Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: y73KVeEz949qJzRbhVzQjKmj8ZqosSWVxNFDrVcQYXI=
Subject key identifier: 3B:E0:63:4C:CF:7A:2F:88:F3:74:42:46:CF:2B:92:C7:E5:91:D1:FA
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 019D99D0E8A50D448A7D55C2D2E03FADAEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 09AA
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa (hash: MINPErO1BGuqVLJnTV2HhR7juWWefaDwKRV1A+XQOf8=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: EbfqUJ4Evb90xLZzncVQYanbMmht+ZCsXYsLKoQkWxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e8:a5:0d:44:8a:7d:55:c2:d2:e0:3f:ad:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=3be0634ccf7a2f88f3744246cf2b92c7e591d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:a8:7d:27:49:89:d1:ac:00:83:fc:65:cc:
c3:5b:cd:ac:c3:a9:c2:8a:fb:d3:52:a9:3e:54:d2:
41:22:b7:99:ae:f9:20:11:89:89:2c:4e:69:d3:cc:
6f:7d:d0:e8:76:9e:62:d1:32:8e:89:fc:bc:56:4b:
30:79:8f:96:5a:9d:2c:1f:12:72:0a:98:ae:70:e7:
ec:ea:65:80:97:c3:17:03:22:c0:06:60:5f:04:de:
b8:cb:08:2d:47:01:5e:57:98:9b:20:c8:e4:63:3d:
96:cc:03:e6:76:00:8c:6b:87:a5:7b:39:1f:c9:75:
68:2d:8b:22:df:b0:0d:1c:f9:f6:c6:be:20:d3:e7:
12:11:d5:fb:a1:13:07:7b:13:ae:01:4a:f2:52:29:
ad:ba:db:94:8c:e0:e7:b5:83:a2:db:40:44:3d:3f:
f3:ce:24:1b:be:4a:33:1b:23:6c:54:34:88:26:72:
0b:67:5b:4a:57:72:5b:c5:7e:32:9b:4f:59:ed:5f:
59:03:d0:5e:c0:93:99:b2:c3:9a:96:29:c9:58:ff:
54:03:87:94:7e:e9:2b:2c:79:f3:02:a7:bb:e9:19:
46:3a:bb:2f:18:c3:c9:5a:d5:8d:77:7e:52:b6:df:
c8:0d:f6:3c:45:95:31:4b:19:cb:58:06:d8:28:ea:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:63:4C:CF:7A:2F:88:F3:74:42:46:CF:2B:92:C7:E5:91:D1:FA
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:a2:9b:ce:a8:63:f9:c0:ce:76:bb:6c:f2:67:76:c7:2d:
bd:44:fe:71:41:99:5e:85:6e:60:2c:b7:9a:ff:d1:25:6d:b9:
22:94:5d:8d:53:5f:5c:29:df:e9:ab:b2:94:3d:3d:43:e6:d2:
7d:6c:47:1d:50:a7:64:7d:96:4f:1d:e3:9f:13:97:21:86:b2:
c4:13:4f:97:13:c6:d5:9b:a6:d2:45:da:b9:fd:a8:1c:4a:24:
0c:e8:a5:77:42:83:2e:4d:0a:1d:82:98:f3:f9:5e:97:a7:73:
13:77:ae:eb:3a:f4:89:5e:46:ee:60:e7:73:72:20:bc:6e:d3:
c5:66:11:db:72:4a:72:04:cf:07:3b:aa:6d:5d:50:07:20:e7:
73:08:5d:bf:9f:58:b7:63:56:df:79:60:4b:09:92:89:81:81:
18:75:06:91:6c:74:50:6e:7a:0d:9a:39:f8:91:95:14:a5:7a:
ff:5b:00:ae:67:ce:64:1f:71:81:71:06:bd:85:23:86:ad:db:
5f:72:1b:0b:5d:4f:24:c8:bb:3c:70:0f:a2:b7:a6:09:6b:13:
59:c6:c9:42:74:c6:ee:4e:b1:56:2f:0e:36:36:53:9c:ef:f7:
e8:33:fa:31:0f:c8:a6:9f:20:77:48:8c:8b:08:91:63:4b:45:
fc:00:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:07 2026 by rpki-client