Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: vGf/yRH7RE8mTbovZ46+tX/z2nlVHFTpdnvBJQqx3jg=
Subject key identifier: 5F:7B:B5:76:D8:3C:34:63:D0:B2:19:9C:6A:AF:73:FE:1E:36:E0:FF
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019E1F10FB3E88DC0BC44D9013F87FAB4984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: lFMOTI1St+D58ARzSoqcBHdXsZNKmpQ4hO+Bm3el3ko=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:fb:3e:88:dc:0b:c4:4d:90:13:f8:7f:ab:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=5f7bb576d83c3463d0b2199c6aaf73fe1e36e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:f8:7b:d0:b7:ce:b6:f0:4c:5f:2a:20:fc:
fa:24:24:34:76:ca:5e:33:7b:89:ac:c0:1a:d4:ca:
d3:e7:8f:db:0e:30:b6:fc:95:0f:07:80:38:dd:ae:
29:c5:42:d3:5a:ce:7b:5a:3b:7c:cd:4d:42:8a:13:
2e:f7:5b:ba:b9:6d:69:3b:e3:43:6f:45:3c:71:08:
33:16:81:2f:83:b2:8c:af:1a:4b:8e:d6:e5:f6:9d:
32:02:ea:eb:64:0a:02:59:53:64:1f:14:17:46:db:
1c:e3:6a:23:ba:fe:9c:a7:56:72:84:98:4a:1e:74:
2d:75:75:23:d4:4c:8c:68:f4:ae:ff:9d:a6:7f:aa:
bf:24:6f:d6:5c:12:08:e3:39:19:27:6c:51:be:ff:
3d:dc:1d:91:bf:a0:dd:07:4b:85:d1:43:3f:62:c9:
2d:36:fd:77:81:57:83:1c:cf:da:af:2b:f7:d0:20:
9d:6d:9c:9e:f8:cd:fa:01:7f:98:bf:0c:3e:8c:79:
99:0b:eb:24:4b:67:ac:c5:96:86:3c:36:d7:e8:8d:
eb:d0:61:c9:78:ee:80:12:2c:67:84:99:39:f8:ed:
3b:a3:41:e3:df:59:f6:91:c7:73:36:3d:43:db:f1:
6c:61:22:e1:53:8d:0f:1b:bf:c7:7a:35:99:6c:4a:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7B:B5:76:D8:3C:34:63:D0:B2:19:9C:6A:AF:73:FE:1E:36:E0:FF
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:1c:b4:28:5f:27:31:d4:3e:f5:78:54:18:97:74:76:06:
7d:53:e2:a1:8d:31:bd:e5:24:3f:08:ae:32:2d:1b:1f:cb:b2:
a7:80:86:da:94:36:20:3d:a3:8c:27:4b:61:4b:5f:52:20:d2:
47:71:d8:90:c9:c8:65:4a:f2:d3:05:72:e4:04:ac:22:f9:ac:
09:e2:35:ae:88:99:10:f0:cf:f8:27:81:47:b5:4d:66:d8:1a:
41:f7:74:66:9d:2c:d1:14:e9:83:13:36:99:41:36:b3:ff:cd:
01:3f:6c:e4:1e:f3:66:d6:db:21:48:cc:13:51:ae:04:15:5b:
55:e1:ee:a5:4f:78:13:6e:7c:9b:c2:c1:42:72:f4:e8:17:5a:
c4:0a:ed:c9:73:b0:f2:c3:43:e3:74:21:24:c4:64:db:98:f7:
83:ba:22:e8:24:f5:46:63:a4:01:d1:cd:6b:48:76:4a:0e:18:
3e:53:02:72:20:d9:ea:f0:25:45:72:a5:c7:28:27:e4:4f:0d:
a7:8b:e0:79:8d:21:b1:a0:b3:37:30:93:2b:ec:43:8d:d4:06:
13:a5:74:95:a1:a2:df:65:50:28:8e:b1:5e:8f:3a:5a:ca:24:
9f:03:a5:d2:b4:1b:9a:1f:e0:22:a2:d1:37:99:e8:3c:c0:bd:
f5:96:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:11 2026 by rpki-client