Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: z8M3EqOD0XDdD/TrOzAkSLm/t0zdtFVU+zO5E+E+pZQ=
Subject key identifier: 3B:A0:DC:A4:01:68:BF:10:72:1A:11:3C:7F:42:A1:68:B9:79:68:E5
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019D375310C7DDB2F76E09401C44EB1274D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: /J+YqWc/KGTvViUY9boFRUz1c3X1tTpzQ0VtWsmC+Z4=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:10:c7:dd:b2:f7:6e:09:40:1c:44:eb:12:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=3ba0dca40168bf10721a113c7f42a168b97968e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:f4:07:28:36:7d:a7:39:3d:9c:bb:e9:4b:
f2:fc:29:ae:8f:1d:0d:e0:a7:51:8f:4e:b1:42:d3:
38:a2:61:0e:32:25:86:40:eb:dc:4f:a3:b1:ed:f4:
72:c5:a8:24:cd:6a:97:38:9e:a2:3f:f4:49:18:7f:
c1:c1:c4:1a:2b:02:dd:0b:a5:d1:64:88:c7:b4:69:
39:0c:a9:8f:16:2b:92:9f:8b:87:74:95:d4:36:ca:
87:5a:51:b5:bc:2c:83:50:4e:d3:d3:77:7b:47:8d:
97:25:4b:50:36:df:97:aa:d8:ff:0a:ae:f4:4c:ec:
f5:3a:29:3e:24:98:0d:38:69:23:06:a4:61:a1:69:
f0:29:e0:d1:fb:b2:f8:e2:80:31:0d:67:b6:c9:49:
75:bf:53:db:c3:e4:d4:75:6d:9a:66:2e:71:c4:8f:
12:71:b4:ca:e3:ec:70:e5:9d:e1:bd:c4:5e:25:a4:
e4:dd:e1:0f:6e:a0:2a:21:5e:f5:2a:8c:f2:b2:65:
73:f5:0c:8c:ce:d1:7d:27:2c:f4:f9:49:2a:17:f1:
c1:1b:ce:cf:53:d3:26:6e:e6:3b:ca:6c:c5:cf:84:
6b:ec:ed:0e:08:6a:f3:7c:49:62:87:61:db:7d:bb:
01:44:96:d0:70:e2:58:c3:b7:73:10:6f:a9:d4:d1:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:DC:A4:01:68:BF:10:72:1A:11:3C:7F:42:A1:68:B9:79:68:E5
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:52:0e:6b:47:14:14:86:ce:b4:72:69:1a:2a:7c:7f:9b:
28:4b:72:0c:31:e8:56:02:29:79:0c:c5:1e:dc:ab:b5:b6:19:
b0:e3:32:6e:c6:e6:9a:ca:f1:79:5f:b8:63:ef:45:99:cd:fe:
35:ca:0d:96:1a:01:8a:90:c7:93:ae:f8:44:7e:49:7d:12:47:
61:51:f3:f0:56:00:75:d5:81:d9:e3:e9:15:3f:00:91:f8:de:
da:5b:6a:8f:b6:cd:fd:b7:d3:b7:6e:30:12:21:a8:9d:c6:0b:
7c:76:77:20:98:80:8c:b0:bb:87:b8:b5:e2:49:65:f4:a0:ea:
25:89:25:ea:71:9f:61:b2:51:a4:d0:2c:ed:ff:a6:2a:3f:80:
25:fd:a6:5f:83:0f:e4:2b:91:c6:c2:2b:f9:2c:dd:19:62:9a:
e4:fe:dd:55:96:32:77:24:31:f8:64:fa:35:7a:5f:5e:9b:b2:
f5:a2:f3:12:17:3c:12:57:af:bb:2c:01:98:72:eb:6c:ca:01:
99:ed:15:12:63:1d:21:c2:8f:dd:e8:f0:f0:fd:99:89:6f:6c:
3d:3f:2d:17:e7:b1:2c:74:86:38:ab:32:aa:ff:ae:a5:fc:ea:
44:71:2f:91:0b:e6:ee:d3:f1:66:93:57:7e:44:c0:3f:35:20:
53:fb:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:28 2026 by rpki-client