9d:41:e7:48:a2:a6:45:7a:b1:63:0f:
d0:5c:0c:17:3d:5a:ab:6c:34:e6:12:01:ce:73:90:d4:71:ad:
c1:8f:84:2f:c5:4e:4a:bf:22:c9:8c:17:03:eb:11:94:20:b8:
fd:ae:4b:78:5c:66:4c:cb:85:8f:f0:80:cc:63:33:49:01:d3:
d2:55:a8:c4:34:1b:2b:fd:c1:0e:f8:58:cd:8f:14:e3:61:cd:
18:a7:d0:f4:2e:94:35:19:f7:6a:da:a5:c5:15:7d:e2:06:37:
58:5c:bc:0b:33:de:ce:d8:6f:67:2b:41:12:0f:0d:16:37:24:
2b:b2:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:54 2026 by rpki-client