Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: +z7swbJQJkMitrhz+AS85r3WwpeIblhkAzi12DTusEM=
Subject key identifier: 25:2B:BA:E4:A8:56:FE:D3:72:1D:50:D5:61:AC:59:C2:8F:F4:6C:01
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019CACEBA803C6FC9259099CA4FC9934882D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 12E3
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (hash: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: +Cl2fbebYNc3Vn/uETmOC+2x8DCa6C+YhGSXKpB7qVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a8:03:c6:fc:92:59:09:9c:a4:fc:99:34:88:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=252bbae4a856fed3721d50d561ac59c28ff46c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:67:48:8f:78:4a:6e:f9:ea:76:af:02:3e:
25:6c:60:34:58:67:73:df:45:db:c4:69:21:24:35:
7d:55:08:87:de:ae:8e:9d:78:ee:3f:22:20:3a:c2:
bd:cd:28:e4:2c:16:cc:62:a3:a8:16:73:2f:4f:ea:
20:c1:75:a3:b1:96:a6:c9:00:b7:2d:fe:62:27:e8:
b3:4b:5c:2e:55:09:8d:a5:cf:8a:fc:7f:71:62:93:
86:b8:ca:b8:04:5d:81:9d:b4:e0:2a:c1:37:d3:b5:
0e:b0:71:e8:42:38:7d:09:2d:03:68:24:89:8c:5a:
50:a2:d3:b5:1d:b3:bb:68:cc:82:16:d3:78:5b:46:
eb:b1:ea:cd:1f:eb:56:5f:4e:88:7d:32:9f:3f:cb:
a7:17:65:40:d3:a5:ef:62:30:09:a7:e6:cb:f1:e2:
1c:66:cb:2f:41:ad:95:65:a0:e3:12:8a:f3:fb:03:
b6:14:24:ae:31:1f:65:1c:dc:b6:8f:30:5f:42:03:
c8:55:98:06:0f:69:e0:e4:65:dd:d2:2c:93:68:a3:
fc:c7:02:98:94:e7:f0:da:c5:51:b9:28:3f:31:c6:
35:fa:62:19:65:36:81:0f:81:ab:27:f8:b2:9a:e0:
6e:fe:c8:f5:69:55:cf:30:f5:23:2c:42:02:2d:e6:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:BA:E4:A8:56:FE:D3:72:1D:50:D5:61:AC:59:C2:8F:F4:6C:01
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f9:0f:cf:78:6a:4a:77:a0:8f:81:ef:77:4f:bc:eb:b9:16:
b2:ee:48:de:4c:f3:4c:49:1b:0d:50:b4:f2:c3:5a:d4:da:73:
e1:61:de:f2:ab:33:0e:e3:cf:b4:2d:e6:2b:fa:f9:7d:57:02:
87:a6:5f:67:37:f9:f3:18:a4:78:4f:a0:89:60:8d:84:62:88:
9c:26:01:c5:13:53:91:d5:c7:8c:15:aa:11:02:11:7b:f9:30:
f5:cc:e0:f7:f9:70:c2:a1:36:db:7f:43:27:f1:6e:a5:34:83:
42:f2:94:a7:52:75:7e:81:1e:69:90:ad:8e:d1:50:06:c3:42:
46:2a:8b:10:18:ad:90:e6:58:28:9d:8b:74:8f:e8:42:04:f8:
b7:ce:c7:7a:cf:bc:ce:fe:45:50:03:a5:65:3f:03:70:42:16:
42:33:f3:cd:e0:6f:9b:b2:8c:69:a0:30:a7:23:e6:01:36:45:
98:47:7c:aa:87:9a:be:13:00:6f:91:ad:91:31:d0:34:24:2a:
66:d8:54:9c:fd:33:75:bd:7e:6d:11:ca:43:31:29:08:87:80:
d1:17:ca:37:07:f8:85:8f:6c:e8:19:7c:6c:a3:49:cd:b9:73:
e6:3a:4d:f9:55:89:10:c3:74:4c:04:f8:f0:e7:14:3a:a3:18:
21:4a:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:27 2026 by rpki-client