Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: Y9ZyZyVTwFbsm6Me5zLc+R6fyErXsR6Jf2GFR32Gv60=
Subject key identifier: F4:9A:1D:60:AF:60:AC:CA:4D:97:05:16:6D:21:0E:98:47:84:49:38
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019D265F613AAFEBE9269370ACBB334BD5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: lYzB/MrPpW2+UhCCKy7fBWLxo8XptcdBJHluwN1NSlw=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:61:3a:af:eb:e9:26:93:70:ac:bb:33:4b:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=f49a1d60af60acca4d9705166d210e9847844938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:9a:d5:e9:0a:46:58:52:c6:f0:f7:44:a9:
c2:20:2b:8d:c2:12:d1:f5:07:0f:fe:74:f6:a7:2a:
a8:ee:e1:e7:34:34:de:49:94:c4:b0:17:95:3b:2a:
43:38:32:8f:92:8a:92:bf:69:a1:a1:7c:77:a9:ec:
65:90:e6:0a:cf:59:7a:18:ae:0d:0a:bd:62:0f:ea:
c4:70:1f:18:b3:dd:88:f0:c7:42:79:f2:38:70:fa:
06:10:f8:89:59:fc:ee:26:eb:97:34:95:a1:45:d6:
95:a8:91:9b:4f:e8:e2:c3:44:aa:6b:1c:15:0a:a4:
54:cd:a0:ff:a0:d4:c4:cd:51:f3:c4:a5:76:d8:99:
ac:bb:c8:2b:f2:9a:5d:42:81:2a:c3:1d:3a:6e:9a:
d0:3b:ff:86:e4:e8:e1:36:86:5e:af:c6:90:1c:af:
d1:30:9b:c4:ee:26:22:f1:55:e3:a2:1f:a3:df:b3:
71:8d:57:69:89:62:23:e1:58:dc:da:76:cd:9a:e9:
98:36:c6:37:78:04:c9:10:57:22:f4:97:0d:98:3b:
a0:c1:de:a0:bc:97:95:94:1f:fa:df:ee:c7:8e:07:
7c:d7:fc:c7:6e:c3:28:58:72:6e:17:45:c1:c2:dc:
fc:c6:01:40:04:a4:f1:91:5f:6f:54:6f:7e:55:4a:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:1D:60:AF:60:AC:CA:4D:97:05:16:6D:21:0E:98:47:84:49:38
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:59:8c:75:57:4d:fd:bc:1e:b5:b3:ed:b6:fb:36:10:82:3c:
7a:ba:a1:86:3a:a6:95:1f:24:4c:08:c9:9e:64:ed:fa:22:e6:
06:9d:7a:12:ce:89:d4:7f:14:53:68:91:19:8d:4a:e4:e2:2f:
f8:96:56:b6:4f:c4:e7:b8:1d:d6:2a:2f:36:f9:4e:da:1e:61:
c0:a8:23:b2:52:9a:83:08:4b:8c:99:f9:14:2a:6c:50:ab:98:
a1:e7:6c:bd:fc:d3:24:73:34:70:53:73:47:9b:93:c7:d7:82:
4d:8c:55:da:bf:b1:b5:29:87:3f:2c:e3:6c:ad:50:7e:74:2e:
4b:c6:04:4a:22:e4:63:a5:d3:f8:fc:4a:17:60:ac:f8:78:66:
ec:4c:e1:95:54:f7:23:a0:78:ae:7e:3a:a6:5f:74:26:e6:43:
51:12:ec:2b:25:88:0e:3c:b2:14:fb:a3:5a:54:e2:33:9b:ca:
4e:61:c1:38:4c:2f:d6:60:70:2b:a5:f9:cb:1e:5a:47:bc:c5:
35:05:a6:39:4b:72:bd:cb:3a:cd:49:b6:b0:b5:bf:70:13:f8:
8f:be:26:83:08:b7:21:c5:c6:5d:b3:0e:fb:80:34:29:44:50:
6f:e9:08:4d:cd:5c:f3:c3:1e:90:32:09:36:99:90:60:f5:49:
29:2e:72:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2E6r+vpJpNwrLszS9XoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjYwMzI1MTkwMTE4WhcNMjYwMzI2MTkwMTE4WjAzMTEwLwYDVQQD
EyhmNDlhMWQ2MGFmNjBhY2NhNGQ5NzA1MTY2ZDIxMGU5ODQ3ODQ0OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TGa1ekKRlhSxvD3RKnCICuNwhLR
9QcP/nT2pyqo7uHnNDTeSZTEsBeVOypDODKPkoqSv2mhoXx3qexlkOYKz1l6GK4N
Cr1iD+rEcB8Ys92I8MdCefI4cPoGEPiJWfzuJuuXNJWhRdaVqJGbT+jiw0SqaxwV
CqRUzaD/oNTEzVHzxKV22Jmsu8gr8ppdQoEqwx06bprQO/+G5OjhNoZer8aQHK/R
MJvE7iYi8VXjoh+j37NxjVdpiWIj4Vjc2nbNmumYNsY3eATJEFci9JcNmDugwd6g
vJeVlB/63+7Hjgd81/zHbsMoWHJuF0XBwtz8xgFABKTxkV9vVG9+VUr0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSaHWCvYKzKTZcFFm0hDphHhEk4MB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVmMdVdN
/bwetbPttvs2EII8erqhhjqmlR8kTAjJnmTt+iLmBp16Es6J1H8UU2iRGY1K5OIv
+JZWtk/E57gd1iovNvlO2h5hwKgjslKagwhLjJn5FCpsUKuYoedsvfzTJHM0cFNz
R5uTx9eCTYxV2r+xtSmHPyzjbK1QfnQuS8YESiLkY6XT+PxKF2Cs+Hhm7EzhlVT3
I6B4rn46pl90JuZDURLsKyWIDjyyFPujWlTiM5vKTmHBOEwv1mBwK6X5yx5aR7zF
NQWmOUtyvcs6zUm2sLW/cBP4j74mgwi3IcXGXbMO+4A0KURQb+kITc1c88MekDIJ
NpmQYPVJKS5yXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:02 2026 by rpki-client