Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: JjCsAAuE9XVOk3g+FV3SX166XyU5067+RHQbyOXlox8=
Subject key identifier: 93:6C:43:AE:6C:F3:8C:FA:79:12:2A:52:92:68:4D:22:43:72:60:4B
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019D39E5D59987BB5940DF19785619A723A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 132C
Signing time: Sun 29 Mar 2026 14:00:56 +0000
Manifest this update: Sun 29 Mar 2026 14:00:56 +0000
Manifest next update: Mon 30 Mar 2026 14:00:56 +0000
Files and hashes: 1: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (hash: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: zLNXEsveXtat4S8W4YlCuHW+kVrvveXABi0HSzHbUa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d5:99:87:bb:59:40:df:19:78:56:19:a7:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Mar 29 14:00:56 2026 GMT
Not After : Mar 30 14:00:56 2026 GMT
Subject: CN=936c43ae6cf38cfa79122a5292684d224372604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:8b:cf:eb:c1:87:6a:0f:59:36:34:ab:e0:
4f:e2:ec:71:fb:21:b8:dc:99:d8:1c:fd:ae:6f:8d:
50:9c:e9:b9:57:32:03:79:cc:ac:ef:61:78:d6:e8:
7d:e8:45:21:19:c8:24:4d:08:2a:85:5a:4e:9a:b1:
37:aa:1d:52:04:bf:be:04:51:00:71:21:dc:65:83:
8e:8b:1a:31:a5:88:68:0b:f2:19:0b:eb:60:c6:29:
d9:bd:ec:38:1a:ac:79:a3:06:86:60:ab:a6:ee:38:
60:d5:f8:d6:37:df:5c:59:0c:7d:25:5e:f7:8b:93:
00:37:de:0c:3f:7d:b2:d9:b9:35:68:c1:4c:0b:e3:
37:b2:ee:54:e9:d3:96:4e:34:ac:13:e6:34:7a:71:
ef:24:2a:c1:00:61:5c:b2:e4:58:18:9f:0d:c7:b9:
03:52:bf:87:76:c4:12:47:f0:65:d3:69:c8:56:81:
2a:ee:04:f0:2d:1b:49:f6:22:c2:cf:59:64:bb:74:
13:47:ef:7a:f1:b6:62:50:2e:eb:d6:6e:d2:c1:37:
63:ef:50:1d:f3:58:4a:67:70:05:6e:f8:79:6d:a7:
97:3b:f2:f2:2e:da:4a:d1:ff:6e:da:7f:78:94:38:
1b:32:38:d6:0b:f5:85:c4:15:a2:3e:99:9d:91:32:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:43:AE:6C:F3:8C:FA:79:12:2A:52:92:68:4D:22:43:72:60:4B
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:11:cd:5f:00:ce:51:11:fa:9b:35:6d:fc:99:ea:58:ad:
83:46:93:a9:a5:a9:1f:30:dc:40:95:d5:00:5a:0a:b6:8c:cf:
a6:e6:b3:c5:0a:78:f8:80:80:91:ec:04:2d:e0:cc:11:45:8a:
0e:6d:8c:29:ae:48:ed:e5:39:b1:5d:be:ee:b5:20:63:0c:ab:
0e:8e:11:81:29:4e:ff:4d:af:27:f0:aa:e0:84:48:11:2c:39:
79:67:00:96:f7:d2:7d:6a:96:44:cc:c5:76:1d:72:3b:62:24:
36:99:09:b5:ac:31:05:dc:25:93:34:74:44:b4:92:37:16:5a:
9f:93:c1:59:53:d0:37:c0:5e:94:86:a5:80:df:be:53:d6:be:
6b:7d:cb:74:dc:b8:77:e2:b9:85:66:93:60:d1:43:ef:2e:a9:
ed:a5:ca:26:0f:50:58:92:49:29:77:94:5a:9c:c6:fc:56:28:
e4:88:4d:ed:11:f5:25:58:e7:18:0f:36:04:aa:66:22:b8:47:
65:18:20:97:06:05:a5:0f:66:94:51:19:4c:c2:f1:40:8c:d1:
1d:9b:5d:82:8c:a4:ff:0c:11:4b:27:40:b8:17:99:59:a4:18:
f8:71:dc:03:b2:9b:c5:42:9b:aa:a4:98:7c:a4:0d:e4:78:d9:
48:bb:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:55 2026 by rpki-client