Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: o5boawQR6FvIFPKS+PrQ3wQi/AA8KOs01kkH+uw+4kg=
Subject key identifier: CC:47:0C:11:03:1E:60:4A:7B:F4:79:4B:06:3E:A6:C2:0F:7A:F5:B2
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 01A0EDAFC2FF4404FCC779E449D518ADCA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 15:01:53 +0000
Manifest this update: Tue 29 Sep 2026 15:01:53 +0000
Manifest next update: Wed 30 Sep 2026 15:01:53 +0000
Files and hashes: 1: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
2: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (hash: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 18/VvoOVl1QjOAEsmb0T9iaugp0wk1CLu6dyqzkKxCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:c2:ff:44:04:fc:c7:79:e4:49:d5:18:ad:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Sep 29 15:01:53 2026 GMT
Not After : Sep 30 15:01:53 2026 GMT
Subject: CN=cc470c11031e604a7bf4794b063ea6c20f7af5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:c5:83:52:60:e3:39:ee:ad:16:a8:c3:20:
ee:28:c0:ac:16:9c:4e:eb:c3:0b:e9:0a:96:b1:48:
88:a3:f9:e3:f0:f7:0f:c4:c7:8b:b7:b3:45:17:90:
42:ff:78:d9:ef:d0:5e:90:c6:3b:f4:5b:9b:9d:af:
b2:18:19:22:d4:6b:77:5d:e8:dc:13:06:aa:5a:74:
db:79:35:ca:3a:8c:61:0e:91:6a:a5:af:da:9e:61:
68:89:eb:5b:b7:44:a4:e1:c5:1c:80:41:62:2b:b1:
d8:fd:8b:67:8a:94:d5:3c:eb:f8:3f:c4:dc:79:40:
a3:7d:ef:77:e6:5a:08:94:1c:ca:23:8b:f2:e9:6b:
6a:c0:c5:6b:87:93:23:07:96:86:4c:10:6f:f7:15:
c0:e9:9b:a3:22:02:9d:5c:4b:6b:4d:68:44:38:11:
4c:b3:70:fe:ce:a6:bd:d2:7b:cf:f6:74:6a:ae:25:
a5:ed:a1:fc:59:fa:1c:18:99:d7:34:6b:04:c9:03:
a6:2b:e4:fe:43:2b:ac:bd:6c:e5:0d:ac:59:28:3f:
31:35:39:65:a9:3e:3f:ab:7d:ee:28:4f:de:95:f5:
ae:b8:c4:62:30:29:3f:93:3b:d4:91:c0:83:b2:8d:
13:74:3b:84:5d:2f:6c:00:0a:4b:7e:56:a9:66:2b:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:0C:11:03:1E:60:4A:7B:F4:79:4B:06:3E:A6:C2:0F:7A:F5:B2
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b6:2d:29:82:7b:08:27:a2:6a:97:b0:14:ca:10:1c:c3:f8:
e9:4f:1d:0b:be:a6:0a:6d:6b:54:0d:5b:2d:31:19:42:a8:13:
1e:55:5a:f5:21:39:59:3b:c3:30:62:8b:20:f1:c7:5d:d8:18:
eb:e3:49:af:8f:8a:6d:bb:62:6f:57:85:a4:6c:8c:08:57:ac:
83:2d:50:c5:e9:b9:7b:d1:ee:94:f4:aa:77:99:06:58:62:74:
95:5e:da:b2:37:f9:1c:16:61:23:37:1b:fc:36:5b:d3:8d:3f:
9d:4d:19:fb:da:8f:f8:8b:12:6e:5d:cc:5d:e0:a3:0c:80:9d:
f2:9f:27:30:8b:97:18:2c:95:c4:ec:0b:f7:26:4c:5a:37:3a:
ce:a6:a9:39:63:89:65:f2:b0:27:5c:31:94:b2:c5:15:5e:61:
a1:d7:4b:5e:a6:b9:bf:d9:bc:58:49:b7:d7:bc:84:61:0a:f2:
0d:37:20:66:6f:74:79:88:6c:ea:6a:c4:02:7f:c8:a1:ff:dd:
46:1f:ee:91:66:0a:15:b9:fc:d1:5d:cd:f4:2e:c5:f7:56:a8:
85:16:d1:87:2e:59:2e:4f:f9:fa:7d:17:6d:6d:fe:d1:fc:73:
93:9f:20:ba:ff:15:8d:52:2b:94:3e:51:bf:d6:05:ba:e8:64:
65:cf:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:26:16 2026 by rpki-client