Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: OvAZm14040RAwz18kBoo/npCaMwXPcAN32vQ7k5WLYo=
Subject key identifier: E4:D1:94:BC:F9:EE:2B:1C:75:6C:EC:47:FD:52:39:56:B2:78:AA:A8
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019D389C12A2FA0FC289F3E342533D711C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: S2ft3Hju7eljRd19SiIzVso1Px0.roa (hash: 1n+Z/NtsvIHrdvPzT0sHZqEc6avxWfJC7XJpS/clIcs=)
2: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (hash: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: 3RmTaz3oGLZvvt5juc02J7lXDwpJTaE6Cfd7W1W/TGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:12:a2:fa:0f:c2:89:f3:e3:42:53:3d:71:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=e4d194bcf9ee2b1c756cec47fd523956b278aaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:c7:24:8b:70:43:0c:f9:75:ef:96:ef:9b:
4e:85:f8:83:92:57:84:19:06:d2:61:58:f1:94:b9:
64:49:30:54:8c:64:bc:e6:10:86:5b:61:ff:7c:f1:
49:b4:40:d4:83:81:47:33:6c:13:cc:d0:6c:ff:2e:
f2:61:30:5c:7c:eb:2b:c9:b9:74:65:23:fa:7e:1b:
6e:1d:47:c3:62:4e:00:3b:d0:bd:ae:89:cd:62:0f:
2d:7b:59:86:79:18:98:f5:d4:cc:be:3d:30:0b:73:
b3:85:9c:f8:81:e9:ca:c4:35:f9:9b:a1:a9:ab:45:
31:af:77:03:a7:23:fd:2d:a1:b1:1f:8d:ff:7e:5c:
b6:d4:71:98:a2:df:91:81:d9:7b:93:75:e5:86:c0:
25:de:a2:e3:ab:da:ed:40:2a:bf:38:59:ad:3a:cb:
f6:31:93:6f:6c:11:3b:fc:c1:d6:7e:a4:50:86:93:
c5:53:27:4b:2c:d9:12:d5:d5:0d:ce:e5:f2:be:5e:
ad:6a:37:62:11:40:1c:6b:8c:a6:e9:e3:68:ee:46:
30:fa:33:f9:68:cc:21:94:5c:3a:04:46:a4:c8:df:
2d:8f:67:f8:f2:12:47:ee:4d:b5:0a:f0:18:93:60:
49:d5:67:4e:0c:4f:91:d9:d3:52:29:19:9a:88:b0:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:94:BC:F9:EE:2B:1C:75:6C:EC:47:FD:52:39:56:B2:78:AA:A8
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:a2:11:28:51:c3:05:f0:5b:4d:a6:d0:76:6a:b6:9d:5f:
08:32:30:74:71:74:31:9c:c3:0d:62:71:05:6b:91:da:99:c3:
7e:3c:5d:14:db:4b:0d:a7:6b:91:54:2b:a8:a2:2c:3b:de:b7:
6f:fa:99:f3:b9:f8:73:b0:eb:67:2f:18:56:a3:5a:f7:63:bf:
fd:27:32:73:f9:16:4e:9d:2b:38:ce:c0:1d:d1:e7:9f:5a:4e:
7e:45:90:be:56:94:7d:dd:a0:3e:2b:e3:dc:14:b0:8c:6f:67:
c7:6c:a6:e8:38:cf:45:c7:2d:f9:b9:9b:c3:93:87:ea:52:fe:
16:fc:ec:63:c5:9a:51:33:04:5b:8c:0b:ad:ee:0b:ff:c6:6a:
b2:2e:88:12:01:98:1b:98:b0:54:4a:d2:4a:eb:9e:a7:dc:79:
37:62:ce:21:42:e4:12:d1:25:44:d1:4b:20:21:89:80:82:ff:
71:41:d1:63:8f:bb:69:ee:65:ad:34:cf:af:c9:ca:c0:90:19:
f7:31:ef:aa:ad:4e:bc:a4:56:52:b2:c6:01:49:30:da:32:10:
39:8d:93:0b:35:42:3c:ed:2b:be:c5:1e:de:4d:55:5a:26:f0:
fe:37:5d:93:3d:88:2e:03:9f:9e:0a:c0:b0:31:80:39:99:20:
11:ea:f7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBKi+g/CifPjQlM9cRwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
EyhlNGQxOTRiY2Y5ZWUyYjFjNzU2Y2VjNDdmZDUyMzk1NmIyNzhhYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszfHJItwQwz5de+W75tOhfiDkleE
GQbSYVjxlLlkSTBUjGS85hCGW2H/fPFJtEDUg4FHM2wTzNBs/y7yYTBcfOsrybl0
ZSP6fhtuHUfDYk4AO9C9ronNYg8te1mGeRiY9dTMvj0wC3OzhZz4genKxDX5m6Gp
q0Uxr3cDpyP9LaGxH43/fly21HGYot+Rgdl7k3XlhsAl3qLjq9rtQCq/OFmtOsv2
MZNvbBE7/MHWfqRQhpPFUydLLNkS1dUNzuXyvl6tajdiEUAca4ym6eNo7kYw+jP5
aMwhlFw6BEakyN8tj2f48hJH7k21CvAYk2BJ1WdODE+R2dNSKRmaiLDovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTRlLz57iscdWzsR/1SOVayeKqoMB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoqiEShR
wwXwW02m0HZqtp1fCDIwdHF0MZzDDWJxBWuR2pnDfjxdFNtLDadrkVQrqKIsO963
b/qZ87n4c7DrZy8YVqNa92O//Scyc/kWTp0rOM7AHdHnn1pOfkWQvlaUfd2gPivj
3BSwjG9nx2ym6DjPRcct+bmbw5OH6lL+FvzsY8WaUTMEW4wLre4L/8Zqsi6IEgGY
G5iwVErSSuuep9x5N2LOIULkEtElRNFLICGJgIL/cUHRY4+7ae5lrTTPr8nKwJAZ
9zHvqq1OvKRWUrLGAUkw2jIQOY2TCzVCPO0rvsUe3k1VWibw/jddkz2ILgOfngrA
sDGAOZkgEer3iQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client