Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: X7uGkJ+DWH+JUkzekq6T3pM/nywIX3PuhQSVN4SvqsU=
Subject key identifier: 13:5C:DF:83:09:17:14:5E:9A:90:47:20:EA:22:F5:B9:93:15:73:78
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019F1A1ED6C3D31501A9CF3EFCA41FF6CC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 20:00:56 +0000
Manifest this update: Tue 30 Jun 2026 20:00:56 +0000
Manifest next update: Wed 01 Jul 2026 20:00:56 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: Inj9QF9ko6bWPoRc/Z6X+Ha5R9d8GrTXqfk8dIFr5lM=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:d6:c3:d3:15:01:a9:cf:3e:fc:a4:1f:f6:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jun 30 20:00:56 2026 GMT
Not After : Jul 1 20:00:56 2026 GMT
Subject: CN=135cdf830917145e9a904720ea22f5b993157378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:bf:61:ce:c5:ea:12:4f:de:0c:34:e3:33:
f8:f2:9a:03:d3:8b:d9:5e:94:5f:eb:62:3c:ae:a2:
be:9d:ee:93:f9:0e:61:c4:c4:4f:bb:b8:a4:1e:a9:
d7:7f:95:5a:a9:9f:57:16:7b:d5:7f:5f:aa:41:49:
10:21:d7:7e:cc:c2:2d:36:32:4c:2b:da:7e:08:33:
1a:02:1d:0c:8c:c1:28:82:ab:3c:67:3b:28:2c:7f:
ef:62:6d:1c:c8:b5:57:68:ad:4e:99:94:50:8e:34:
57:79:09:aa:6c:7c:06:8e:96:32:38:89:80:9f:24:
33:99:f7:19:b6:50:d3:41:67:90:7a:6d:02:a5:df:
6a:10:6d:0f:bb:48:08:20:d3:62:1c:e4:bf:d7:eb:
19:08:7e:05:f6:12:20:ca:ff:61:81:3a:7d:b5:11:
b1:b4:e9:d5:d5:2e:f7:a6:14:10:61:d4:9a:fc:7c:
d1:64:ed:87:b3:e8:d0:33:42:9b:e1:09:4b:35:65:
8b:6c:76:65:df:0c:c8:2a:a3:91:71:24:79:09:1b:
ca:04:3c:d1:d5:c2:07:7b:2b:b4:aa:bb:bc:8a:a3:
58:83:4d:38:86:c3:c1:28:85:67:2e:6e:b2:f2:a5:
dd:89:dc:c1:83:f1:7c:ce:93:4e:7d:8b:e9:36:9b:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:DF:83:09:17:14:5E:9A:90:47:20:EA:22:F5:B9:93:15:73:78
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:47:78:7a:03:58:ea:68:08:53:00:2e:83:2c:a8:26:9a:c8:
a1:c7:c5:74:93:66:7f:82:66:08:14:da:7f:b9:da:6e:69:9a:
ee:f4:da:e0:cd:02:4e:e9:fb:3a:86:2a:6a:a3:db:ab:95:a6:
8e:c2:e6:25:1f:36:9e:c3:73:59:7d:e5:4a:03:82:87:43:b9:
13:ad:f2:58:c1:36:75:9a:0b:5d:35:8e:7b:f9:4c:dd:83:64:
d0:f2:d8:a9:22:0f:84:91:5e:49:84:fb:d5:34:d3:1f:10:3f:
d3:d9:46:07:0c:54:3d:10:0a:0b:43:81:e4:6e:ad:06:41:c6:
f6:2d:9f:9f:6c:fe:23:75:a4:91:ea:db:b5:9b:2e:fb:66:4f:
1d:3b:9f:b9:d0:1d:06:d0:69:a8:22:a7:0a:37:3a:37:f7:91:
6e:e0:42:93:02:dd:fa:49:7f:aa:40:28:da:1b:ba:5d:64:f0:
61:06:98:32:53:a4:98:0c:dd:39:a6:a9:84:41:fe:c6:96:b9:
da:47:9c:a9:70:40:8a:9b:5f:59:06:67:90:5b:ec:58:25:4c:
41:c8:c6:66:cf:3c:d6:6d:73:be:63:4f:b6:c7:0d:f6:83:40:
40:fc:4c:9a:2a:0d:7f:c2:bc:30:92:6d:11:66:24:eb:d0:86:
5a:c8:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:48 2026 by rpki-client