Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: x4NsuzL1BGTbuKmxE4yCQnrfyzcnziJ5m5xE01GCDts=
Subject key identifier: 29:68:D5:B3:12:15:F2:69:51:BF:BB:DB:0C:43:DF:E4:CD:D0:E0:37
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019F8E34F9D8923A93344C3018115030272C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 09:01:04 +0000
Manifest this update: Thu 23 Jul 2026 09:01:04 +0000
Manifest next update: Fri 24 Jul 2026 09:01:04 +0000
Files and hashes: 1: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
2: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (hash: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: nmnfOqvl6e2wbkjLYZhWz9ELgRCcaSn6ZsAwmqaLzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:f9:d8:92:3a:93:34:4c:30:18:11:50:30:27:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jul 23 09:01:04 2026 GMT
Not After : Jul 24 09:01:04 2026 GMT
Subject: CN=2968d5b31215f26951bfbbdb0c43dfe4cdd0e037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:d7:24:73:5a:85:03:0c:74:0f:af:43:85:
7d:c1:62:fe:89:99:b7:39:16:16:5d:89:3a:8a:a4:
6c:77:4e:9b:13:af:b8:da:f2:b9:b9:6d:df:b6:0f:
aa:55:d4:ff:c8:c2:b8:ac:1e:ab:df:cd:0c:33:de:
22:87:7f:2b:4f:9e:67:c8:b9:7c:40:15:fa:3d:4f:
5c:09:89:7c:08:c0:69:16:49:b5:2f:cd:fa:43:33:
2b:3d:f9:30:13:97:d7:a8:31:05:71:6f:7f:69:3e:
2b:cb:af:3c:86:59:c9:33:e3:88:db:b8:83:93:09:
17:a8:10:14:2e:5b:92:ed:21:bf:da:82:f4:bd:d1:
f4:98:61:13:aa:5c:9c:5b:26:a8:24:c6:7a:8c:aa:
72:c4:57:be:da:90:72:ca:5a:ee:08:36:3d:a0:1a:
dc:73:54:12:e1:89:b1:f0:bc:8f:3f:2e:d5:65:57:
d5:d9:b3:77:13:41:2e:3a:4c:05:3f:4a:83:68:bb:
95:f0:49:38:84:6a:e8:2a:74:d4:82:44:45:4a:7f:
56:b7:02:ae:62:76:d6:13:31:02:66:43:9e:9c:a1:
b9:e5:4a:b9:ed:7a:5a:60:8d:5a:f3:45:3a:5a:19:
5c:0b:9a:e5:07:13:a9:43:e5:72:d0:62:46:ef:cc:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:D5:B3:12:15:F2:69:51:BF:BB:DB:0C:43:DF:E4:CD:D0:E0:37
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:a2:25:02:fe:82:6f:e8:3a:94:1a:36:ab:78:13:d5:94:
80:d8:f0:b9:86:2a:db:ef:7d:d9:e7:3a:7b:58:12:46:ef:c4:
14:4a:85:17:7d:54:46:82:e4:75:8e:cc:06:08:d7:dc:11:90:
1c:13:f1:97:4b:0e:f9:b4:f8:65:cb:08:8c:f1:44:e6:4f:ce:
25:08:8d:99:ba:a1:ec:5a:d0:78:71:6a:2b:75:0b:b3:d0:ce:
f5:a9:f6:ab:20:98:88:83:2b:47:e3:10:fc:98:d9:6e:1f:50:
21:a9:a9:8d:7b:98:b7:46:32:d3:66:83:55:85:eb:0b:93:90:
29:e8:9d:4e:51:31:a9:71:58:34:4e:85:6e:d3:46:b7:d4:0a:
9e:2e:d3:0a:9e:dd:b6:d1:fe:a6:34:53:97:4e:35:e2:44:ae:
d7:77:bb:53:d2:85:a3:81:6d:6e:da:88:9b:58:84:90:4f:47:
60:a3:92:f6:63:8a:58:c6:75:96:3e:7f:3e:ae:a5:64:43:57:
71:94:23:5b:c1:56:a0:b2:4b:4b:f8:43:af:df:f8:a1:21:9b:
ff:10:c4:69:d6:d9:0e:e2:ca:e8:82:3a:c9:b5:5f:78:61:85:
dc:f0:98:f0:05:63:4d:c9:c1:4f:1b:4f:93:c9:57:29:32:eb:
bf:d2:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:30 2026 by rpki-client