Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: Osvmwx3z/GaIYYj92nZw7plYg6Kq7AuKmdhhQZGU9kw=
Subject key identifier: 76:5E:08:F0:26:B9:0F:24:A7:46:35:15:C8:F2:8C:43:42:01:DE:C8
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019D9B50E3C7F2973A16479225A3691D914D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0FC6
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: fd9396OwfyvmAzKyBx3VzGYGcUo.roa (hash: YCYApcDvzt3cYu0nRrcnf8eRckIYfSGxjh0WqkacoII=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: xduIvBiMxlPpxOfJyzNoyivFhmmADLKx5stxQHz7iZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e3:c7:f2:97:3a:16:47:92:25:a3:69:1d:91:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=765e08f026b90f24a7463515c8f28c434201dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:63:74:c3:5c:31:a2:8e:1b:b0:a5:4b:60:
cb:69:ad:c8:16:74:3d:ee:e6:9a:4b:ca:58:e5:25:
5f:1c:7c:14:20:e4:b0:d6:1a:f2:f8:58:1c:a1:8b:
ea:45:4b:1a:0a:be:eb:fa:02:c2:40:0b:95:29:f7:
4b:a2:74:9a:dd:2c:50:53:0a:cd:12:f4:71:22:dd:
ed:e5:f4:2a:15:83:ec:9c:dd:0b:32:10:e0:70:0a:
81:9e:4b:27:82:3f:a5:64:a1:08:69:f6:78:fc:9f:
ba:6e:f7:44:cc:22:c6:63:eb:59:9d:fb:c3:2f:e8:
6e:27:c7:fe:ca:ea:f1:1b:df:7d:43:3d:8d:0c:94:
03:b5:30:eb:32:51:fa:be:20:02:d9:1e:08:8f:a0:
7c:38:49:77:19:d4:44:28:79:ed:7e:53:38:ce:61:
b9:f4:b2:59:3c:91:a4:ea:68:4e:7a:d0:42:f0:89:
32:6b:09:23:46:3e:47:78:dd:d5:a9:96:33:fd:08:
4b:d3:a5:42:d9:0f:03:71:40:a8:4f:c2:12:c4:8d:
48:ee:81:18:69:37:bc:d8:ff:a0:33:e6:c2:d2:8f:
7a:2d:4b:ac:43:a0:39:f0:0b:58:48:5c:f6:e6:26:
0f:80:da:63:8d:98:28:06:9a:86:7e:4a:73:9d:6c:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:08:F0:26:B9:0F:24:A7:46:35:15:C8:F2:8C:43:42:01:DE:C8
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c8:11:3d:ab:46:76:53:a7:5c:21:1a:61:c2:38:70:cf:db:
b8:11:1e:46:de:44:9e:57:9b:68:a1:e3:30:7e:12:39:a1:a4:
71:d6:fa:f8:93:1d:f8:8b:9f:38:ad:97:7d:74:d4:fb:3e:e7:
e2:ff:21:35:84:13:09:86:e9:c7:83:1d:60:e6:43:4f:85:ca:
bc:38:d3:26:bb:bf:32:25:4f:77:93:7c:ea:cc:7e:ed:0b:15:
b7:98:58:0c:2d:90:de:8f:a6:dd:23:40:dd:58:0e:da:74:ff:
12:17:85:98:6b:01:14:8d:71:86:7e:80:c4:41:ba:2b:c0:29:
04:76:6b:2b:13:f1:a0:9e:86:a3:b2:eb:37:a3:f1:c5:e8:a9:
59:12:62:ee:90:95:23:22:2e:50:7d:45:85:8f:a9:14:10:1a:
5a:d1:b9:2d:ce:6e:15:a1:26:c4:81:db:66:60:d2:d2:b5:53:
9e:72:9b:72:1c:8c:4e:42:e4:8a:3e:cd:32:66:f5:c8:88:18:
1a:dc:02:ea:53:73:70:80:33:fa:2d:07:b3:43:c5:85:42:48:
7f:f1:cc:c9:46:29:53:e5:7a:c0:83:31:06:ba:b3:a4:9f:13:
14:77:e3:f9:df:13:2c:53:5c:6e:c6:8f:80:e3:cf:73:da:03:
0f:95:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:08 2026 by rpki-client