Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: lSZQyHD+VjHf+8dhvkmN3FHqG/72iPsFvAeC8cLm8aM=
Subject key identifier: B3:F0:63:FD:F4:55:E2:0B:1D:1B:1B:60:AF:52:20:AA:C9:25:8C:B0
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019EC1B69F42A9532EFFD0EFE34C6DD80E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 16:00:31 +0000
Manifest this update: Sat 13 Jun 2026 16:00:31 +0000
Manifest next update: Sun 14 Jun 2026 16:00:31 +0000
Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=)
2: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: xcZI36aeC0TeQvgl1y45kEOQOvH/SiNzdl58UVAzAic=)
4: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:9f:42:a9:53:2e:ff:d0:ef:e3:4c:6d:d8:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jun 13 16:00:31 2026 GMT
Not After : Jun 14 16:00:31 2026 GMT
Subject: CN=b3f063fdf455e20b1d1b1b60af5220aac9258cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:ff:32:e5:4a:55:30:21:07:4a:36:ba:2a:
e5:95:26:10:84:f1:9a:61:5c:91:72:55:02:9a:e5:
fa:38:44:57:e6:a5:55:b3:2f:93:25:51:88:6a:b3:
97:22:87:ce:98:2c:c2:48:be:0d:b3:a0:9b:1b:e9:
aa:39:4f:3a:2f:86:de:cf:c7:98:c7:53:75:f2:ee:
f0:8e:0f:72:5d:9e:ec:09:9a:10:5c:69:83:4c:44:
a7:1e:12:61:5a:a7:af:7e:a3:0f:b8:79:d7:1d:dd:
ae:8b:ca:55:e8:19:51:eb:9b:f4:de:31:b7:0d:ac:
56:1e:e4:40:b7:29:26:82:67:5d:38:44:dc:aa:a2:
c0:d8:df:7b:0c:e0:44:20:86:a5:e4:92:50:50:24:
9d:4b:8a:f5:18:43:c0:d8:76:04:3f:d8:23:2d:fd:
92:51:5e:9c:3f:49:b9:d1:0c:14:fa:0b:96:5a:fa:
ce:62:58:97:83:a6:08:70:d3:69:0b:91:9d:38:fc:
bc:5a:ed:b5:fb:27:42:d1:ef:f5:95:73:87:53:03:
6a:2a:8f:65:a2:ca:4e:ae:24:65:66:d9:87:87:2c:
61:f9:e9:60:26:c9:6e:51:64:94:3f:a1:90:51:ba:
9d:fe:11:37:be:f4:f8:9b:a4:77:2c:6f:2c:8f:b1:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:63:FD:F4:55:E2:0B:1D:1B:1B:60:AF:52:20:AA:C9:25:8C:B0
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:3e:e0:2c:7e:ac:45:e2:0a:88:45:83:75:c9:7a:7f:aa:
3a:d9:59:7f:32:36:db:67:88:ba:b8:25:56:18:04:34:5f:9b:
f6:73:5e:de:13:29:ee:62:1b:c8:4c:5b:75:0e:86:35:27:e8:
c6:b5:35:8e:33:29:dc:e9:a2:b3:37:7d:19:e9:a1:78:a4:29:
cc:1b:7c:4e:b8:b4:41:df:07:5b:dd:66:28:0c:87:4b:54:02:
e1:8e:bb:3e:74:4d:6b:a2:01:61:fb:f4:14:89:5c:6b:c8:de:
e2:b5:4b:e5:79:3e:a6:1e:f4:5e:78:7a:c2:f3:a3:1c:fb:85:
d1:92:ad:2c:9f:20:97:1f:da:0a:fa:98:52:5a:f7:4b:69:ec:
00:5f:5b:bb:37:42:39:46:3d:4c:44:b9:74:98:6a:f4:28:04:
4e:c5:24:74:31:3b:59:76:0d:be:0b:33:63:24:da:e0:91:f0:
c3:d2:8f:f6:ab:23:b2:a1:11:34:72:a9:5f:05:f8:f7:7d:de:
c0:95:2f:64:91:07:5d:2e:51:e6:cb:07:45:14:b3:a5:79:95:
24:99:65:19:c4:a0:36:f4:9e:46:8e:4d:d4:6c:89:ef:90:c0:
7d:47:8a:53:d5:10:e0:02:f0:15:e7:e0:82:b2:ca:1b:2a:f3:
8b:02:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:15 2026 by rpki-client