Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: RnP6mpLluV5+uaKd/swicOsN7ZZCTP2BpSwJiFV466M=
Subject key identifier: 09:2F:94:88:73:6E:20:74:FB:93:D5:A7:4D:6A:6F:E7:9D:BB:F9:70
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019D9999357BC214FF1D67D3395714415E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 1564
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa (hash: xscBDT6c6gkdHFrRsZjyluPSGQ6QR97y0pWD2imFtVE=)
2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: svYeHW0iOg59YzgK4vneWHBQQTRSSvMs4ZFucHLL870=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:35:7b:c2:14:ff:1d:67:d3:39:57:14:41:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=092f9488736e2074fb93d5a74d6a6fe79dbbf970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:2b:5f:c9:fd:27:43:b5:9f:40:16:e3:1f:
4b:2c:88:4d:5f:a0:ae:00:1f:08:12:7c:59:67:29:
b3:9a:ee:73:43:84:91:94:47:85:c5:24:69:f0:20:
70:af:94:15:1e:34:bd:29:d1:eb:85:03:94:f1:78:
e7:ec:9c:fb:8f:c2:5a:6f:7d:7f:97:66:fd:c8:71:
14:33:a2:cc:6b:43:d6:a1:95:a9:cb:ad:47:09:c5:
f0:2a:e7:a6:09:ad:69:76:7f:06:6a:28:01:c9:b7:
a5:44:07:b9:06:f3:c4:36:d4:62:f5:44:89:0f:b9:
12:ba:27:87:2c:44:bc:ee:d9:56:42:0e:ef:2e:18:
b7:f1:04:7e:0a:24:71:01:8c:13:8e:71:42:80:5a:
79:f1:de:e0:26:ec:f6:3a:07:3a:b4:e7:53:95:f8:
55:34:86:9b:79:33:ff:a9:ac:b0:f1:1b:1b:b7:8c:
26:12:d8:3d:a4:dc:ed:85:d5:70:be:2e:0c:2e:1d:
7f:ca:16:eb:f1:bd:a5:cd:1b:75:10:03:16:15:3e:
4d:10:69:4c:e1:e7:48:3c:75:14:61:d4:ff:2c:90:
ad:9d:0e:9b:73:8e:3e:41:d6:18:61:9b:19:69:67:
26:73:1e:01:b3:cc:f3:4d:7b:c4:fa:d9:64:64:d9:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:94:88:73:6E:20:74:FB:93:D5:A7:4D:6A:6F:E7:9D:BB:F9:70
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:c1:ba:87:8a:f6:4e:07:02:df:ca:93:61:4f:7f:39:a5:
35:84:b4:fe:2f:6d:98:64:58:bf:65:7c:8b:07:3a:94:5b:df:
b0:5f:56:f5:cf:79:d6:98:03:79:e5:0d:84:c2:83:17:26:63:
97:fe:4b:12:1d:70:a2:62:14:4b:48:ef:ad:1b:ae:9e:d2:4d:
9c:e6:b6:14:7a:1e:c7:b0:cf:ce:0f:05:26:c3:0a:f7:dc:8f:
e4:0e:a9:e8:65:4c:47:5f:8c:22:9c:22:45:34:5d:ae:e7:6b:
59:bd:10:46:fa:39:d1:32:66:02:4d:97:f5:53:20:46:c2:ba:
09:c5:40:5e:70:80:6c:cd:1a:17:f9:31:94:6a:81:38:47:0c:
ef:a7:ee:a1:2a:8a:c2:f5:bf:e3:c4:d5:2d:0b:16:9e:33:5d:
f2:33:76:db:f5:00:62:8c:5b:c4:fe:63:09:77:57:95:10:5f:
36:57:74:5e:be:d8:22:4c:78:f3:47:db:fb:0e:e7:e1:1e:d2:
75:a8:3e:c9:60:ff:c1:83:fb:50:92:99:9c:a9:36:6f:8d:6f:
27:4c:7d:ba:f6:1b:0f:6e:d2:e9:fd:1a:04:92:e9:81:f3:c1:
04:81:e9:11:e3:52:85:bc:ab:5b:78:3d:1f:7f:96:53:2d:b9:
65:1f:45:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmTV7whT/HWfTOVcUQV46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTFlYWJhZmUyZGU3MDM4MjI3YTg1OTNhN2FjNWNjMzky
ZjM3NGUwHhcNMjYwNDE3MDQwMDQ3WhcNMjYwNDE4MDQwMDQ3WjAzMTEwLwYDVQQD
EygwOTJmOTQ4ODczNmUyMDc0ZmI5M2Q1YTc0ZDZhNmZlNzlkYmJmOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwrX8n9J0O1n0AW4x9LLIhNX6Cu
AB8IEnxZZymzmu5zQ4SRlEeFxSRp8CBwr5QVHjS9KdHrhQOU8Xjn7Jz7j8Jab31/
l2b9yHEUM6LMa0PWoZWpy61HCcXwKuemCa1pdn8GaigBybelRAe5BvPENtRi9USJ
D7kSuieHLES87tlWQg7vLhi38QR+CiRxAYwTjnFCgFp58d7gJuz2Ogc6tOdTlfhV
NIabeTP/qayw8Rsbt4wmEtg9pNzthdVwvi4MLh1/yhbr8b2lzRt1EAMWFT5NEGlM
4edIPHUUYdT/LJCtnQ6bc44+QdYYYZsZaWcmcx4Bs8zzTXvE+tlkZNmD7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkvlIhzbiB0+5PVp01qb+edu/lwMB8GA1UdIwQY
MBaAFKWh6rr+LecDgieoWTp6xcw5LzdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYt
NGVmMzk1MTRhYTQzLzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYtNGVmMzk1MTRhYTQz
LzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRzBuoeK
9k4HAt/Kk2FPfzmlNYS0/i9tmGRYv2V8iwc6lFvfsF9W9c951pgDeeUNhMKDFyZj
l/5LEh1womIUS0jvrRuuntJNnOa2FHoex7DPzg8FJsMK99yP5A6p6GVMR1+MIpwi
RTRdrudrWb0QRvo50TJmAk2X9VMgRsK6CcVAXnCAbM0aF/kxlGqBOEcM76fuoSqK
wvW/48TVLQsWnjNd8jN22/UAYoxbxP5jCXdXlRBfNld0Xr7YIkx480fb+w7n4R7S
dag+yWD/wYP7UJKZnKk2b41vJ0x9uvYbD27S6f0aBJLpgfPBBIHpEeNShbyrW3g9
H3+WUy25ZR9F1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:10 2026 by rpki-client