Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: xBXccQZ5CKC/0aIHFzqemxBN04iR/V3iVwgKP2Qky9w=
Subject key identifier: E2:77:8B:44:A2:6A:7D:79:2F:E4:FE:D6:80:A1:53:B0:9D:53:06:0E
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019E1DFE5FB609684B9DD2309B7D5523D2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0F9B
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: EvlLlBlBMunpfXTzgiNmkSEoneEs4osz5ls3EOvXPmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:5f:b6:09:68:4b:9d:d2:30:9b:7d:55:23:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=e2778b44a26a7d792fe4fed680a153b09d53060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:0b:73:1f:b1:02:13:2d:a4:86:a1:d4:fc:
a1:76:ea:93:ff:ab:48:ea:a8:5b:63:5a:9a:db:48:
5c:a5:d7:1a:86:21:ff:87:96:b0:3e:6c:50:6c:e7:
8f:01:15:a3:d5:13:37:c1:64:74:8a:87:42:0b:5b:
6c:c6:71:c0:ae:f7:58:a6:da:4e:9c:c0:de:31:aa:
90:6f:f3:de:9f:67:e7:b2:0f:e3:b4:8f:12:fc:c6:
a9:90:e0:f5:80:f7:0a:a4:e6:aa:9f:61:69:a6:9a:
8a:a5:a3:90:9b:41:d1:55:92:53:9c:e8:c9:78:a9:
32:bb:05:20:75:af:c4:9d:97:97:63:f9:81:6c:93:
ac:37:cc:92:01:ae:a9:c0:88:7b:54:8e:fe:96:96:
a0:a7:3e:9c:ce:35:ed:d3:51:12:05:da:4e:d3:fa:
09:57:97:65:7c:96:65:78:e7:3f:b2:4e:af:68:e2:
60:56:b4:9c:ff:43:fa:cd:cb:b3:1d:16:ce:0f:72:
d8:d1:22:29:4c:52:9e:18:03:09:78:c9:e6:ce:cf:
5a:cb:cc:66:3c:38:a8:ec:52:3c:2c:d0:c2:45:d9:
ea:61:48:ed:8d:b7:fa:b5:ca:ff:86:5d:56:89:17:
59:97:cb:34:73:56:a1:b8:ad:55:db:19:b6:a1:70:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:8B:44:A2:6A:7D:79:2F:E4:FE:D6:80:A1:53:B0:9D:53:06:0E
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:af:67:21:de:2c:6d:e6:2b:e0:6e:ae:48:58:b9:04:9c:
0b:8c:51:7e:e9:6e:06:0b:47:35:90:b9:91:78:ab:6c:94:f3:
af:76:29:3f:10:bf:34:7e:85:0c:57:e1:2d:d1:98:4b:ce:d4:
72:96:c0:10:54:35:08:a1:16:f8:9c:68:92:9e:0f:33:dc:f3:
5a:41:11:17:4d:90:22:be:8e:de:c6:dd:bb:d4:f5:4f:4a:07:
b8:ea:2f:dc:e3:fb:1f:38:62:de:95:24:d1:82:ef:11:5a:61:
85:1c:d4:3b:00:fa:ad:df:c4:4b:80:1e:17:34:64:63:58:53:
84:0c:2f:4b:8e:aa:5b:9a:e0:a2:a4:92:33:0b:a1:a0:4b:4e:
b7:77:70:b4:67:97:14:02:12:d9:32:e0:0a:29:bc:d0:79:49:
59:34:36:90:37:4f:6d:86:d0:79:db:c4:f8:72:d4:7d:47:21:
64:30:7d:d0:b8:0d:99:70:62:59:61:80:ab:c2:91:96:be:aa:
47:aa:00:29:42:89:86:60:eb:5d:08:6f:42:62:8f:93:0a:fa:
0e:a7:ee:2c:63:9a:e2:0c:8d:c7:c7:89:58:d1:a4:e1:bd:ad:
9d:70:3d:ac:ae:ad:4d:1b:19:0b:2b:1e:95:f9:ca:83:74:e0:
2a:fd:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:05 2026 by rpki-client