Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: nLgOKhW3GL/PQ3+aM0R6xGmxh986V7hgxubBLirO0Jc=
Subject key identifier: 47:2C:AD:07:C3:3C:D3:6A:1A:BB:50:E5:7E:C1:9A:05:A3:19:3F:A3
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01A0C8C693E953292293840579C98DB72859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 11:00:52 +0000
Manifest this update: Tue 22 Sep 2026 11:00:52 +0000
Manifest next update: Wed 23 Sep 2026 11:00:52 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: W5pCbDUFVe2gaHVlgfcos6MbAnflFNdnyqWiW29759w=)
2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:93:e9:53:29:22:93:84:05:79:c9:8d:b7:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Sep 22 11:00:52 2026 GMT
Not After : Sep 23 11:00:52 2026 GMT
Subject: CN=472cad07c33cd36a1abb50e57ec19a05a3193fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:54:99:9f:91:4e:10:16:0a:58:89:02:74:
e9:eb:96:52:dc:cc:ae:a3:1f:19:67:04:8a:4e:4e:
68:4b:95:62:cb:18:9b:4c:6d:1a:cf:7b:f0:3f:76:
b0:f5:c5:6f:62:ad:0a:73:84:1f:c2:f9:ed:48:d8:
39:4d:9a:5b:ce:55:6a:ee:68:af:9b:d1:50:e2:48:
3b:dd:04:12:a3:c9:99:3b:3c:4b:39:79:ab:17:51:
a6:56:f5:98:d1:c9:d1:24:6c:61:07:ef:ee:9b:52:
44:b8:0b:e0:43:23:06:3a:65:5a:20:ca:7b:f8:6e:
fb:01:d7:0b:f4:e1:1c:e0:89:aa:08:36:8d:1c:85:
c2:8e:a6:2a:f3:c4:60:7c:2e:73:2a:aa:74:5e:6c:
72:b7:ba:61:e2:9a:15:67:cb:16:cc:9a:4d:8c:12:
74:8d:89:4a:9e:02:df:cd:a1:50:7f:2b:6a:29:6c:
cf:73:ae:bd:5d:67:05:9e:b0:7e:81:0a:11:4c:ff:
65:4a:66:03:df:e3:0d:17:19:20:23:f2:bd:75:77:
36:22:7a:e6:f8:d2:4c:b0:b3:bb:37:c0:e1:96:e7:
2d:ac:55:73:08:62:e1:c2:ca:62:67:64:30:da:77:
1c:25:ef:5e:ef:2c:60:d3:6b:b5:16:8e:e5:0e:c1:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:AD:07:C3:3C:D3:6A:1A:BB:50:E5:7E:C1:9A:05:A3:19:3F:A3
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:86:c0:0b:39:6b:fa:f4:f8:cf:68:0a:b6:f0:38:59:fd:
a3:b7:c5:18:7e:ae:29:45:3f:96:58:bb:ed:91:e9:90:a3:6f:
42:37:0c:35:4d:8f:8f:f9:d6:ba:1b:07:24:63:9a:c8:c7:2b:
e3:d9:65:97:ec:c3:24:3b:36:30:58:f2:26:a5:f3:ed:87:75:
90:05:f2:4e:ce:80:a2:68:4e:c3:00:20:7f:71:69:be:c3:91:
62:13:af:93:cb:99:7a:ee:ad:fc:3b:31:52:a8:a2:39:b3:93:
14:26:ee:a0:51:9f:65:11:0b:3c:3f:62:d1:ef:b3:1e:3a:02:
ce:af:18:ec:ca:21:6c:2b:eb:16:b3:11:b4:62:e8:41:69:c0:
22:61:37:0e:2a:d4:c0:14:57:8d:bc:9b:70:ae:4d:9c:a0:1e:
8f:89:54:2d:28:64:ce:1e:3b:b8:75:e2:ab:3f:09:20:20:b9:
9f:f4:6c:bf:f5:b4:3e:c7:d0:09:88:13:b8:36:33:4a:94:bf:
f3:83:ae:59:df:41:6d:23:d5:9e:7f:8c:b4:7c:18:19:f8:3c:
7f:92:e0:1f:b1:88:98:72:d5:c9:5a:f1:00:a5:01:8c:28:51:
d7:3c:40:42:05:e6:9e:7a:85:b4:4f:f7:0c:09:7a:10:74:ad:
99:8d:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:34:58 2026 by rpki-client