Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: S3bHdcMKILgIldXtwcRQSD1cw16fYdmQ0uFRvMbIiik=
Subject key identifier: C4:12:50:94:B7:92:A6:F6:71:AB:C8:9D:69:2A:7F:F3:A4:BE:76:FA
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019CB65D167CECBA3592FC7FE0A227617D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1850
Signing time: Wed 04 Mar 2026 01:01:19 +0000
Manifest this update: Wed 04 Mar 2026 01:01:19 +0000
Manifest next update: Thu 05 Mar 2026 01:01:19 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: tVfSfUa++boTtQUZhopkXrkSwNJ3uj4JgfDVMM23ue0=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:5d:16:7c:ec:ba:35:92:fc:7f:e0:a2:27:61:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Mar 4 01:01:19 2026 GMT
Not After : Mar 5 01:01:19 2026 GMT
Subject: CN=c4125094b792a6f671abc89d692a7ff3a4be76fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:ca:ac:cf:c3:7e:7f:02:2e:43:d7:47:75:
1a:c7:35:64:05:1b:2b:11:7a:80:7a:27:70:f4:ea:
f1:30:0e:32:c1:09:fe:8d:3c:77:97:57:29:00:16:
0f:62:1f:57:5e:d7:70:39:f1:91:b0:1e:e1:22:87:
97:fe:84:8d:31:03:96:f9:84:aa:d2:a7:12:f7:77:
9a:71:35:ef:6c:3e:bd:01:0c:89:fb:52:35:44:dd:
1e:28:2b:4c:e4:13:88:2b:f4:b7:18:0f:ae:8a:dd:
af:48:29:10:51:bd:a9:0e:98:67:de:54:94:de:fe:
eb:6f:51:08:42:c5:97:6d:ca:7b:5a:d0:6f:c3:43:
70:7c:1d:0e:9c:55:88:1d:2b:f4:dc:88:7d:33:f7:
4e:4b:ec:96:dd:89:79:c6:9f:20:61:e6:0e:e3:a3:
75:aa:47:03:e0:f7:17:4a:6b:74:fc:bc:ca:60:71:
4b:91:53:20:45:28:a1:ff:70:06:d1:1e:63:ec:02:
83:0a:dc:9d:15:56:0e:27:03:9a:ff:90:78:d3:39:
26:fa:d0:c9:1d:9c:f3:f0:03:3e:fc:0f:59:b1:18:
c3:78:73:d8:3e:0f:f1:b9:a7:13:7f:75:6f:e8:06:
68:ec:68:fd:e6:db:48:53:bb:7a:fa:8a:7e:c5:f0:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:50:94:B7:92:A6:F6:71:AB:C8:9D:69:2A:7F:F3:A4:BE:76:FA
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:70:e5:47:4d:e5:06:52:00:94:1a:3a:6e:e4:a7:67:43:af:
43:fe:63:0e:2d:c5:57:8a:da:b7:7a:76:0a:23:e7:bc:8b:5e:
b5:5f:c8:a6:75:76:95:39:3a:b0:4e:20:40:90:96:76:19:c2:
28:5b:e5:86:31:20:43:df:76:47:ea:07:3c:33:35:be:0a:8d:
e8:d4:90:b5:18:b9:25:0c:43:7b:5f:c8:c0:30:36:64:02:ea:
50:18:76:71:2b:a6:20:44:3f:09:bd:a8:a1:63:25:4b:42:a5:
e2:3f:31:95:11:f6:9a:cf:ee:15:e3:db:a8:b8:7a:da:f2:b9:
6c:8e:28:40:51:7d:f8:38:76:47:a1:99:e2:7f:b9:5d:c0:ce:
2f:0b:7e:2b:18:ff:76:de:b0:ac:96:39:c3:b4:03:38:6b:39:
01:f2:95:b1:ed:ac:ce:54:06:e9:3f:fd:ba:84:a7:f4:6e:d5:
39:d8:a0:0c:04:c7:9f:e4:75:42:22:2e:d0:ab:9f:69:4a:78:
bd:4c:23:bf:d1:26:99:14:00:08:53:e5:78:77:ac:bd:d6:ee:
c3:e2:42:88:91:25:8e:41:9a:94:e6:10:94:b9:35:7d:eb:25:
f2:a8:28:5b:83:a2:df:00:66:14:35:4b:56:8a:ac:b4:81:0f:
18:38:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 05:56:19 2026 by rpki-client