Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: sGIxonJcu/6pWnd9YLiaVkHD45t2Ui3K4iEA56uZEow=
Subject key identifier: ED:0B:9C:25:53:23:11:13:CF:5E:C3:0E:9B:D0:24:91:95:3D:0F:BB
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019CAD9041F0C8B10BD5A34C2221A235AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 08:00:38 +0000
Manifest this update: Mon 02 Mar 2026 08:00:38 +0000
Manifest next update: Tue 03 Mar 2026 08:00:38 +0000
Files and hashes: 1: S2ft3Hju7eljRd19SiIzVso1Px0.roa (hash: 1n+Z/NtsvIHrdvPzT0sHZqEc6avxWfJC7XJpS/clIcs=)
2: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (hash: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: 9doMn/anazS7b7Me+iboRM4UK+tUHf/PhcuGQJUgvag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:41:f0:c8:b1:0b:d5:a3:4c:22:21:a2:35:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Mar 2 08:00:38 2026 GMT
Not After : Mar 3 08:00:38 2026 GMT
Subject: CN=ed0b9c2553231113cf5ec30e9bd02491953d0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:a9:43:a9:25:25:93:0c:5a:28:c4:bc:48:
01:76:cc:60:98:df:a9:b5:fb:bb:73:f2:b8:e3:57:
2b:c4:30:3e:c3:fd:23:0c:97:da:bf:65:d6:7f:46:
58:d8:42:1d:45:fc:1b:fa:54:84:db:f6:a7:dc:db:
03:8d:52:09:9f:c5:10:a7:2e:e8:f0:97:6f:b0:66:
c6:4b:5b:06:83:e3:13:b9:cb:f9:46:03:22:2c:fd:
d3:2e:39:1b:36:2d:16:5d:1a:c7:e7:4b:fd:c4:34:
63:8a:5b:12:32:d8:1a:3a:c4:7e:30:24:bc:60:28:
e9:77:90:ed:fd:76:06:cc:16:7d:44:2d:7c:9c:a7:
40:ac:0d:67:b9:c9:cc:7c:af:7e:02:f9:e1:b6:68:
43:09:6e:4c:50:29:1d:c8:0f:47:f2:9e:09:d6:6b:
e2:a9:af:d4:c2:0f:2d:98:22:29:4f:13:15:ef:31:
a8:2f:20:d1:5b:bb:37:b0:49:77:0d:ec:15:fc:2a:
50:5b:ae:5c:20:a5:67:9f:9a:dc:72:43:bc:42:84:
83:04:e5:ec:0a:d5:c7:cb:f4:ac:8f:f4:53:ce:28:
96:25:f9:3c:b0:92:cf:3c:3e:22:68:8b:16:af:61:
75:8b:ee:8a:b3:1f:d9:d5:80:50:09:bf:ee:b2:d8:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:9C:25:53:23:11:13:CF:5E:C3:0E:9B:D0:24:91:95:3D:0F:BB
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:ae:cd:c0:71:89:44:79:31:34:69:f2:6e:04:ee:d6:81:
b6:0f:0d:05:1f:e0:88:81:28:94:4d:5a:ef:88:6a:9e:3a:e9:
4f:57:c7:2c:33:07:82:41:28:45:f8:0f:1f:28:d0:57:30:10:
be:1f:71:a3:2c:a4:22:de:3c:ac:31:47:a1:92:81:f2:2c:c9:
17:d4:23:2e:fd:ed:ca:53:39:78:60:be:e7:1a:d8:29:e9:35:
49:57:28:50:ed:e7:8a:3f:0b:8d:0e:ab:83:57:64:da:35:ee:
9e:09:3d:df:4a:45:95:0f:0c:bd:ed:70:81:8a:62:03:de:09:
63:dc:0a:07:a5:2e:52:fe:d2:fd:bf:00:ae:53:2d:f8:3e:c7:
46:bb:2f:7f:40:87:c9:9f:29:ba:25:84:9b:1f:95:ba:80:26:
19:17:66:b2:66:50:f1:2c:ef:83:60:81:18:b0:71:75:3b:0b:
13:d6:a1:20:c0:ac:e9:ce:0d:f0:4b:79:3c:de:c7:23:df:cf:
9d:55:26:0c:cc:e6:88:d1:6b:fa:fc:f2:8f:81:fb:c1:ec:29:
9a:22:ac:a7:cd:2e:bb:9c:89:c7:34:02:24:84:e7:99:80:19:
89:cd:d5:ec:00:99:cb:ab:59:e7:82:3d:25:d9:bd:d9:a9:8c:
53:db:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:22 2026 by rpki-client