Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: cpNiqeRpQ0dMElWiVUs3ATEYxfAkkpx6/gAtKOp9das=
Subject key identifier: B2:89:68:61:62:9F:CD:40:35:CF:68:2D:7D:14:D6:ED:F0:8C:91:3F
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019E54B62250A6A1D41810324DD4714865A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 1026
Signing time: Sat 23 May 2026 12:01:22 +0000
Manifest this update: Sat 23 May 2026 12:01:22 +0000
Manifest next update: Sun 24 May 2026 12:01:22 +0000
Files and hashes: 1: fd9396OwfyvmAzKyBx3VzGYGcUo.roa (hash: YCYApcDvzt3cYu0nRrcnf8eRckIYfSGxjh0WqkacoII=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: OzGWHTF8D/AvJwNjlMEPb2T4TTfYUkP814DLKMdLp2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:b6:22:50:a6:a1:d4:18:10:32:4d:d4:71:48:65:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: May 23 12:01:22 2026 GMT
Not After : May 24 12:01:22 2026 GMT
Subject: CN=b2896861629fcd4035cf682d7d14d6edf08c913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:0f:38:86:f4:05:d2:92:b7:b3:30:72:b4:
90:c4:01:ca:d9:09:7b:02:c4:3c:e8:b3:8f:ef:f0:
ce:ac:3d:ce:1f:4d:5d:eb:31:3b:e7:4c:94:89:81:
41:41:4d:c7:20:c1:9f:18:1e:82:8a:c4:43:62:c3:
eb:1e:4b:eb:1e:ae:60:37:2a:d6:c1:ac:1b:f1:46:
f7:45:f3:38:64:c1:51:90:7c:da:0f:04:93:44:48:
38:1b:92:99:3e:dc:8a:73:c6:10:2e:f3:9e:08:e4:
fd:ea:fc:9e:53:07:a0:16:f9:fd:9c:87:59:23:a7:
79:b1:3a:bf:97:1b:0b:5f:6f:87:ca:0e:65:20:19:
af:ef:ec:c7:34:cb:05:a8:4d:df:c8:1e:b5:78:1b:
dc:91:0c:18:cc:76:38:7f:16:1a:ee:d6:dc:0e:84:
32:56:a4:fe:a2:ff:62:32:e5:ee:34:1f:39:28:ce:
f3:56:7f:59:1a:c3:d7:4c:95:08:e9:eb:10:9c:77:
ab:02:57:36:26:ef:7c:08:49:0a:79:08:a4:9b:49:
dc:3c:97:11:66:fe:98:06:fa:b1:48:81:72:ad:d7:
6b:09:90:3d:29:f6:8a:02:0f:0a:33:37:6c:38:63:
0e:c0:ff:89:77:f8:65:84:84:e4:cf:0c:7c:07:37:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:68:61:62:9F:CD:40:35:CF:68:2D:7D:14:D6:ED:F0:8C:91:3F
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cf:8b:c4:e4:ae:82:d0:a4:25:65:da:50:ae:03:e9:03:66:
12:5c:33:e0:02:a5:c1:f4:f8:2d:7a:a6:42:9b:d2:19:72:55:
b2:d7:ed:9b:0e:ce:5e:3f:b4:13:04:d6:aa:3a:f0:0b:f7:de:
c3:1f:f2:51:0c:83:17:f1:54:e0:8f:e3:a7:ac:93:77:81:d3:
dd:b6:1c:2b:fe:00:f3:fd:77:05:2f:e1:58:be:07:04:c6:5d:
92:15:15:8e:9e:df:72:d9:2e:2a:d3:42:db:df:6b:fe:08:7a:
ea:3a:1b:df:94:1f:83:34:11:10:c6:bd:35:2c:ff:67:cc:64:
81:05:77:12:52:c8:b8:ef:83:66:6f:56:e7:64:85:ac:fc:53:
b5:d0:c0:43:9f:01:64:53:92:f9:7a:52:23:44:b4:e1:3f:b3:
76:58:c4:a3:42:63:31:fe:de:85:f7:5b:80:d7:2f:e7:38:fa:
f1:23:af:bd:00:37:e0:25:b7:83:31:23:3a:af:68:ac:12:cd:
3e:7d:6e:df:bb:a2:aa:aa:d7:11:39:1e:99:1d:60:89:af:ce:
42:2e:6a:88:48:8a:f9:7e:10:53:0f:4c:c5:95:0c:be:71:ee:
f9:54:04:c5:63:73:b4:e9:ed:42:70:a6:ad:06:6b:a4:10:e4:
79:85:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:10:50 2026 by rpki-client