Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft
File: PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft (raw, json)
Hash identifier: O+8aIJYWdrGftAa/7nwZaGyDwurkgoubYI3tDEAogdk=
Subject key identifier: A7:63:20:8F:64:CC:C3:52:52:FF:91:7F:F9:D0:C2:34:CE:2E:B9:A1
Authority key identifier: 3D:A0:3A:17:30:49:BF:48:50:71:C0:FC:02:63:EF:6F:40:AD:D5:4A
Certificate issuer: /CN=3da03a173049bf485071c0fc0263ef6f40add54a
Certificate serial: 01A1A3DB91161A1A27B3FC05EBD085BC054F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft
Manifest number: 26
Signing time: Wed 04 Nov 2026 00:00:38 +0000
Manifest this update: Wed 04 Nov 2026 00:00:38 +0000
Manifest next update: Thu 05 Nov 2026 00:00:38 +0000
Files and hashes: 1: PaA6FzBJv0hQccD8AmPvb0Ct1Uo.crl (hash: KbSWNjBU+MsWv/H9LEx5+5nYRBQrsfnya5gLcXPZ+XM=)
2: hRPNoluiOXxMcQbKQga4rZMV_fU.roa (hash: B93EnBM7j6dqXkgSTXl4tJkyDThMIWMUyU4+3kb8KA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:db:91:16:1a:1a:27:b3:fc:05:eb:d0:85:bc:05:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da03a173049bf485071c0fc0263ef6f40add54a
Validity
Not Before: Nov 4 00:00:38 2026 GMT
Not After : Nov 5 00:00:38 2026 GMT
Subject: CN=a763208f64ccc35252ff917ff9d0c234ce2eb9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:10:24:df:bb:ee:b8:c7:30:50:93:c2:58:82:
e1:8c:4a:54:31:3a:f9:db:c8:7f:02:78:26:c5:d9:
cb:f2:8c:b0:28:4e:be:31:c2:27:31:a4:c6:f0:6c:
25:db:95:84:82:c9:94:ae:c0:6c:cf:65:1f:2f:59:
b7:c6:19:6b:10:f8:3d:0d:e8:a5:98:23:aa:95:24:
c6:18:44:00:91:c2:7e:95:a6:af:67:97:c6:51:3a:
bb:52:ff:d4:f8:4c:af:56:20:c7:37:61:3d:9d:c9:
4e:7d:95:a0:20:9d:90:bb:0e:ae:0f:ff:22:df:3c:
ac:58:b8:50:a6:bc:dc:a0:2e:0e:a1:da:32:11:b9:
ca:71:24:1c:47:ae:ca:75:e7:72:c6:9f:46:34:f5:
e7:a9:da:10:bd:91:05:44:cd:57:ae:31:f1:e1:a8:
42:71:ae:94:9b:82:3e:50:7b:68:5c:e9:33:da:4f:
2e:51:ce:03:5a:de:10:58:8f:5d:86:52:0d:85:cc:
e7:02:4a:f8:d8:c5:8b:6d:1a:ad:a7:52:23:13:86:
34:6b:d0:76:dd:20:90:3c:f4:fa:40:3f:8b:40:d1:
dc:73:01:99:07:f5:6f:55:5f:86:f6:6c:1a:30:6e:
f0:4c:2b:44:f3:0c:92:31:04:32:09:de:01:c9:c2:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:20:8F:64:CC:C3:52:52:FF:91:7F:F9:D0:C2:34:CE:2E:B9:A1
X509v3 Authority Key Identifier:
keyid:3D:A0:3A:17:30:49:BF:48:50:71:C0:FC:02:63:EF:6F:40:AD:D5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:aa:c0:c5:b0:21:a1:b6:79:1c:32:3c:64:c5:3a:e1:71:
72:dd:e0:35:4f:82:80:22:c4:84:3d:8a:78:55:44:cc:24:f3:
fa:94:e3:b5:ae:cc:02:ac:c7:20:b9:b0:8d:cf:7f:d6:ad:74:
16:37:80:91:e8:2a:9b:08:e9:d2:55:02:5b:1a:2a:4f:85:83:
47:f3:32:aa:3d:61:80:e5:af:e2:9a:42:c3:29:23:e4:e1:25:
c1:4c:88:ec:e5:71:73:24:e9:ea:fa:81:43:66:ec:de:3f:02:
4f:b1:6a:78:fe:a1:50:b5:b0:b8:99:ca:8a:4c:7b:df:13:53:
ae:91:99:f9:a2:0f:b1:d1:59:30:ca:b3:67:7a:19:49:5a:98:
56:bb:ec:1e:d3:9a:16:f2:6b:80:fa:dd:a8:e6:53:76:8d:3e:
9d:f1:56:5a:b1:ec:1e:f9:14:2e:3d:d8:cf:6c:9b:33:25:ff:
13:91:b1:af:d9:4e:32:a2:d7:fd:99:76:60:c7:16:bf:14:cf:
2c:3a:9b:c4:36:78:74:7b:c0:8b:95:eb:33:70:e7:9e:c2:68:
3b:fe:5c:e1:64:da:10:5e:67:18:cf:12:85:bd:a8:d1:a3:1f:
43:c1:2e:63:11:76:a4:b0:5a:59:42:c9:35:39:29:52:09:ae:
d8:f5:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:33 2026 by rpki-client