Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: LKeR+yigq/xZs2MZ6yfYVeI5z2/Cf+mn9pMsW+UU4Wk=
Subject key identifier: 09:17:E6:78:69:19:44:34:6E:67:EE:25:4D:9C:B2:C3:0C:64:7C:DC
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019D38D33DF8EF06126BA437A75EE4BEACA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0F93
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: fd9396OwfyvmAzKyBx3VzGYGcUo.roa (hash: YCYApcDvzt3cYu0nRrcnf8eRckIYfSGxjh0WqkacoII=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: jTlJdDO/XOTipsNraOJikqYhye6xcdTMtzR65Lyvnw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3d:f8:ef:06:12:6b:a4:37:a7:5e:e4:be:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=0917e678691944346e67ee254d9cb2c30c647cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:a9:d8:3a:b9:0f:d6:7d:0d:01:79:63:56:
4f:bc:8c:e6:d7:42:cc:46:aa:d4:b2:ee:26:51:92:
76:72:1f:15:a5:72:2d:1a:01:1e:82:11:16:73:f4:
2d:3f:30:37:84:59:19:ea:2f:20:e9:f6:e3:a8:ee:
5e:62:eb:8b:dd:40:f0:91:9a:e4:c2:ed:14:f4:ef:
7f:0b:0c:b8:4f:91:75:7f:a6:8c:c5:c6:c9:1c:44:
52:f7:bd:d2:77:13:76:1f:0e:ea:26:08:8d:12:5c:
52:89:f6:a2:e9:55:dd:45:51:8b:28:01:14:f2:79:
1c:ed:af:f7:82:51:98:b1:b8:1d:ce:c2:d3:b0:b9:
34:e1:6c:d0:b1:c1:5e:f7:5a:30:f5:42:59:5c:0d:
cb:70:1c:e5:d7:d2:d3:7d:a2:9f:cb:1d:57:87:9e:
a5:3d:1c:8b:5f:29:26:f8:2b:04:86:7f:e2:22:71:
35:b4:e7:3a:66:64:a4:5e:da:6e:2a:74:56:bc:6b:
7c:f1:58:6d:5b:b7:59:2b:c0:83:5c:fe:ca:70:86:
7a:42:c7:6e:10:eb:18:88:14:ff:55:98:8e:4e:99:
2f:78:e1:96:68:dc:5f:54:d2:8b:62:69:91:24:df:
3e:f5:07:c8:d9:f4:40:f9:e4:df:53:d3:4b:75:45:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:E6:78:69:19:44:34:6E:67:EE:25:4D:9C:B2:C3:0C:64:7C:DC
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:9d:f7:b0:0e:2d:88:f9:e1:ca:12:2a:f9:61:74:0c:ba:
30:76:72:65:af:d5:46:d1:58:30:e3:4d:cc:4d:49:ef:48:74:
6c:bd:bc:81:3d:93:92:78:94:cb:d6:ea:77:5c:c4:59:0a:b3:
82:0e:3d:80:b7:16:e1:c3:f9:52:97:b0:60:29:d5:b0:c8:07:
61:ba:26:97:2a:d9:85:6b:20:c7:03:80:bf:4c:ed:af:b5:d1:
30:5d:1f:0a:c4:47:32:71:13:2d:f8:b0:44:cd:53:98:c9:cb:
7a:bf:ed:6f:bf:42:86:f7:b8:7a:5d:e4:c0:f3:c6:16:88:00:
ad:0d:eb:c3:87:74:7b:01:71:e8:9d:fb:fe:cb:b0:84:94:7e:
31:41:0e:5d:61:2b:f5:42:d8:83:09:3d:6f:b9:f4:e8:13:02:
b0:d1:3a:69:fe:f4:25:e4:e1:e4:66:0c:98:40:2c:63:23:0b:
c1:ca:ba:5f:bf:af:d5:41:ea:52:4e:08:5e:bc:bd:2b:28:f8:
11:72:0e:33:47:15:6f:be:11:78:00:cb:a1:d0:19:8b:2d:fc:
4b:a0:2b:6e:79:f6:db:bb:84:75:ba:e2:ec:69:48:36:e5:cc:
fd:3a:9c:bd:01:42:1b:43:32:4d:10:de:3e:0e:ae:51:fb:19:
15:dd:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:58 2026 by rpki-client