Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: /8QX2Tf1aVROB8DHKsb7w9UA+zMZ7ZpQSi6A/cpXBdQ=
Subject key identifier: 6C:EF:0C:7D:83:E3:30:86:61:AB:42:B1:1E:DB:80:E0:D0:45:58:F3
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019D98868E273BCD2CEE9D5F264A8F795778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 135D
Signing time: Thu 16 Apr 2026 23:00:48 +0000
Manifest this update: Thu 16 Apr 2026 23:00:48 +0000
Manifest next update: Fri 17 Apr 2026 23:00:48 +0000
Files and hashes: 1: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (hash: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: A7AwAzJs3Akjt4gobYJYbKHUyPaGJ1wXW2hJoU8lMQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:8e:27:3b:cd:2c:ee:9d:5f:26:4a:8f:79:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Apr 16 23:00:48 2026 GMT
Not After : Apr 17 23:00:48 2026 GMT
Subject: CN=6cef0c7d83e3308661ab42b11edb80e0d04558f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:5b:01:cc:7e:1f:1c:3c:00:5c:b2:8e:dd:
af:61:4b:5f:f3:ba:5d:4b:bc:af:44:65:f3:26:dc:
8b:ed:8a:f3:a2:6a:f8:2a:fc:0f:bb:2c:ac:7b:b1:
ef:e9:91:09:eb:3f:cf:b3:87:d2:52:19:59:e6:9e:
2f:c1:3c:e6:54:88:98:6f:06:57:fc:35:81:fc:e7:
9c:ce:6b:0c:31:e7:f4:89:9f:8a:e5:32:1a:80:c9:
b8:a2:75:24:ed:a6:dc:c7:2a:7a:49:0b:79:29:bb:
76:34:e3:22:b3:63:08:eb:45:29:e8:fe:4c:49:9a:
90:d8:d5:18:02:9c:8d:44:5e:a7:72:91:7f:0d:00:
c3:da:b2:83:17:01:74:e9:9e:a9:77:23:2f:62:4d:
f0:e0:8b:76:2c:91:20:f2:3f:ad:c8:0d:c3:04:d6:
1a:75:59:b0:20:a5:bf:e4:05:41:04:31:f5:12:dc:
42:11:9e:26:d7:b6:57:36:a1:86:c7:3c:b8:c4:88:
f2:88:df:3c:eb:e6:ba:22:41:0d:f5:bd:c1:b3:3f:
ec:49:6d:7a:8d:ce:eb:ca:f4:b0:0d:e4:cd:e6:93:
57:c4:04:90:09:8e:d3:b8:bd:f8:bf:d9:6a:f9:70:
c9:63:1d:30:cb:7d:f5:1e:ac:83:68:a9:21:5b:1e:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:0C:7D:83:E3:30:86:61:AB:42:B1:1E:DB:80:E0:D0:45:58:F3
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:00:4a:9e:e3:f5:dc:42:ab:98:df:48:ed:ed:5d:0c:6b:
0f:9d:32:fb:ff:ea:3d:0d:53:b8:65:6e:e0:d8:e8:ab:ff:08:
1d:ee:44:f7:73:ac:e4:59:65:06:68:ff:d9:d8:53:ea:46:9f:
eb:50:fd:9a:fc:82:fd:de:d5:9a:48:c5:fc:4b:ba:2f:c0:8b:
70:1f:4a:13:ec:32:8f:42:78:40:e7:c4:fe:4f:fb:0b:b4:99:
40:93:9c:14:dd:4d:81:9a:9c:cd:f1:e1:04:a3:f7:6d:77:ce:
06:18:a2:0a:2f:9f:09:d6:ac:9e:64:b0:a0:da:f9:3b:65:e0:
42:24:98:63:c1:8b:ca:f9:6e:f2:02:09:f1:ec:9a:29:3a:04:
36:09:ff:ab:ad:22:2d:c7:be:81:d4:0d:30:b5:c8:81:39:b9:
e1:b2:f2:e1:c8:9a:4e:5d:fb:d4:05:8d:97:9f:e1:3c:f0:86:
20:41:8e:82:5c:41:1c:85:88:d6:be:eb:41:eb:dc:67:eb:1d:
17:c6:0a:06:d2:6b:ec:d7:46:2f:1a:be:fc:77:05:89:fa:61:
7e:fd:b9:23:65:42:b5:86:d6:54:69:7a:9b:f4:1b:77:11:3f:
03:21:fe:76:c9:ef:96:b9:6c:3d:bd:23:e9:96:72:e8:bb:0e:
83:7d:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:42 2026 by rpki-client