Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: 65vq4Fpw8bDEVbl3Plh946MNNybyo2t4ShfKFql5TqY=
Subject key identifier: 72:E4:9F:0A:D2:E2:36:A6:20:13:BE:DE:B8:7E:02:44:EF:33:BE:D4
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019CAC0FBDA803D60C13ECF2901EEA3C43F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 14E9
Signing time: Mon 02 Mar 2026 01:00:38 +0000
Manifest this update: Mon 02 Mar 2026 01:00:38 +0000
Manifest next update: Tue 03 Mar 2026 01:00:38 +0000
Files and hashes: 1: Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa (hash: xscBDT6c6gkdHFrRsZjyluPSGQ6QR97y0pWD2imFtVE=)
2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: pxEbQTUb+CAHmG+IWvB+GUHuMcrnsXzuU79OJqEqhGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:bd:a8:03:d6:0c:13:ec:f2:90:1e:ea:3c:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Mar 2 01:00:38 2026 GMT
Not After : Mar 3 01:00:38 2026 GMT
Subject: CN=72e49f0ad2e236a62013bedeb87e0244ef33bed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:05:f1:8c:50:50:81:aa:78:35:cc:48:c7:
14:75:9e:f3:81:a2:66:cf:59:14:26:1f:aa:d6:ab:
e7:5f:79:a5:92:45:30:9f:37:ba:17:87:8b:c0:3a:
51:0e:a9:eb:a1:0f:9e:c2:a2:cf:02:48:51:d5:64:
40:76:29:1a:43:39:9c:9e:be:8e:f5:53:b2:8a:40:
30:13:0f:01:c8:35:66:5d:3f:ae:66:24:b1:f6:ff:
f2:cc:d7:5a:af:4d:e1:50:d9:eb:ed:ef:c8:5a:23:
f8:9c:c6:e7:b3:ad:9c:47:39:54:11:c4:58:d4:25:
e3:4d:79:6d:eb:25:b3:3b:51:62:b3:1d:83:87:d8:
23:74:ec:a5:43:4a:46:ce:85:3a:b1:fd:46:f1:ca:
a8:cf:88:c6:7f:b2:35:f9:e9:6d:e2:8d:70:bd:f4:
40:23:3f:73:52:56:74:57:58:9a:e9:b0:c6:c7:5c:
46:7f:81:89:26:02:27:a1:43:48:8f:68:31:22:75:
9c:a2:5e:f2:46:14:15:30:2d:2d:d8:01:ab:3e:7c:
b3:70:cd:60:8e:b9:31:cf:4e:8d:13:76:7c:56:ee:
c5:7b:67:ad:40:ac:f8:4c:03:e4:97:86:a7:87:22:
ad:88:ea:7d:9d:34:68:76:16:d6:a3:0b:ef:9a:90:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:9F:0A:D2:E2:36:A6:20:13:BE:DE:B8:7E:02:44:EF:33:BE:D4
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:46:e0:4e:5e:08:67:de:a0:1c:1f:f8:a0:d2:b2:df:b0:
60:3f:8a:fd:d3:77:f3:55:96:3a:6f:60:59:dd:61:86:75:ac:
85:71:b9:49:45:e8:e4:59:dd:23:f0:f4:53:04:f5:fa:7a:76:
84:c9:a5:a0:74:8c:9d:05:65:7b:93:f6:d9:19:6a:11:cb:bd:
55:1f:d7:c0:c8:3f:e9:53:f8:85:cf:ba:01:76:58:8b:6e:d9:
ca:a8:16:cd:87:d8:7f:dd:e5:6e:32:c5:eb:bf:b8:e9:1e:75:
18:e1:78:f0:51:08:28:0d:e0:54:95:db:d3:f7:85:24:fb:7b:
c0:79:73:8e:ae:1f:3b:a3:2d:85:2b:c8:d7:d5:9b:1f:49:c9:
a7:f4:74:40:08:58:85:ea:33:77:8d:c3:5b:98:dd:71:df:09:
c8:26:4d:c4:76:88:3b:11:31:84:fc:6a:59:0d:9f:02:80:86:
ff:7d:bd:f3:a0:f1:14:fa:fc:53:1e:0a:ee:15:68:17:5d:8a:
a4:05:57:fb:e6:01:f8:48:71:21:27:8e:11:3e:1e:4e:19:19:
f5:01:15:f0:3c:b0:c2:50:96:82:df:81:f1:18:77:bf:12:6e:
a1:66:11:d3:5b:be:dd:12:c7:ae:ee:43:b8:1d:5d:33:62:d2:
bb:26:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:59 2026 by rpki-client