Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: ohOwV+fk9PukkS7MpyGJN69S1naJd/y1J1V8OMg0OOM=
Subject key identifier: B9:7C:B2:0F:31:81:59:42:2B:D8:4B:BF:8C:6F:14:39:3B:C7:A8:99
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019D27A9109A3866A718C7ED930DEAA1FBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 1529
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa (hash: xscBDT6c6gkdHFrRsZjyluPSGQ6QR97y0pWD2imFtVE=)
2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: p8jl2yLcdEBu3mnUEknn07SC7hREuS3epB0WUfkU20k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:10:9a:38:66:a7:18:c7:ed:93:0d:ea:a1:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=b97cb20f318159422bd84bbf8c6f14393bc7a899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:d5:4f:5f:dd:82:31:cd:4b:23:02:c4:e3:
be:28:49:e2:fa:1f:b2:99:a7:b5:c7:1d:66:f0:ea:
64:ed:d9:b2:59:1b:01:77:77:be:d1:73:f7:02:35:
bc:33:22:7a:93:bf:65:94:da:07:43:a8:3d:48:5a:
26:70:33:eb:35:bf:cd:ff:e8:12:47:4e:74:4a:79:
0b:b2:8b:e9:f8:dd:fc:d5:ec:13:00:29:f3:3f:a7:
31:89:35:43:8f:06:6d:4f:a2:08:fe:4b:73:0c:d2:
8a:53:7e:55:15:66:4e:36:e1:bc:dd:e4:07:aa:f1:
35:93:cc:06:f3:37:e3:14:47:19:bb:25:c9:18:9d:
e2:2c:ce:d6:e9:27:a5:6c:2f:ab:e9:24:b1:bd:93:
fe:a2:29:ca:7b:c9:b4:7f:a5:ff:5f:23:83:f5:87:
1d:17:93:85:b5:05:ae:f1:e3:26:d3:98:47:d2:a7:
d8:2b:cc:91:f4:bf:a3:a3:2e:9b:90:2a:42:d6:46:
ed:a2:98:b7:5a:4d:0b:f1:6c:a7:b8:0a:e3:ea:6b:
b2:c9:f3:eb:bf:89:26:9f:bb:0e:45:6f:36:82:77:
77:fd:9c:ab:1f:33:5e:b7:27:1a:44:bd:9d:dc:62:
80:eb:67:aa:af:f7:d0:3b:b5:6d:f4:07:f3:ba:e3:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:B2:0F:31:81:59:42:2B:D8:4B:BF:8C:6F:14:39:3B:C7:A8:99
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:99:92:05:91:e4:bb:89:b7:77:3b:cd:f2:e9:c4:86:ec:
29:12:20:36:c1:a7:95:12:e9:12:60:73:b1:d9:a1:b4:17:26:
71:dd:b9:80:cb:6a:e5:36:b9:99:71:94:3d:50:46:d4:c9:08:
f5:24:05:65:bd:50:86:d5:78:46:e3:68:41:49:68:18:fd:4d:
86:74:fd:43:ab:4d:83:62:09:0a:40:1f:d8:dc:f7:28:0f:30:
03:61:e9:70:50:60:d7:bc:5b:66:51:82:dc:ea:20:55:19:b4:
14:fb:86:10:64:b2:20:a3:df:df:2f:66:c6:3f:63:2f:20:8f:
f0:74:bc:36:23:f8:32:01:7b:30:e7:c6:16:8b:8c:68:95:cf:
56:c4:70:35:05:9f:dc:ae:d1:88:c8:d5:19:73:3d:36:03:07:
12:e1:3d:10:f1:64:56:43:f1:55:d3:4b:a7:7c:13:43:e1:27:
5b:24:85:c5:bd:8c:b8:e3:04:ca:79:52:42:95:70:44:1b:87:
56:88:bb:89:64:cb:12:82:ec:aa:70:c1:97:1b:44:d4:55:a7:
23:9e:dd:92:0f:b8:2f:65:46:02:11:e8:7a:9b:92:10:eb:c7:
b6:eb:d0:29:f5:d4:23:8a:b8:9a:e7:ec:02:db:5d:fe:ef:63:
88:8d:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:34 2026 by rpki-client