Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: PYN4URtDXO0dKAF/oKuUtkJNtrb3l65BXNawPmXRVLM=
Subject key identifier: A0:44:C5:8B:0F:1B:68:0B:35:AB:9E:C3:AA:78:DB:B4:19:B4:71:79
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019D27725CB21792C47F958595644FF4A16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0F8A
Signing time: Thu 26 Mar 2026 00:01:39 +0000
Manifest this update: Thu 26 Mar 2026 00:01:39 +0000
Manifest next update: Fri 27 Mar 2026 00:01:39 +0000
Files and hashes: 1: fd9396OwfyvmAzKyBx3VzGYGcUo.roa (hash: YCYApcDvzt3cYu0nRrcnf8eRckIYfSGxjh0WqkacoII=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: VR3O4a/dtvhuxRGw8848j96QTtkron+GkxBXZ3Fu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5c:b2:17:92:c4:7f:95:85:95:64:4f:f4:a1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Mar 26 00:01:39 2026 GMT
Not After : Mar 27 00:01:39 2026 GMT
Subject: CN=a044c58b0f1b680b35ab9ec3aa78dbb419b47179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:80:a3:32:56:db:5e:3e:55:08:42:06:62:
2c:c8:3d:7b:25:6a:5a:39:b8:0d:c9:c1:98:d7:0a:
bd:eb:03:4a:e3:38:91:09:ea:8b:2a:95:f6:c9:24:
15:55:0b:ee:ed:d2:e6:8c:ec:a3:c2:4f:ee:2b:f0:
bf:31:23:0f:7d:bf:78:b8:7d:e6:67:cc:2d:a6:09:
99:f4:f9:91:0f:91:1a:fa:7b:c7:d3:28:7f:64:59:
64:65:ff:40:2d:4b:9a:f3:d2:99:1e:a0:3b:b0:28:
99:50:45:ea:ba:86:d8:56:a3:4f:73:16:05:13:95:
1f:75:c1:2a:80:28:30:71:24:99:f5:84:08:7a:79:
4e:dc:06:53:fb:48:ae:4c:1c:39:1c:44:ce:9e:c1:
ba:b9:10:3f:d4:4d:b9:79:9c:fb:03:5b:a5:0a:db:
0c:e4:8c:e5:ac:db:54:b5:0e:fe:9e:9e:3a:f3:5a:
e3:e6:d3:58:83:52:9d:4b:9c:57:d9:ab:06:2f:5e:
3d:d6:b7:95:0f:30:36:14:c9:2c:5d:a7:08:bf:40:
47:5a:6d:75:69:73:9e:f9:e6:29:ec:60:7e:4b:3d:
0d:47:35:1a:6f:37:14:6c:07:82:0f:3f:4f:18:93:
e5:fa:a9:6c:7c:e6:41:70:cf:b7:bc:d5:2c:c9:48:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:C5:8B:0F:1B:68:0B:35:AB:9E:C3:AA:78:DB:B4:19:B4:71:79
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:d9:d0:e1:34:9a:9e:b3:82:90:87:56:96:c0:63:8b:15:
03:a7:5c:53:96:46:35:d7:14:c5:b7:96:fd:08:63:3c:e6:8a:
c7:44:90:c5:8c:ce:c3:17:d0:f1:98:cf:a0:1d:c0:f0:05:28:
5a:63:01:d7:f0:0b:31:51:9d:70:09:e4:84:10:37:25:32:83:
09:ec:7d:01:09:a0:ca:4e:5a:71:84:fb:98:3a:21:8f:86:7b:
8b:53:25:4f:5c:76:4f:ea:3d:dd:a7:b9:35:34:6a:7d:1f:67:
d8:10:08:eb:75:12:5e:28:4a:ec:15:37:a7:2b:68:17:27:f3:
66:db:04:66:ac:48:5c:f2:35:40:88:e1:13:44:03:1b:00:e7:
a0:bd:cc:07:df:04:e3:1b:5f:67:0b:58:55:b8:0d:ff:ee:54:
99:15:56:8e:6e:98:d8:5e:f9:c1:a9:76:c1:3b:bf:84:9d:52:
02:37:37:23:a6:2d:23:f7:c9:65:86:d1:5f:01:ae:fd:04:2c:
b7:58:7d:f6:4c:32:37:67:1a:2f:be:1a:35:e8:6b:57:73:44:
de:6a:56:f2:17:17:a7:f8:89:be:91:d3:a1:26:54:a9:37:06:
c6:c7:b2:2a:d7:4a:52:d8:89:9e:86:35:99:2c:22:23:1f:00:
3e:78:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:59 2026 by rpki-client