Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: D5ieXNPoWmz9RUE4ouw5DAcMvdiI/lvyUkzTwYj0sVk=
Subject key identifier: C7:F0:55:A7:68:CA:C4:10:7C:C1:96:9E:2D:39:53:11:6F:D7:97:45
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019FF86C2DD9D38B91E08031E05DC037DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1A00
Signing time: Thu 13 Aug 2026 00:01:06 +0000
Manifest this update: Thu 13 Aug 2026 00:01:06 +0000
Manifest next update: Fri 14 Aug 2026 00:01:06 +0000
Files and hashes: 1: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
2: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (hash: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: uBl6QYMBw4MRCFngFTAwN8mtoRtOms0ldmM1mX/N2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:2d:d9:d3:8b:91:e0:80:31:e0:5d:c0:37:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Aug 13 00:01:06 2026 GMT
Not After : Aug 14 00:01:06 2026 GMT
Subject: CN=c7f055a768cac4107cc1969e2d3953116fd79745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:9f:f2:86:26:23:85:ba:4e:84:a9:1f:50:
d0:41:4d:45:55:d3:d0:10:b5:13:fb:81:dd:f1:12:
21:c4:17:cd:c2:c6:60:00:19:52:cb:2f:a7:b8:4c:
c6:a2:b5:3d:eb:46:01:d4:d4:16:c3:0e:9d:81:96:
65:28:2d:93:0f:71:57:f7:c9:26:17:ad:74:98:05:
3c:b2:d2:b2:dd:09:a2:7b:4b:a5:ee:62:16:e2:48:
8b:5a:0d:f2:25:87:de:cc:32:d5:36:b8:82:12:a1:
99:6b:ca:a9:70:41:73:9e:05:d7:d7:85:0a:1b:58:
f5:71:4d:10:72:7c:a5:2e:8f:b2:1b:ce:b3:06:22:
05:81:09:3f:35:91:76:f5:45:9d:8d:b5:e0:84:52:
70:fa:2f:ce:7f:d6:ba:72:8e:11:d5:f6:f4:98:da:
23:34:fa:4d:49:71:e2:fb:62:50:0b:6c:fe:b8:2b:
ab:e3:80:e8:09:11:17:50:0c:66:60:5e:4b:0a:14:
88:a1:a5:d9:46:81:4a:a2:2d:bf:1f:76:20:7a:ed:
de:67:ff:b5:3a:ee:dd:e0:32:98:58:84:d6:5e:6e:
69:f1:01:9a:fb:16:43:d4:df:92:fd:e4:09:7b:5f:
ef:27:4d:1e:2b:0b:17:44:8f:6d:e3:dc:4b:67:24:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:55:A7:68:CA:C4:10:7C:C1:96:9E:2D:39:53:11:6F:D7:97:45
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:e1:cf:b8:f8:a3:24:7e:7f:21:13:de:11:70:ad:80:79:
4a:a1:4a:a4:bf:72:98:8d:77:76:a9:b6:b6:60:7e:92:dc:5f:
b6:b8:24:dc:71:2a:64:86:69:1d:df:2f:7c:bb:f6:bd:18:ea:
ad:7b:b8:a5:bd:c7:89:4c:c5:0b:83:fc:ee:e7:4e:36:f9:44:
b4:22:db:66:94:99:6c:3d:ff:c3:26:40:08:22:59:d4:49:32:
38:bb:42:5b:6f:8d:47:61:1d:ab:03:68:04:96:c3:7f:09:cf:
31:73:40:c8:89:b4:6c:7f:1f:77:4a:ce:37:ec:94:e0:32:e1:
2b:97:f6:91:92:f3:e2:ad:ad:c8:d6:da:7b:80:d3:42:86:f5:
33:05:df:5b:f3:17:77:90:d0:97:78:d0:7b:19:5d:73:7e:a7:
c5:89:44:0d:55:8c:62:b7:38:86:6e:f6:dd:a7:9c:00:14:fb:
e4:c2:25:82:9d:3d:04:1d:0b:bf:63:06:be:7a:ca:f5:98:13:
8c:05:31:c2:b4:ab:3c:66:bc:28:8c:3f:f7:7d:86:1f:94:c0:
ab:c7:95:88:c1:25:c2:0d:59:48:2e:83:65:67:3f:79:4c:af:
7e:06:46:c2:9b:54:c8:88:c9:01:71:ab:8d:0c:ea:c9:7c:f6:
62:5d:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:16 2026 by rpki-client