Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: 51b/LWQiuywFhBmmQTglcUmHYrelDf7RddJGUN1B21c=
Subject key identifier: C1:09:01:80:B9:23:A4:8F:66:4C:FC:D9:E7:5D:A0:DE:FD:51:B4:0B
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 01A131464665CE63E66B259017DD1DBD2614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 18:00:51 +0000
Manifest this update: Mon 12 Oct 2026 18:00:51 +0000
Manifest next update: Tue 13 Oct 2026 18:00:51 +0000
Files and hashes: 1: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
2: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (hash: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 0sy7huIQyulB60lNZmIyDy5nvtreimw9A5lzJFaxJsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:46:65:ce:63:e6:6b:25:90:17:dd:1d:bd:26:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Oct 12 18:00:51 2026 GMT
Not After : Oct 13 18:00:51 2026 GMT
Subject: CN=c1090180b923a48f664cfcd9e75da0defd51b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:b6:61:a5:8a:2a:89:0b:8e:1f:db:3e:71:
80:62:7a:7b:37:5c:fb:60:19:6b:46:8e:8e:e5:36:
40:8a:a1:00:8c:f1:6e:21:fb:54:bc:80:ff:f5:6b:
c9:33:32:5b:bd:b2:54:2c:85:bf:6f:3b:cd:a5:33:
24:7a:fd:7a:46:aa:c1:9c:03:f1:5f:fa:f2:64:43:
3e:84:5c:66:19:77:51:6c:9c:b7:21:4c:82:2e:d3:
7e:ab:a8:8a:6c:64:e4:ff:87:e2:56:cf:04:e3:4e:
06:40:b6:60:9c:9c:11:5c:f3:06:22:28:63:e2:a4:
08:a2:99:60:d2:60:83:2a:69:93:d8:50:05:98:57:
3e:f6:b5:c1:9b:31:2d:e6:aa:d3:48:ab:5d:0a:14:
40:12:9e:15:0e:8c:1d:3f:f8:83:e4:e8:d8:3c:20:
01:47:bf:da:2f:ed:37:17:59:27:4a:01:bb:4c:6e:
2f:fe:1f:50:72:27:5e:07:88:03:d2:28:5d:72:dd:
a2:ae:ed:a1:96:1b:38:1e:d8:ab:c7:18:12:03:09:
6f:b7:c7:10:99:5b:05:9e:ea:b8:12:eb:41:0d:74:
3e:97:03:7b:7c:8d:01:76:ac:57:03:b5:70:d0:48:
4c:6d:ed:3a:40:fe:d8:09:14:33:91:ad:9c:72:a9:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:01:80:B9:23:A4:8F:66:4C:FC:D9:E7:5D:A0:DE:FD:51:B4:0B
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:21:93:0f:c7:23:d1:69:b6:9d:3f:d0:a9:94:e4:4d:39:
6d:4c:15:48:6a:76:bc:9c:ba:2c:71:3f:6e:d7:fa:e4:3e:de:
05:c0:f3:59:c5:96:4c:71:34:39:de:52:af:aa:9e:bf:c0:a1:
99:03:d3:b4:81:b8:ec:ee:7d:17:62:d1:ad:30:28:9d:ef:43:
0a:0b:f7:bf:ee:1f:ce:f1:ea:7e:9c:3b:0f:48:95:a3:fa:54:
c3:d1:ab:41:38:d9:24:d2:3d:a1:24:5a:cb:ce:32:35:f7:4e:
f3:30:cf:cc:ee:70:02:a8:88:f1:36:68:2b:0a:21:36:92:f9:
2d:f1:03:23:5b:07:e1:da:67:79:2c:75:de:db:33:6c:33:8a:
d1:7a:a3:c5:5e:e8:4b:f0:c9:33:95:ad:19:ff:47:ac:be:b9:
86:4e:3a:28:1a:1d:f8:63:8e:18:e0:ef:79:ad:7f:50:f5:3e:
04:aa:17:eb:ab:e2:ea:39:9b:b9:6d:3a:0a:bf:cc:1b:79:28:
92:72:3d:d7:f8:4d:88:5a:9e:97:57:e4:9d:90:67:18:29:7f:
d4:40:0b:7d:c1:04:c2:a1:70:f0:f2:97:09:9d:9e:e1:8b:4a:
0e:bb:5e:3a:7e:85:44:c2:2b:24:04:b6:4c:ab:b3:16:1d:1d:
70:f8:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:35:34 2026 by rpki-client