Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: xLxHX0Ka/WeKWsyejYXpmEQGEePNMCpikwolaxAZjZg=
Subject key identifier: A0:FE:67:63:85:E2:D8:90:4A:0F:D8:16:DB:A7:38:4D:C8:4B:6D:C5
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019D28BB3D222478B360539197CE1B28398E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0F1C
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: eh/JtsC1N6r4NFW2NcX5xujYNWU+upau36qCpsOqPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3d:22:24:78:b3:60:53:91:97:ce:1b:28:39:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=a0fe676385e2d8904a0fd816dba7384dc84b6dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:3a:2d:f7:65:ab:8a:90:df:6e:88:81:ff:
82:a3:ba:89:61:95:6f:15:68:92:0b:fb:c7:4f:de:
aa:71:b8:bc:ff:94:27:71:86:2b:2b:79:06:21:22:
60:d9:b8:0f:05:01:41:30:d1:5c:75:10:d2:01:b9:
20:d9:bf:87:1f:26:a9:7a:3e:3e:71:31:c3:61:c6:
83:ca:ef:82:7d:ac:f5:5e:2e:c5:0f:77:6d:3a:e9:
7b:be:e3:3a:13:99:c9:b5:cd:fb:3c:73:8e:11:b1:
9d:db:b1:c4:66:36:ec:62:11:7a:01:a4:4a:b1:83:
16:30:42:44:dc:6f:f9:27:11:d4:7d:e0:57:2f:b3:
c5:33:3b:c0:a8:61:76:3c:b0:ca:84:fd:3b:d6:ea:
fc:00:9d:34:07:cd:9f:a6:f8:01:1b:02:58:86:fd:
34:5d:5e:5f:f4:e4:4c:c2:59:39:fb:ac:54:3c:5a:
d2:e6:b8:9a:8b:03:cb:80:74:01:98:75:fe:2c:3f:
0b:5f:07:10:ba:2f:ee:6b:2f:ba:f7:05:ae:b7:c5:
10:e1:c3:b3:86:d4:65:88:be:79:22:51:82:d1:1f:
50:bb:43:19:36:e5:6e:89:54:27:b2:cf:b6:8a:15:
d7:f7:96:a6:71:cb:10:bc:82:4a:97:9e:23:0a:61:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:67:63:85:E2:D8:90:4A:0F:D8:16:DB:A7:38:4D:C8:4B:6D:C5
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:5d:60:27:a6:2c:15:76:1b:b0:9e:ae:b7:e8:07:7f:1c:
72:8d:cf:b2:f2:07:69:f5:a3:2f:0d:31:94:31:65:0f:86:a6:
45:0d:d1:6d:88:75:20:e8:23:d6:ee:a5:d4:5d:0c:45:07:d0:
a2:be:ff:5e:1d:fb:67:ab:ac:bf:0a:c6:d8:ae:2a:f2:2e:be:
22:96:7e:d3:12:c6:d0:17:a2:65:87:b6:d0:3b:43:9f:99:f9:
04:6c:5f:70:97:77:f8:78:01:3a:fa:e7:ad:d7:4d:4b:39:59:
1c:0b:2f:59:a1:d2:8c:18:4b:1f:55:8c:79:16:fc:a1:39:07:
4b:f3:d4:44:b5:db:c0:b8:5a:96:87:ac:1b:4e:47:19:df:61:
fc:db:7e:7a:96:98:e9:52:92:96:22:55:bc:b5:b2:cd:c7:ba:
55:e1:d1:41:02:29:b3:6e:e8:bb:7b:e9:d2:0b:78:c8:b9:b7:
f9:3b:f8:1b:43:60:9b:99:d6:df:47:47:eb:48:80:ca:62:83:
00:4c:33:45:a3:cc:c9:5a:11:12:fb:c4:bf:7f:f4:3b:a7:b2:
53:98:33:14:28:ae:b9:48:35:66:f3:57:10:6d:e5:77:55:81:
63:66:67:66:1c:04:30:7f:6f:53:7e:7c:1c:f3:d1:7a:f7:95:
76:50:40:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouz0iJHizYFORl84bKDmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjYwMzI2MDYwMDUyWhcNMjYwMzI3MDYwMDUyWjAzMTEwLwYDVQQD
EyhhMGZlNjc2Mzg1ZTJkODkwNGEwZmQ4MTZkYmE3Mzg0ZGM4NGI2ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYw6Lfdlq4qQ326Igf+Co7qJYZVv
FWiSC/vHT96qcbi8/5QncYYrK3kGISJg2bgPBQFBMNFcdRDSAbkg2b+HHyapej4+
cTHDYcaDyu+Cfaz1Xi7FD3dtOul7vuM6E5nJtc37PHOOEbGd27HEZjbsYhF6AaRK
sYMWMEJE3G/5JxHUfeBXL7PFMzvAqGF2PLDKhP071ur8AJ00B82fpvgBGwJYhv00
XV5f9ORMwlk5+6xUPFrS5riaiwPLgHQBmHX+LD8LXwcQui/uay+69wWut8UQ4cOz
htRliL55IlGC0R9Qu0MZNuVuiVQnss+2ihXX95amccsQvIJKl54jCmG08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD+Z2OF4tiQSg/YFtunOE3IS23FMB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZtdYCem
LBV2G7CerrfoB38cco3PsvIHafWjLw0xlDFlD4amRQ3RbYh1IOgj1u6l1F0MRQfQ
or7/Xh37Z6usvwrG2K4q8i6+IpZ+0xLG0BeiZYe20DtDn5n5BGxfcJd3+HgBOvrn
rddNSzlZHAsvWaHSjBhLH1WMeRb8oTkHS/PURLXbwLhaloesG05HGd9h/Nt+epaY
6VKSliJVvLWyzce6VeHRQQIps27ou3vp0gt4yLm3+Tv4G0Ngm5nW30dH60iAymKD
AEwzRaPMyVoREvvEv3/0O6eyU5gzFCiuuUg1ZvNXEG3ld1WBY2ZnZhwEMH9vU358
HPPReveVdlBAEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:37 2026 by rpki-client