Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: 3CRT1Dug7QBeJGBX2s+UW9S9JBDJBrChQdAhHLQ+QGg=
Subject key identifier: B3:57:A6:43:00:7D:01:BC:03:B4:C3:BA:FF:AD:5F:A9:E3:4A:8C:9B
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019D25F103B47364653373CB4DED13D76580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: dQP+dtrJfH6U4fWxZAGw/XUUvamkMOjFhS35wb5fzNM=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:03:b4:73:64:65:33:73:cb:4d:ed:13:d7:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=b357a643007d01bc03b4c3baffad5fa9e34a8c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:24:76:78:c6:82:fd:ec:71:12:9b:d3:d9:
ac:6a:0a:41:64:ed:78:40:0e:ee:ac:06:ca:25:68:
b1:d3:4c:15:39:53:5d:8b:0d:c3:f7:6c:65:dd:39:
53:ab:93:ba:29:f4:19:c0:ed:74:67:ad:a1:7f:68:
93:df:ea:c2:20:5c:80:09:db:f7:01:56:0f:e8:f5:
fa:77:38:ba:9a:39:47:01:e4:e7:79:83:0c:85:20:
8b:b2:bc:d5:55:c7:2a:9e:8e:7d:99:b8:37:bc:be:
38:cf:7c:62:43:ca:c2:62:0b:66:b7:d1:1f:65:02:
b9:38:ad:39:6f:b4:3d:d1:8b:62:44:6c:5c:f1:3b:
38:26:cb:76:0b:7d:76:bf:01:be:e3:57:5c:ff:f5:
6d:6b:d0:c2:70:9f:a1:e5:4d:75:75:dc:92:4b:b1:
bc:c0:c4:9b:89:29:22:75:9b:91:bb:67:be:e3:29:
10:3f:c4:c8:b6:b4:4f:1f:39:0a:ba:13:4e:04:d4:
53:e0:80:0a:93:83:c4:aa:a0:fe:85:20:c6:1e:22:
24:f6:72:f4:c1:7b:1d:50:21:df:bd:3f:f5:fa:33:
a9:72:6a:2a:70:d3:9d:6e:a0:97:74:63:02:fa:e5:
de:1a:fa:04:52:23:9c:54:c5:32:34:8c:3c:96:2c:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:A6:43:00:7D:01:BC:03:B4:C3:BA:FF:AD:5F:A9:E3:4A:8C:9B
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:a1:72:70:79:b7:89:b9:98:06:c6:ad:fe:bf:86:0c:22:
5d:37:3b:d4:81:45:f8:a2:36:0f:2d:14:77:ee:e5:eb:6a:b7:
e0:b0:23:c1:89:c6:65:c9:16:5a:cc:12:7d:3d:4d:15:5a:90:
fb:04:74:10:33:be:cb:23:21:94:60:5b:80:64:2d:51:48:ed:
da:91:bb:48:85:d1:4b:99:0b:b2:1f:62:2e:21:f4:17:ce:2f:
b6:c4:d7:89:ad:60:7f:ca:a7:d3:e9:7f:f7:dd:c2:83:b6:d4:
22:ce:b1:d1:90:57:b9:88:04:49:c5:fd:e8:1b:67:fd:2e:1f:
ed:fd:81:7f:43:1f:a5:db:6a:09:cc:ca:f9:33:11:3b:7c:8a:
1c:c5:d6:0d:d9:fa:35:7d:91:ad:0b:ef:a6:2c:07:95:59:e3:
c8:82:09:18:81:89:e9:ca:46:eb:e3:f1:14:5f:58:4a:6d:7e:
48:59:ff:c8:c0:e3:3a:29:cd:83:a2:70:89:24:57:d0:ac:eb:
77:b6:64:ef:2f:fa:1d:58:61:23:e0:45:78:1b:d3:79:55:6f:
58:7d:ff:44:44:f2:a2:20:69:f3:8d:0a:59:a3:4a:87:28:3e:
a2:32:9e:90:75:0f:e4:7c:3e:37:38:4b:cb:c3:91:06:7b:a5:
5d:5e:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:39 2026 by rpki-client