Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: KoIY1PL5v2B2imWRkztUiv+4YMKfZgGs1wigZzqP+tY=
Subject key identifier: 9D:D2:95:47:9A:74:10:5E:02:5D:29:82:69:EB:17:0A:DB:0D:45:74
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019CEC6FA269175B22A2CB1B09BCF65D9BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 186C
Signing time: Sat 14 Mar 2026 13:01:04 +0000
Manifest this update: Sat 14 Mar 2026 13:01:04 +0000
Manifest next update: Sun 15 Mar 2026 13:01:04 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: NStgfANdBcMC+mBL+biiejuyNgCc7+YtY32Nb/UdOb4=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:a2:69:17:5b:22:a2:cb:1b:09:bc:f6:5d:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Mar 14 13:01:04 2026 GMT
Not After : Mar 15 13:01:04 2026 GMT
Subject: CN=9dd295479a74105e025d298269eb170adb0d4574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:8f:26:d6:bc:be:d8:9e:3d:e0:e9:7f:78:
5f:cf:3a:a2:09:4b:2c:c4:28:88:11:c4:db:8b:3a:
16:8f:18:61:e4:4d:37:ea:8f:37:f6:2f:27:3f:f3:
65:77:12:fb:a7:c3:66:cb:20:d1:f1:86:f5:79:e9:
b3:f1:e9:c9:84:77:f2:c2:83:c7:6a:7b:48:71:90:
cc:37:e1:f7:f4:8b:3a:0c:57:0f:5e:c3:7e:92:43:
b3:76:f8:7f:28:62:20:98:2c:a3:69:f2:e4:a2:94:
e2:e6:a8:13:0f:88:1c:f8:c6:c8:db:7b:bf:bd:05:
66:33:ac:3f:8d:70:a2:15:a1:23:d6:69:b3:1a:86:
56:83:7f:51:7f:f4:97:0d:d8:60:0c:69:90:29:46:
47:70:d2:89:8d:d6:99:fa:6d:82:ce:06:07:f9:07:
c6:d0:ac:e8:36:47:44:22:68:1d:27:03:5a:4d:6d:
ea:b7:1e:2c:44:62:49:d5:e4:f1:a0:5d:47:aa:40:
fc:99:47:95:f3:88:4e:b7:cb:f1:91:48:aa:20:f7:
b2:78:95:73:aa:7d:07:93:28:65:bd:0a:c7:3f:23:
40:f1:f1:58:f5:69:18:f5:4e:62:54:6a:0f:36:15:
17:58:95:a3:24:1c:7f:7d:ab:ba:a4:3d:ec:ea:48:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:95:47:9A:74:10:5E:02:5D:29:82:69:EB:17:0A:DB:0D:45:74
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:95:ff:c1:59:73:92:81:6a:b6:a0:5f:d4:0f:2a:fe:de:
98:44:b1:73:25:ff:a8:71:f6:a9:8f:43:85:bc:e9:25:83:83:
3d:e1:cd:8d:61:bd:94:ab:3d:ac:81:85:50:3a:15:62:40:90:
c7:43:98:89:fe:d1:93:06:42:1e:a4:86:3b:3d:c2:14:6d:d0:
6a:2e:03:f7:0c:7b:2a:d6:a9:1e:fe:b7:ef:ce:f1:66:b2:b9:
1d:a0:de:8f:ac:83:b8:b4:91:90:8a:20:17:1d:11:d1:cd:fc:
da:ed:96:80:ac:fc:88:6d:b2:db:38:65:0f:dd:fc:56:bd:16:
f2:3c:2f:e5:76:e1:7d:a0:ae:c1:f9:15:e4:d0:20:7e:30:99:
16:44:46:82:a6:47:b9:11:15:73:c6:a2:d4:a1:d4:2e:9a:1b:
66:5f:0b:b1:9e:68:3c:95:ca:90:34:dd:db:f4:ba:fe:f4:02:
2a:8c:e8:43:76:44:40:42:79:89:79:c1:44:8c:8d:4e:ed:28:
6e:96:6d:01:4c:a6:27:11:87:55:86:0c:cd:57:50:48:64:c0:
82:a4:36:22:46:2a:6a:e8:8c:97:67:4d:17:fd:fa:82:77:0b:
d1:54:31:3b:02:60:09:34:87:8d:82:dc:6d:7d:0b:93:ba:04:
fc:b4:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:47:33 2026 by rpki-client