
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: X/Bf2Pj9WX12pZLk7tL9FKibu78akVMSHjMwknIei98=
Subject key identifier: 45:9E:B1:61:DB:18:EC:8A:10:34:1A:91:74:42:C3:C1:5D:CF:AB:10
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01A0CE917D909D62E49D95BBBC6279C0CA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 14:00:36 +0000
Manifest this update: Wed 23 Sep 2026 14:00:36 +0000
Manifest next update: Thu 24 Sep 2026 14:00:36 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: ZzALfUy4sLLG93POLHy/bA5oOz++EZKDunibLglFPDE=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:7d:90:9d:62:e4:9d:95:bb:bc:62:79:c0:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Sep 23 14:00:36 2026 GMT
Not After : Sep 24 14:00:36 2026 GMT
Subject: CN=459eb161db18ec8a10341a917442c3c15dcfab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:30:97:69:d6:78:78:c4:9d:64:d0:f5:7d:
fa:99:08:61:fe:30:27:3f:ed:36:8c:e9:56:47:2e:
dc:2f:44:f7:2c:39:0b:29:e8:fe:6f:a7:33:c7:e7:
03:44:fa:cc:be:6c:fa:72:53:3c:10:02:6b:14:74:
ea:f3:a1:ce:78:d6:03:f7:5a:1f:f6:c6:6b:45:57:
ea:07:de:23:98:a2:f2:7b:c0:a1:74:ad:b9:55:65:
30:40:08:36:65:9a:ae:5b:ac:48:17:67:00:12:1c:
fc:69:58:e3:ce:25:64:32:78:ce:09:20:88:0e:2b:
28:af:fb:af:dc:dd:98:0e:65:0b:cb:31:db:f0:d0:
17:e9:25:71:94:b5:00:99:01:90:ce:b6:99:55:5a:
9d:16:7d:a8:1c:d1:c8:e6:96:e0:c7:19:02:df:20:
e6:9f:c2:cc:27:7b:e0:87:fd:6c:62:e0:8d:33:52:
74:29:1c:b6:79:52:4f:83:66:ef:98:19:dd:3c:57:
d3:e1:25:c6:42:76:53:e8:49:fe:94:cd:8a:30:7f:
69:8e:50:68:70:21:a1:1d:34:45:11:00:6a:c4:38:
2f:76:71:e6:08:78:a0:50:b7:8f:bc:f4:d2:82:1b:
9c:0f:aa:5b:d2:52:21:6b:35:c9:23:c0:91:02:bd:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:B1:61:DB:18:EC:8A:10:34:1A:91:74:42:C3:C1:5D:CF:AB:10
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7a:20:b2:96:b0:d7:ab:35:62:96:d9:4a:e3:56:54:75:fd:
7b:90:6d:27:00:e9:53:03:ac:d4:c8:3e:7e:1e:db:d0:1b:f2:
a0:17:ae:7a:13:cb:8a:1d:77:aa:87:5d:76:5a:b1:ed:f6:51:
09:14:96:95:48:f2:ff:58:05:86:89:86:ae:ed:1f:3d:71:c5:
77:7e:a5:c5:84:88:16:dd:90:47:93:b4:c0:d3:8e:d4:15:ba:
65:46:3d:77:90:c4:8e:5f:f0:bf:0d:8f:fa:3d:e8:df:06:bf:
d2:dc:eb:7d:1d:a8:fb:61:0c:f8:d1:7b:d4:0f:e3:4f:f3:8f:
6a:b8:83:97:44:8f:f0:09:88:ae:d3:e8:dc:bf:e7:21:a7:4e:
86:92:54:c1:b1:a9:d0:1e:62:38:aa:b5:2e:82:1d:32:f2:0f:
cc:01:bd:1b:9b:4c:c3:7d:0b:15:6f:8e:d7:92:92:cd:10:ff:
7b:7a:e1:5e:4d:9d:24:cf:c7:d7:94:fe:5b:00:a7:0e:99:db:
c0:0f:f9:51:04:30:42:ba:2a:d1:11:a0:6b:4f:6d:65:59:c4:
e5:29:90:9d:d0:87:3a:0b:40:5b:b5:fd:aa:c6:40:e6:80:c0:
c1:7c:47:29:1a:72:16:b6:c7:4f:cd:95:0b:83:13:3a:11:c2:
5d:e4:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:10:37 2026 by rpki-client