Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
File: PatW4eox1GCANLn_dPHuEeys-5o.mft (raw, json)
Hash identifier: YaoZgJeoXF3y2yWC2DffCOs+pYTsRIIN4dw3Ycr8Bsg=
Subject key identifier: 2A:54:46:07:E3:EF:7A:A8:BC:BA:F5:D2:50:43:24:AD:53:E5:A4:CC
Authority key identifier: 3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
Certificate issuer: /CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Certificate serial: 01A0E362EE7ABB61E2122E60BF9FD68663EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:46 +0000
Manifest this update: Sun 27 Sep 2026 15:01:46 +0000
Manifest next update: Mon 28 Sep 2026 15:01:46 +0000
Files and hashes: 1: PatW4eox1GCANLn_dPHuEeys-5o.crl (hash: MOF63lL2xdXwJlTd+XXkpgBdJGPsyLdxFXaFYPnyln0=)
2: V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa (hash: uvjzr0fPA/WgA4L6OGVD2MJXyWFXrj5Vq0k/Yrsnvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:ee:7a:bb:61:e2:12:2e:60:bf:9f:d6:86:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Validity
Not Before: Sep 27 15:01:46 2026 GMT
Not After : Sep 28 15:01:46 2026 GMT
Subject: CN=2a544607e3ef7aa8bcbaf5d2504324ad53e5a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:0c:15:0b:99:f2:bb:31:cd:63:63:34:69:
56:e5:4a:a4:36:60:84:17:ba:98:00:9f:a8:6c:7b:
e8:11:dc:73:86:99:7f:7f:69:ac:a8:98:68:cc:3d:
67:e9:4a:08:aa:7b:ee:db:46:ea:ed:b1:42:25:ce:
41:90:b1:62:52:ff:e6:de:4e:d8:15:2b:ef:1b:94:
bf:0f:f8:42:27:8a:89:ae:cd:cc:4d:c9:b4:a7:32:
92:8e:87:74:c2:fd:ff:aa:54:8f:91:3f:43:a2:bd:
1b:52:11:f8:b8:08:3a:cb:60:2e:0f:89:a4:9c:86:
54:32:fe:20:59:28:c1:60:8e:f0:30:43:fd:f1:0f:
6c:19:c9:cb:70:b8:c0:9b:a8:bb:f6:31:6f:37:18:
32:c4:e0:80:72:0b:2d:8c:bb:06:e4:b0:26:f9:cd:
e4:c9:41:1f:df:b3:5a:dd:e6:2e:92:f6:48:6f:ae:
f9:41:cb:8a:cd:a1:c9:15:33:f5:d4:93:35:f0:3a:
fc:d1:9b:0a:df:ab:34:af:2f:8e:f1:5f:68:32:b6:
03:0e:28:a2:b4:0b:76:2b:b8:b7:f7:fd:ee:de:cf:
a4:45:7e:3f:17:db:ac:76:79:5e:a8:f4:9b:0e:dc:
db:43:f4:c4:91:0c:df:8c:74:99:ce:a9:8e:c1:30:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:46:07:E3:EF:7A:A8:BC:BA:F5:D2:50:43:24:AD:53:E5:A4:CC
X509v3 Authority Key Identifier:
keyid:3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:10:45:7e:6f:fe:a8:d4:4d:59:22:f9:ae:42:e7:d4:4b:
ab:ab:af:21:24:e6:dc:9c:b2:65:67:7a:f7:06:9a:89:c5:a2:
40:1a:62:e5:17:cf:b1:6d:12:03:c8:c4:b7:11:f1:27:2f:4f:
a5:3f:03:5a:da:8f:3d:0c:e3:5d:a3:9d:f3:fa:70:a3:0d:cd:
81:7f:e0:5c:a1:71:b1:3a:9f:8a:29:31:f1:e9:a3:37:43:00:
55:d4:b2:cd:6f:f1:c3:a5:3e:5c:9b:fc:18:97:58:d2:96:37:
dd:1a:b4:a3:66:38:67:fa:8d:02:4c:e4:ae:f6:33:96:fe:12:
3e:ac:eb:77:5d:85:fc:9a:24:8b:03:09:5f:9c:e4:9e:ba:a2:
39:e7:f0:13:21:41:1d:39:13:2b:9e:85:86:a5:18:e1:9b:97:
50:dd:32:ed:92:d2:16:0f:0e:03:20:52:cc:ae:90:78:65:a2:
70:21:5d:23:52:a4:34:15:39:3f:e5:c6:22:94:d8:7b:ae:7c:
23:f9:2b:f1:f1:f6:8f:a5:9b:c4:fa:0a:e5:75:3f:fd:11:bb:
0f:de:7a:1d:06:dd:2d:09:03:6c:30:b4:44:f0:7e:ea:d5:b8:
6b:dd:fa:b3:8f:99:4f:17:2a:79:a2:d1:18:8a:31:eb:e3:3d:
74:10:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:43 2026 by rpki-client