Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: U3XMbBJYCKwRkJP+gjuybA8d2VzhfzcVfKuUWk7fXwc=
Subject key identifier: 38:7F:7B:3B:1A:3E:0F:B2:28:4A:70:85:8A:80:5F:DB:5B:76:65:8E
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019E1F7F50A6388647522C57D0BC1558E682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 04:01:37 +0000
Manifest this update: Wed 13 May 2026 04:01:37 +0000
Manifest next update: Thu 14 May 2026 04:01:37 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 9zbBE7p7Zwg9IVEF3mMbIYvvZ/evMRYvbz2I2JhHm2U=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:50:a6:38:86:47:52:2c:57:d0:bc:15:58:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: May 13 04:01:37 2026 GMT
Not After : May 14 04:01:37 2026 GMT
Subject: CN=387f7b3b1a3e0fb2284a70858a805fdb5b76658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:81:4d:02:16:3a:c3:8c:21:5a:9b:2f:2a:
2c:d4:d1:a2:88:04:cd:0a:7b:91:e6:bf:56:da:73:
2b:b8:90:23:5b:0a:05:9d:fe:22:2b:f2:a3:46:db:
3e:f3:2b:5f:70:d9:01:68:4f:14:50:68:b5:d4:81:
8f:66:5f:4e:b2:d4:3e:77:5a:59:80:12:6e:0b:cb:
aa:db:a3:a4:d1:c9:91:3e:4e:9d:d3:ec:ae:7a:78:
e5:31:d8:ac:c1:06:2d:51:bd:3e:1b:66:46:6d:f1:
f2:61:4a:6b:aa:ae:28:40:cd:8e:9b:31:2b:d6:d7:
57:86:97:71:58:51:a8:a5:e6:8d:30:ed:93:c4:ab:
67:bb:8f:2e:fb:a4:d5:6a:4b:0b:66:e5:0e:97:85:
c0:bf:6d:bf:80:69:32:54:d3:4b:36:a6:c1:60:94:
3c:41:bc:94:61:ef:58:1e:9b:32:5f:77:08:ab:a5:
68:8b:3e:50:1f:b9:5a:71:9b:5c:fd:33:b0:32:87:
a9:9b:3f:18:30:fe:f6:c4:5b:b2:ac:ea:c9:40:9d:
d7:47:68:af:f4:3d:76:71:1d:05:98:d4:f8:07:76:
42:6d:3f:ec:56:8a:fd:9a:a0:7b:52:ce:98:d5:eb:
78:23:9b:86:bc:e9:c0:1f:2d:40:e4:3e:c5:5f:64:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:7B:3B:1A:3E:0F:B2:28:4A:70:85:8A:80:5F:DB:5B:76:65:8E
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:6f:d9:bd:ed:b5:8a:04:25:77:37:95:83:8f:8e:1c:d4:
7e:60:c9:9f:f4:9d:e0:ec:b4:7e:47:e3:2a:07:b9:74:4b:ef:
fe:dc:12:3d:05:c4:a2:e2:e8:3d:0f:6c:76:4d:bd:5f:be:9d:
3c:73:45:aa:25:16:b8:69:56:7c:63:0a:b5:ff:2a:5f:53:6f:
6d:b9:b1:41:ba:df:83:e3:64:52:68:6c:d1:df:25:42:51:8c:
24:a3:e7:7f:7a:e5:da:fa:e9:0f:7f:6b:2a:96:68:a1:a8:b0:
84:1c:fc:47:89:23:17:f5:80:1c:15:e4:bf:03:06:e0:4b:2f:
f8:13:0e:e5:42:04:45:b0:c6:05:b6:99:0c:40:48:b4:7a:b2:
43:3c:9c:e9:f9:d4:26:be:24:ee:15:3b:34:39:4e:89:31:fb:
2e:a0:6c:76:55:09:56:81:65:09:c3:4e:8f:38:36:20:6a:70:
e6:91:aa:dd:91:95:3c:86:cc:4f:c4:8c:f3:87:4b:0b:a4:5d:
b1:99:a9:a5:dd:fa:28:c8:52:d5:41:c2:0e:43:a1:fd:2d:9a:
46:c3:8c:94:20:6c:b4:cc:f1:ba:66:92:4c:1b:43:84:d3:c9:
6e:b9:86:bd:e2:e2:f3:b2:fd:f3:93:de:dd:83:52:46:19:05:
12:5a:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:45 2026 by rpki-client