Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: j88PRTu2MuTaukeGAuyttoSghPIHxSn8VdzbzOox7Bs=
Subject key identifier: 68:D5:FF:70:10:64:79:70:3F:73:00:FC:FF:9E:FE:01:66:57:0E:D2
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019D34BF40A536218DF38DA1ADFC9143E377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 14:00:42 +0000
Manifest this update: Sat 28 Mar 2026 14:00:42 +0000
Manifest next update: Sun 29 Mar 2026 14:00:42 +0000
Files and hashes: 1: S2ft3Hju7eljRd19SiIzVso1Px0.roa (hash: 1n+Z/NtsvIHrdvPzT0sHZqEc6avxWfJC7XJpS/clIcs=)
2: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (hash: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: EH6AA2vAqTusTZogqqeK1dYjURtKHMbN4xpHH1+DK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:40:a5:36:21:8d:f3:8d:a1:ad:fc:91:43:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Mar 28 14:00:42 2026 GMT
Not After : Mar 29 14:00:42 2026 GMT
Subject: CN=68d5ff70106479703f7300fcff9efe0166570ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:d7:69:d9:77:67:3c:82:c1:92:a3:18:f9:
c2:8a:8a:a0:80:8a:ca:09:2a:f4:3f:75:20:44:16:
98:6f:83:f3:88:0f:5e:07:c3:8f:d1:99:d5:93:f5:
ce:8a:2b:af:cf:6d:7e:f5:43:6c:b8:3a:f0:90:fc:
46:5b:f5:da:ff:07:57:aa:c9:c8:4a:82:14:7d:61:
33:e4:0e:0c:9d:5d:46:53:9f:13:43:5e:25:eb:ac:
70:04:b1:b6:a3:e6:10:1f:d1:61:3c:2f:6e:8e:af:
4c:9b:e1:9d:9b:e4:b6:97:21:17:0e:48:35:7c:55:
4c:25:02:5f:66:e1:69:11:46:3b:0c:46:4b:d6:c2:
87:48:ff:fb:c3:9c:56:bc:f3:47:d6:0b:9b:09:09:
0d:18:aa:c4:54:0f:8f:3e:4f:50:58:dc:28:46:1c:
e5:d4:fc:1b:4b:a1:4c:bb:be:9e:47:a0:ba:39:7e:
c3:70:21:16:8e:f5:01:e8:cf:d5:86:90:3e:a4:02:
cf:6e:08:36:89:da:27:76:96:5d:db:7b:55:6a:ac:
dd:24:b1:0f:9d:ef:a6:4a:87:00:67:71:a8:ac:2f:
cb:02:62:ed:69:cd:04:3e:e1:06:b9:3a:a5:44:89:
ea:c8:1d:90:ed:fc:28:fa:45:90:93:e3:11:8c:26:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:FF:70:10:64:79:70:3F:73:00:FC:FF:9E:FE:01:66:57:0E:D2
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:fa:bb:7a:46:e9:d8:ed:36:28:74:f7:c9:3d:a9:bb:41:de:
9f:75:a2:50:22:3e:67:f6:66:db:fb:b1:f2:59:1e:e8:10:8d:
8d:0b:69:15:58:b9:5b:6e:e0:be:33:24:da:ab:fa:be:f3:13:
0e:54:cf:5a:7c:d0:f6:c2:1e:70:cb:8f:0b:f2:0f:28:37:22:
84:77:6a:10:85:3b:54:c1:07:1c:03:02:8b:42:24:f0:0f:84:
2d:ba:e5:85:1b:77:ca:de:0d:26:87:a8:66:cd:8a:99:16:03:
ec:b2:58:6d:52:d6:b4:66:a8:94:d1:bb:43:40:4c:3c:88:15:
b4:69:fd:eb:3f:c1:24:d0:50:c8:e0:5c:13:d5:4a:91:a4:18:
d3:ab:66:c3:65:cf:52:16:3f:bf:fb:e7:b6:d8:77:57:60:5e:
d7:ad:de:55:92:35:92:26:46:d9:aa:14:c8:57:97:5e:e0:bb:
b6:3c:fd:64:83:45:96:fa:6e:a8:af:e0:33:3b:6b:f1:ff:56:
87:8a:09:91:10:08:8d:2f:be:29:19:80:08:84:71:3e:ca:17:
a2:18:43:8e:51:38:48:81:22:40:f2:45:f9:fc:d4:50:dd:41:
c1:b7:15:28:2a:60:68:6b:d3:59:8b:31:09:98:b0:96:30:f1:
35:34:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:05 2026 by rpki-client