Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: 0STSvxP678pMHvrHh1cwPisOnPrCL0ZhVpDU4mLIteA=
Subject key identifier: 5A:7B:A7:1D:7A:6C:10:E4:3A:6E:DB:A3:83:36:BE:DA:34:D3:84:87
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019EBF5AB21201EFEA789DF78F0B268A73C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:00:52 +0000
Manifest this update: Sat 13 Jun 2026 05:00:52 +0000
Manifest next update: Sun 14 Jun 2026 05:00:52 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: AKgG9FqRzrNKErRou63Yd1idahSw1EMntZTveO6MO74=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:b2:12:01:ef:ea:78:9d:f7:8f:0b:26:8a:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jun 13 05:00:52 2026 GMT
Not After : Jun 14 05:00:52 2026 GMT
Subject: CN=5a7ba71d7a6c10e43a6edba38336beda34d38487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:0d:ed:92:38:91:47:00:07:62:17:1b:47:
79:12:3b:be:fb:28:84:c8:f1:11:ea:47:13:51:f6:
72:ab:fa:29:9b:37:b8:98:20:52:8c:31:81:9b:af:
7b:a1:04:9b:56:e9:ec:ff:fb:96:f4:94:70:50:5e:
28:cc:ae:66:91:6f:b3:06:4c:5b:42:6e:0e:3a:6d:
d2:a2:cc:1b:8b:81:af:4c:31:a6:7f:2e:ed:2a:cd:
eb:67:5f:9b:5c:fd:b9:21:34:78:a1:b4:9a:dd:d4:
77:18:a2:11:cb:c1:a4:7a:1f:89:e8:1b:5f:42:96:
ca:6e:c6:31:38:b7:2b:9d:18:69:a7:1f:db:21:47:
89:f1:73:de:1f:2a:7c:22:64:9c:a1:a9:3b:e5:d3:
b4:b3:12:63:62:f5:90:59:b4:9d:c4:ed:ed:6d:e4:
ce:a5:21:61:55:eb:b4:cc:61:c8:bc:8a:65:18:9b:
7a:96:bf:8e:20:34:36:c0:4b:f6:9b:60:0c:f1:b7:
60:8e:8f:15:73:fa:9a:d3:dc:40:76:bd:98:ba:73:
c9:9b:37:de:1b:1c:98:95:78:0e:f3:c9:b1:b0:2a:
bb:80:e5:01:7b:8f:d7:d2:2e:63:39:2e:a7:97:87:
5f:35:a3:2c:95:a9:57:d4:6c:87:92:91:d0:71:bc:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:A7:1D:7A:6C:10:E4:3A:6E:DB:A3:83:36:BE:DA:34:D3:84:87
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:f2:db:c1:23:a8:76:bf:ff:5b:62:22:fa:82:27:a1:ce:
f2:cd:5b:db:83:f8:86:7c:ce:cc:6c:91:84:fe:cc:5a:d1:4d:
01:45:c3:6c:68:02:8c:e1:5c:33:77:a7:cd:d7:c9:cf:3b:5b:
d5:70:37:89:e9:9a:a2:e2:15:45:9c:4f:58:12:be:36:75:68:
da:ca:bf:49:7d:15:97:e4:69:de:8a:2e:fa:38:a3:59:6e:5b:
98:b9:e2:14:ad:23:37:5f:dc:b0:82:d6:0f:5e:de:36:7c:6a:
e4:cd:21:d0:f7:38:38:be:62:bf:ba:c7:89:9f:12:f0:38:b7:
9a:52:7d:69:d0:0f:e2:4f:07:62:76:23:d6:21:80:3d:0f:0f:
f2:cd:f5:4d:df:b9:00:4b:8d:68:b9:ff:02:1f:5b:3a:a7:bd:
e2:5f:9e:95:56:c1:29:26:4a:c1:69:d7:e5:45:79:82:86:fb:
8d:05:2d:4e:a3:63:79:28:c5:9d:bb:96:cf:a7:d9:ce:14:16:
e7:11:10:04:73:71:df:a5:0b:21:f6:24:aa:a1:93:e5:80:fc:
3a:e4:bf:d0:30:ef:88:b7:f8:6a:ed:73:bc:c5:1a:b0:b4:f6:
e1:7a:57:85:03:9c:0d:81:e6:0e:67:8d:ec:28:e5:d7:f5:13:
20:89:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:09 2026 by rpki-client