Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: +GA1xQcDC5UZVxUCwZ9cLXXF20aetcingfKdEGklHaw=
Subject key identifier: BF:91:BE:34:0D:AB:6E:01:E3:EC:91:C7:65:5A:BA:64:D8:DE:17:86
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019E3072EEB6C3D6F167F703C4FE9DEB5950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 11:01:38 +0000
Manifest this update: Sat 16 May 2026 11:01:38 +0000
Manifest next update: Sun 17 May 2026 11:01:38 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: NBr6BWg9QcsENdeFaCDHUI3shrkxR7YYYyZIqFZco0g=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:ee:b6:c3:d6:f1:67:f7:03:c4:fe:9d:eb:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: May 16 11:01:38 2026 GMT
Not After : May 17 11:01:38 2026 GMT
Subject: CN=bf91be340dab6e01e3ec91c7655aba64d8de1786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:12:7a:e1:70:27:c2:72:bf:78:9b:31:d5:
68:ab:19:aa:15:68:6a:1b:8b:8a:54:02:b9:23:48:
62:f4:c2:e3:68:86:0a:5b:d3:59:bd:37:c0:91:df:
f1:27:95:f6:b3:10:a6:b5:5a:51:d9:e2:38:3d:f3:
9e:f8:a8:2a:32:0c:9c:82:d5:23:dc:6a:4c:83:8d:
44:30:b7:79:2a:49:5b:50:76:fb:b0:e3:db:59:09:
2c:9a:7d:61:02:37:f0:b1:13:a8:5d:f5:2e:ab:f8:
02:bd:57:42:2e:1e:b4:d7:5b:12:ab:2a:bd:bb:d4:
a7:bb:8b:f1:26:53:3c:3d:f6:f4:70:6f:49:76:c5:
24:f3:4f:0d:3d:c0:5a:82:ce:6c:44:b6:db:52:6a:
66:b0:c7:4d:b4:61:d0:7b:8e:40:b1:fc:a7:1f:b4:
7f:c4:df:38:84:b5:b9:29:8f:59:dc:14:2d:21:58:
46:15:6c:21:87:8d:3f:c7:43:f1:70:3c:c7:e7:54:
4b:85:13:81:09:71:5c:61:c1:c1:12:99:f6:7a:ca:
a5:49:97:f5:8a:88:a9:97:e9:f9:3a:93:d0:b4:e4:
0e:c1:60:87:e7:81:d6:66:39:4d:9c:4d:82:ce:10:
88:9c:ae:13:66:19:27:24:13:8f:aa:c4:61:2d:41:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:BE:34:0D:AB:6E:01:E3:EC:91:C7:65:5A:BA:64:D8:DE:17:86
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:11:51:68:90:11:e0:0c:c1:63:69:e9:82:98:17:01:f3:
ea:c9:83:f5:b7:b3:09:d2:f9:23:a9:4f:41:1c:26:07:dc:7c:
93:89:62:06:85:2e:65:f6:90:f7:8a:af:71:03:0b:70:96:20:
03:ae:59:c0:b6:b6:aa:32:1d:c8:f2:e8:83:3c:90:f3:45:b5:
b0:76:9e:c3:5b:a3:a2:88:db:fd:bb:a4:6e:49:be:09:8e:79:
f5:dc:0d:4a:92:5c:35:03:48:2a:4b:2e:7c:1b:77:7c:a0:71:
53:83:41:b5:26:76:2e:2d:16:df:cf:34:3b:20:bf:16:87:71:
02:29:41:2f:9b:5c:a8:17:85:2d:65:4e:b3:d3:87:ab:dc:d8:
74:21:27:a4:2f:19:7f:60:fe:00:32:92:a7:a5:17:75:81:1b:
3a:5a:58:bb:46:4b:98:53:48:2a:86:58:b1:30:a8:e5:94:8d:
3c:4d:e5:76:35:55:89:2e:97:f1:09:41:12:0c:76:15:43:d2:
1f:ea:5d:df:37:f9:33:f0:ce:1d:35:e6:7b:43:a7:b3:c6:66:
b8:3f:21:14:73:f5:18:a8:e7:11:67:c3:c9:7c:90:9b:40:c4:
35:e1:0a:33:58:b9:2d:37:f8:24:2f:11:1b:e3:b4:85:bf:8c:
67:c5:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:17 2026 by rpki-client