Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
File: paxWYvjZJWAF42kgCFIk7TSijq0.mft (raw, json)
Hash identifier: 0gLgIoLkxoCwePr5uZAnZYgRPcQIPB1N2dZ7y8VJ5f8=
Subject key identifier: A7:F5:8E:87:0B:41:1F:71:ED:96:F2:24:CF:26:44:D2:89:E3:C1:90
Authority key identifier: A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD
Certificate issuer: /CN=a5ac5662f8d9256005e36920085224ed34a28ead
Certificate serial: 019D3865A7305384C896E2ECE5F19BCE13C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
Manifest number: 0200
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: paxWYvjZJWAF42kgCFIk7TSijq0.crl (hash: dbDSfpPG12XurMNzbNrznHa74LoQyVW19btKjfprIkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a7:30:53:84:c8:96:e2:ec:e5:f1:9b:ce:13:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ac5662f8d9256005e36920085224ed34a28ead
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=a7f58e870b411f71ed96f224cf2644d289e3c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:96:12:e8:bf:59:e4:ef:55:75:ff:97:2c:
f4:0c:52:eb:7d:7a:e7:34:06:92:9f:28:f1:7e:33:
0d:a9:1c:61:16:df:48:84:8e:1f:b3:41:59:76:03:
64:16:ec:c9:fc:3f:02:c6:81:62:dc:95:99:9b:b0:
f4:70:02:66:34:49:a8:c7:67:b2:be:2a:8a:8e:ca:
e8:00:6f:10:2c:1a:87:3c:18:88:06:33:4b:a2:09:
e9:9f:c4:24:3b:bf:29:d3:20:95:e4:93:f2:68:5b:
55:2e:21:81:29:bb:d8:17:36:67:12:2e:e9:3d:29:
e4:c1:3c:1f:36:fb:3c:12:4e:0a:ff:f9:02:5e:60:
a7:6a:f5:b8:50:16:d0:75:af:de:79:f4:e3:b0:2e:
07:11:6e:6c:89:00:2e:29:09:38:ef:9e:6c:f1:40:
a9:94:4e:9a:56:c2:61:6e:96:06:94:f7:e1:32:35:
f9:7e:4d:e0:80:3f:36:a8:0a:70:69:59:7b:55:e1:
94:35:74:bf:85:9a:dc:e8:93:df:b7:3d:2f:d0:d0:
d6:1a:a6:64:fa:c0:18:ec:15:4e:47:78:50:43:a8:
44:86:47:47:83:bc:d8:63:f1:b6:b4:09:6b:a4:d7:
e4:b2:8f:f1:98:6f:b1:06:55:3c:b0:46:14:52:2c:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:8E:87:0B:41:1F:71:ED:96:F2:24:CF:26:44:D2:89:E3:C1:90
X509v3 Authority Key Identifier:
keyid:A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:44:07:c8:3c:a5:05:5e:4f:7b:90:a7:92:c0:99:1d:8d:20:
35:47:64:49:43:32:75:16:1b:84:73:7f:86:19:05:e5:28:db:
15:77:94:42:39:72:c1:9e:b4:01:13:10:eb:f1:dd:cb:6d:8f:
8f:06:ab:6b:c6:90:cf:d8:82:c3:64:70:51:d9:5d:06:6e:c9:
26:bd:ca:38:f8:6b:73:d2:65:bd:1f:c3:70:89:24:38:46:44:
41:06:70:72:cf:f5:cf:6f:7d:90:13:6b:ce:1b:53:00:95:b1:
64:5a:c5:1a:16:07:a5:bb:23:c8:11:c2:b1:c8:7e:80:2a:e2:
0a:ff:bf:bc:13:48:57:3d:a1:69:88:67:34:c6:6c:0f:0f:e4:
25:56:e9:2f:c3:24:a0:fd:39:af:b9:c5:c4:a6:24:84:dd:a9:
7b:aa:04:19:51:c9:75:29:b2:d2:80:9c:44:6e:98:e6:2a:5e:
ea:97:3f:ed:24:84:e9:71:ee:7b:ea:a8:cf:f0:17:e9:29:3e:
8c:bd:d7:32:99:78:dd:fd:80:f0:7f:42:a8:51:62:a1:b7:20:
28:e8:84:54:e3:f4:2a:6e:d7:6a:74:63:a2:be:b8:2f:5b:85:
7f:70:4b:bb:47:55:b5:de:10:3f:b1:f0:40:02:86:4c:f8:3d:
82:2f:c9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:32 2026 by rpki-client