Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: UmQ5kWNB7moX/tPVYGFJ1298O4t6cuqR6qh1ykM2cLM=
Subject key identifier: 82:96:A3:E6:A4:56:C2:A5:C1:FF:B0:B3:80:86:6B:40:D6:2B:AC:80
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01A151E40E97CB13AC687E8C612F77A3D6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1AAD
Signing time: Mon 19 Oct 2026 02:01:02 +0000
Manifest this update: Mon 19 Oct 2026 02:01:02 +0000
Manifest next update: Tue 20 Oct 2026 02:01:02 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: Bqs8PN54xj2g3QNehsXHQfAhxleTEaSLSWIQ22oGUbU=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:0e:97:cb:13:ac:68:7e:8c:61:2f:77:a3:d6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Oct 19 02:01:02 2026 GMT
Not After : Oct 20 02:01:02 2026 GMT
Subject: CN=8296a3e6a456c2a5c1ffb0b380866b40d62bac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:72:41:d8:bf:e0:77:c9:4d:d7:0d:1e:2d:
38:f6:e0:eb:9f:ea:ae:45:a2:6b:a2:60:82:e4:6f:
5f:99:88:0a:9c:a2:a6:8c:39:a3:92:e4:43:c2:7d:
22:c1:92:40:97:4f:b1:bb:22:07:e0:da:5c:53:a8:
d7:4f:07:15:82:e7:9f:72:e1:87:ff:11:e5:91:e1:
bb:b8:50:2b:47:36:b7:38:22:ff:6b:67:2b:f7:18:
22:02:83:b5:11:9e:92:a1:ea:06:81:dc:68:86:a7:
14:cf:7b:75:64:56:53:12:46:fb:94:3a:e8:27:9d:
ac:53:05:34:f3:55:26:a4:7b:16:91:7c:5c:e9:04:
59:81:8a:41:da:0b:33:8c:19:6d:23:15:6e:75:9d:
be:51:67:8a:bb:32:58:ac:8f:79:fa:10:aa:85:b1:
70:74:b9:7d:45:22:24:9a:57:8e:b0:11:56:29:96:
9e:8f:ee:02:d8:8d:39:ad:e9:85:5e:78:87:f1:27:
d6:03:39:df:bd:21:16:1a:62:aa:6b:13:88:c1:0d:
69:76:f6:8d:73:79:f0:b4:38:b9:50:ef:d7:db:4c:
0f:cb:3a:f5:23:b3:29:6b:c9:75:91:f9:f9:23:dc:
af:03:ee:1a:8c:fa:66:ae:be:3c:c8:e3:82:7c:45:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:A3:E6:A4:56:C2:A5:C1:FF:B0:B3:80:86:6B:40:D6:2B:AC:80
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:19:d3:84:9b:c1:3c:af:4e:88:de:51:46:77:5d:24:16:
35:fe:f7:3b:dc:1b:b5:f5:dc:97:24:27:06:4b:2d:0d:ed:77:
ac:2d:6d:fd:10:7a:3d:1e:d0:bb:ba:17:57:6d:e7:c6:4b:98:
7f:27:84:48:53:8e:d0:a5:73:a9:9a:e5:c0:dd:e5:1b:2c:66:
bc:97:9e:7c:cb:76:17:09:84:88:6e:f2:03:af:3c:26:97:50:
ee:40:53:00:e0:79:3a:3e:e2:86:fb:8c:4d:af:ab:ef:a3:38:
44:ef:7a:67:13:e7:b4:3b:db:f9:25:a0:ad:62:a0:58:0b:49:
e3:7b:27:7d:34:f5:a7:65:83:f7:e2:bb:53:b6:04:2f:c0:3c:
08:b4:ed:60:2a:b6:1c:ed:e4:11:ad:d8:9e:de:87:f9:0c:da:
9b:1b:f8:09:2c:f6:d2:7c:ac:ec:da:32:1c:c2:98:ea:78:29:
3d:98:b7:07:b6:43:77:3d:56:a0:73:f8:c3:75:b6:07:3d:57:
3d:83:93:3e:9f:e6:2f:23:90:04:9c:c0:4d:c1:0c:8b:23:fb:
41:8f:3d:57:db:bf:5d:95:70:f8:06:97:53:23:ec:91:69:4e:
73:e7:e2:cc:b1:47:8c:f3:e3:64:43:e4:07:22:3b:35:a3:35:
81:2d:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:33:48 2026 by rpki-client