Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
File: PatW4eox1GCANLn_dPHuEeys-5o.mft (raw, json)
Hash identifier: OIw9j5BdOYuRHxHQWNJiN+B9xHq1P2g65Ilt94jtazM=
Subject key identifier: B4:B5:2C:33:CB:D1:3F:3D:12:29:D4:CF:8D:16:71:60:8B:44:7B:FA
Authority key identifier: 3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
Certificate issuer: /CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Certificate serial: 019F935B83DA6DB692DB160CB8B17EDD58B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:15 +0000
Manifest this update: Fri 24 Jul 2026 09:01:15 +0000
Manifest next update: Sat 25 Jul 2026 09:01:15 +0000
Files and hashes: 1: PatW4eox1GCANLn_dPHuEeys-5o.crl (hash: kDTKvo+mc0OzsfBmIoXS0pbpCLUP9FKSw66feR2scv4=)
2: V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa (hash: uvjzr0fPA/WgA4L6OGVD2MJXyWFXrj5Vq0k/Yrsnvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:83:da:6d:b6:92:db:16:0c:b8:b1:7e:dd:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Validity
Not Before: Jul 24 09:01:15 2026 GMT
Not After : Jul 25 09:01:15 2026 GMT
Subject: CN=b4b52c33cbd13f3d1229d4cf8d1671608b447bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4a:26:f4:a8:03:5c:fd:07:f9:48:f3:0f:bc:
b4:a8:03:15:7b:d6:de:80:a6:7e:f6:39:bb:fe:04:
35:61:c5:1c:dc:2f:cd:9b:eb:7b:d6:d9:01:3b:5d:
68:cd:22:bb:44:bd:74:b3:d2:f7:76:e5:ce:5c:f9:
b0:80:8d:d8:28:8f:1f:aa:b1:46:9b:ab:28:e7:03:
9e:53:99:b2:3c:64:b1:c1:8a:71:43:32:a9:cc:83:
34:de:c9:3e:ea:cc:b7:14:10:cb:b3:0f:e7:60:10:
a0:d0:0a:aa:53:ca:ba:b7:24:bb:ae:dc:a4:f2:93:
ed:64:07:aa:61:72:d3:d7:e5:75:60:0f:c4:71:ac:
26:41:4f:81:e2:e4:3c:9b:ba:f4:da:d4:96:be:a9:
13:d3:f8:60:53:86:0e:42:d8:58:ff:61:40:7c:48:
da:f3:ed:f6:91:a4:51:e4:f6:1b:0d:79:51:fb:03:
32:51:f0:1f:67:48:4b:a4:c0:1e:50:12:b0:3e:ce:
77:e2:d7:14:c3:30:f0:f2:84:95:80:81:10:bf:cd:
73:0e:61:06:ad:14:e1:d2:74:86:ed:07:a0:01:9a:
24:1c:fd:94:c8:b3:f4:93:91:c1:b0:fd:8c:8c:d1:
fa:e7:60:cb:5b:e6:c4:b1:38:db:93:d9:17:83:2f:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:2C:33:CB:D1:3F:3D:12:29:D4:CF:8D:16:71:60:8B:44:7B:FA
X509v3 Authority Key Identifier:
keyid:3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:84:db:08:d1:7e:ac:46:ab:99:67:35:ef:48:44:8a:21:
9a:9c:0d:6f:14:bf:49:19:14:d4:d4:dc:93:c0:4f:58:b7:f7:
fa:dd:6a:5d:4b:c2:3b:25:9c:48:cf:0e:bd:c9:f0:0e:69:23:
25:60:50:a8:91:d5:3e:e2:4a:29:73:5d:5f:e8:f7:b2:1e:cb:
97:9b:a2:d1:b0:d5:f3:10:27:d0:32:05:5d:86:6c:95:91:c9:
23:ce:69:87:2c:a3:d9:f6:15:c2:c3:bb:3a:62:88:30:5d:35:
94:5f:33:af:72:7a:0e:28:6a:9d:f5:99:5b:e6:ab:4e:20:1f:
63:e1:6c:a8:48:d1:f2:83:23:df:3d:6a:c5:68:f3:a3:74:6a:
25:02:0d:30:ef:ab:51:d0:65:e0:d4:d3:d5:7d:58:f0:48:c2:
c9:dc:a6:ec:13:a9:cd:71:07:eb:a2:4c:42:d6:01:20:ae:6c:
0f:9e:85:18:64:cb:f6:22:20:ae:3a:90:c3:51:d1:a5:bc:fb:
68:81:cd:9a:54:37:95:de:10:a5:91:c5:bd:bd:02:8c:80:fb:
6f:bb:66:4a:b8:e7:6f:64:9b:b4:f6:3a:75:c2:c9:39:16:4b:
6a:67:d5:17:3e:d4:08:3d:4d:dd:46:8f:c1:59:00:a1:af:9d:
f4:7d:5d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW4PabbaS2xYMuLF+3Vi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYWI1NmUxZWEzMWQ0NjA4MDM0YjlmZjc0ZjFlZTExZWNh
Y2ZiOWEwHhcNMjYwNzI0MDkwMTE1WhcNMjYwNzI1MDkwMTE1WjAzMTEwLwYDVQQD
EyhiNGI1MmMzM2NiZDEzZjNkMTIyOWQ0Y2Y4ZDE2NzE2MDhiNDQ3YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Eom9KgDXP0H+UjzD7y0qAMVe9be
gKZ+9jm7/gQ1YcUc3C/Nm+t71tkBO11ozSK7RL10s9L3duXOXPmwgI3YKI8fqrFG
m6so5wOeU5myPGSxwYpxQzKpzIM03sk+6sy3FBDLsw/nYBCg0AqqU8q6tyS7rtyk
8pPtZAeqYXLT1+V1YA/EcawmQU+B4uQ8m7r02tSWvqkT0/hgU4YOQthY/2FAfEja
8+32kaRR5PYbDXlR+wMyUfAfZ0hLpMAeUBKwPs534tcUwzDw8oSVgIEQv81zDmEG
rRTh0nSG7QegAZokHP2UyLP0k5HBsP2MjNH652DLW+bEsTjbk9kXgy9lKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS1LDPL0T89EinUz40WcWCLRHv6MB8GA1UdIwQY
MBaAFD2rVuHqMdRggDS5/3Tx7hHsrPuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGF0VzRlb3gxR0NBTkxuX2RQSHVFZXlzLTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt
N2RjNTI4YWE1ZDRlLzEvUGF0VzRlb3gxR0NBTkxuX2RQSHVFZXlzLTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl
LzEvUGF0VzRlb3gxR0NBTkxuX2RQSHVFZXlzLTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGqE2wjR
fqxGq5lnNe9IRIohmpwNbxS/SRkU1NTck8BPWLf3+t1qXUvCOyWcSM8OvcnwDmkj
JWBQqJHVPuJKKXNdX+j3sh7Ll5ui0bDV8xAn0DIFXYZslZHJI85phyyj2fYVwsO7
OmKIMF01lF8zr3J6DihqnfWZW+arTiAfY+FsqEjR8oMj3z1qxWjzo3RqJQINMO+r
UdBl4NTT1X1Y8EjCydym7BOpzXEH66JMQtYBIK5sD56FGGTL9iIgrjqQw1HRpbz7
aIHNmlQ3ld4QpZHFvb0CjID7b7tmSrjnb2SbtPY6dcLJORZLamfVFz7UCD1N3UaP
wVkAoa+d9H1d3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:03 2026 by rpki-client