Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: L7aaAUVajN3I2VMFoKRGyKdRhvy9kVCuypnfAOzEFD8=
Subject key identifier: E4:86:A3:4C:BD:64:C7:12:62:5C:84:B7:5E:52:24:8A:3E:69:6C:9C
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019D28845CF62E0056112BF7AEBB69BE5362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 1323
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (hash: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: f4yAqzkGCTioEqz0rYQeOgah/4PM2/Y24czNyRFxqrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5c:f6:2e:00:56:11:2b:f7:ae:bb:69:be:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=e486a34cbd64c712625c84b75e52248a3e696c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:d0:e0:ec:ce:d6:46:36:f6:3a:a4:86:6b:
ce:b3:50:e8:5b:8b:d5:f6:dc:47:5f:8b:5c:b7:03:
05:72:40:5f:bf:b7:7c:16:77:92:44:d2:f2:a1:b8:
24:3e:8b:c3:78:4c:c0:ff:d7:96:3f:87:87:62:f3:
1e:c3:70:b3:aa:ca:ae:59:81:61:38:ae:d2:20:e7:
8b:31:43:3a:71:3d:49:2f:2e:ba:7e:3b:79:57:b7:
46:47:a2:fb:00:09:2d:0b:92:1a:81:99:41:9a:7d:
9b:73:fb:3f:1f:3b:7b:db:a5:ad:9f:3d:c8:9c:c1:
72:0b:c1:4f:4b:eb:8f:0a:04:04:7a:d4:eb:0d:2a:
7b:c3:d7:f9:37:ee:93:bd:c3:94:1f:d8:87:f6:68:
6a:e2:3c:b4:55:c3:22:1d:1c:42:54:20:98:d2:ec:
5a:02:2b:97:0d:b3:86:36:86:d9:1a:e3:4b:b7:c3:
e2:46:ca:ab:74:5d:d8:87:06:cb:e5:a4:a3:eb:2b:
6e:93:fd:33:db:07:d9:b5:b5:5e:22:3a:17:b7:52:
2f:89:35:59:50:5e:6a:9d:e2:84:9b:e3:39:f9:59:
e5:94:e1:69:d6:00:c6:de:e2:22:71:1e:1e:4d:fa:
de:a1:52:5d:b7:17:15:2e:ee:38:48:5e:58:0c:53:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:A3:4C:BD:64:C7:12:62:5C:84:B7:5E:52:24:8A:3E:69:6C:9C
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:99:b6:b0:46:ec:d9:c3:0a:d6:45:8e:56:3d:58:0a:66:07:
ed:53:77:a8:20:8b:83:fb:55:fe:90:1a:43:1f:54:9c:fc:d9:
45:0d:fe:c3:0f:e0:c8:a7:ab:ad:d7:72:44:dd:ae:4c:3f:50:
c5:c1:ef:27:91:87:d4:2f:b6:3c:c3:e9:f9:a8:d7:eb:4f:09:
42:c4:49:50:00:a8:42:e7:49:f8:2e:36:32:2e:b1:ca:03:7b:
bf:f8:a4:01:43:a3:dd:2e:19:b5:f9:83:9e:3e:30:91:6e:c2:
9c:91:67:a8:a0:92:f6:a6:bc:1f:91:60:8c:6c:0c:39:a5:1f:
61:40:a8:41:a0:c1:76:6f:ff:1a:61:3e:a4:73:6f:ce:3e:ab:
5e:bb:dd:8d:3d:ca:99:0a:91:c4:66:eb:43:47:d9:30:17:be:
5e:05:63:29:d7:93:55:29:b4:c2:58:ad:9e:14:6f:a8:df:9d:
6b:0f:e0:76:06:3c:fc:75:28:e9:d3:31:77:08:e8:2c:61:e1:
bd:5e:4e:69:d5:f4:ea:53:9e:f4:81:63:a9:5f:b4:1d:06:f3:
51:33:c3:77:e6:b3:d6:0b:26:60:43:b0:76:d7:96:e1:8c:58:
81:34:52:27:cf:a1:c1:17:ab:38:b5:d2:52:46:93:d3:5e:08:
e1:24:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:36 2026 by rpki-client