Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: pQjEjGhQzBODer9Rl4mb73kPn4wSs85hkMo/8M7+bIc=
Subject key identifier: 38:36:D6:21:61:33:87:72:BC:BA:11:63:8E:39:97:FA:28:0B:19:84
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019DA00A3C75A50FC0A5DBB2E9C1D4D5ADAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 18C9
Signing time: Sat 18 Apr 2026 10:01:58 +0000
Manifest this update: Sat 18 Apr 2026 10:01:58 +0000
Manifest next update: Sun 19 Apr 2026 10:01:58 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 5vEcg4tOpmhoHviUMqSV+keHjUDWBp0B3lzM1XtMPnI=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:0a:3c:75:a5:0f:c0:a5:db:b2:e9:c1:d4:d5:ad:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Apr 18 10:01:58 2026 GMT
Not After : Apr 19 10:01:58 2026 GMT
Subject: CN=3836d62161338772bcba11638e3997fa280b1984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:9a:a7:42:44:2c:fa:27:9a:1c:ff:1b:d9:
8e:d2:af:e3:db:77:b2:99:0c:97:60:73:29:2c:5d:
4e:73:c0:1a:2f:2c:90:e8:b4:23:1a:ca:9f:01:33:
47:53:52:7c:5b:ff:9b:00:2e:99:9e:ae:0e:18:17:
21:d6:3f:6c:3e:e6:2e:b8:2c:70:03:43:7a:81:a7:
06:de:c3:f7:77:ff:b3:c4:72:3d:a7:58:a8:36:13:
ed:75:ad:5f:be:da:1c:b1:9e:97:3c:4e:ff:1b:ea:
4f:df:98:a8:d4:df:91:aa:3a:d0:46:40:c7:a7:a7:
f9:01:df:ed:76:56:74:5c:e0:fc:da:2f:91:bc:71:
d6:c1:b9:54:b5:4c:69:3a:56:f0:35:29:57:df:1b:
3b:f0:d8:e3:66:5b:01:17:0c:14:52:3b:65:4c:5d:
7a:71:94:3f:57:c7:c3:d0:cf:0e:08:fc:d1:26:03:
ca:c3:7f:41:f5:b3:46:d1:2f:db:51:4e:e2:17:f2:
22:85:2e:1c:d8:06:12:ba:95:50:dd:13:ec:75:fe:
ff:e6:b0:b4:20:c4:2d:f7:60:16:b2:92:98:b0:e4:
3b:14:f6:33:14:75:66:04:a1:e4:51:bb:c3:f9:a6:
61:ae:25:77:94:b9:f4:06:28:6d:09:4e:8e:73:10:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:D6:21:61:33:87:72:BC:BA:11:63:8E:39:97:FA:28:0B:19:84
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:68:89:15:b8:70:fc:3e:ec:14:b4:e4:42:01:4e:6f:79:e7:
dd:3b:39:80:91:77:b0:39:f3:2e:7c:fc:d6:50:90:e3:e1:8f:
8c:6d:6d:68:8b:b2:97:73:4e:70:1a:f7:aa:20:77:9a:e6:1c:
4c:b0:b0:25:d0:8d:ef:f8:34:c6:66:6e:d8:fe:10:bd:ef:6d:
84:5a:32:e6:75:ba:26:90:c2:3f:17:59:9a:df:69:9e:04:2e:
3b:46:f2:19:1b:0c:10:2f:09:72:db:cd:6f:75:bd:4b:71:6f:
5f:60:09:78:90:43:7c:49:4e:af:44:a7:40:ed:d9:ec:ed:57:
c6:56:69:29:1d:d9:ed:e6:19:95:ca:dc:fa:cf:11:42:0e:56:
09:15:9b:ad:3c:75:a0:9d:0b:36:d5:7d:50:e3:61:1a:e8:8b:
0c:08:1b:b4:7f:3a:4d:34:b3:91:ca:ee:73:1b:c6:cd:48:23:
b3:74:be:44:58:cb:58:96:ae:2d:ff:ab:e4:0e:a6:b3:23:bf:
cd:78:d7:0d:cf:c7:d2:85:a9:3f:43:b4:ae:a8:12:4e:10:d6:
10:aa:1c:07:4b:98:1f:8e:45:17:9a:a3:16:9d:e6:83:3f:91:
70:13:e2:aa:a9:4f:dc:59:df:a0:ca:1b:8f:e7:2b:68:53:0c:
ee:7e:f7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2gCjx1pQ/Apduy6cHU1a2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjYwNDE4MTAwMTU4WhcNMjYwNDE5MTAwMTU4WjAzMTEwLwYDVQQD
EygzODM2ZDYyMTYxMzM4NzcyYmNiYTExNjM4ZTM5OTdmYTI4MGIxOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kSap0JELPonmhz/G9mO0q/j23ey
mQyXYHMpLF1Oc8AaLyyQ6LQjGsqfATNHU1J8W/+bAC6Znq4OGBch1j9sPuYuuCxw
A0N6gacG3sP3d/+zxHI9p1ioNhPtda1fvtocsZ6XPE7/G+pP35io1N+RqjrQRkDH
p6f5Ad/tdlZ0XOD82i+RvHHWwblUtUxpOlbwNSlX3xs78NjjZlsBFwwUUjtlTF16
cZQ/V8fD0M8OCPzRJgPKw39B9bNG0S/bUU7iF/IihS4c2AYSupVQ3RPsdf7/5rC0
IMQt92AWspKYsOQ7FPYzFHVmBKHkUbvD+aZhriV3lLn0BihtCU6OcxCuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg21iFhM4dyvLoRY445l/ooCxmEMB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2iJFbhw
/D7sFLTkQgFOb3nn3Ts5gJF3sDnzLnz81lCQ4+GPjG1taIuyl3NOcBr3qiB3muYc
TLCwJdCN7/g0xmZu2P4Qve9thFoy5nW6JpDCPxdZmt9pngQuO0byGRsMEC8JctvN
b3W9S3FvX2AJeJBDfElOr0SnQO3Z7O1XxlZpKR3Z7eYZlcrc+s8RQg5WCRWbrTx1
oJ0LNtV9UONhGuiLDAgbtH86TTSzkcrucxvGzUgjs3S+RFjLWJauLf+r5A6msyO/
zXjXDc/H0oWpP0O0rqgSThDWEKocB0uYH45FF5qjFp3mgz+RcBPiqqlP3FnfoMob
j+craFMM7n73wg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 13:55:57 2026 by rpki-client