Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: rsbwtFUmKWCWvPpq5XG3QZ1LcK2VeswbfoNtBqdkbm0=
Subject key identifier: 67:B1:5A:21:6D:5F:7B:72:73:61:6B:67:C2:02:29:2F:9D:5C:41:8E
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019F92B5E3ED6BFD9EE3D15C297FF14EFD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 105C
Signing time: Fri 24 Jul 2026 06:00:21 +0000
Manifest this update: Fri 24 Jul 2026 06:00:21 +0000
Manifest next update: Sat 25 Jul 2026 06:00:21 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: sqGxIfttv2vs2MaRI75CG/pTKMSdbdGfwizoxv6nuNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e3:ed:6b:fd:9e:e3:d1:5c:29:7f:f1:4e:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jul 24 06:00:21 2026 GMT
Not After : Jul 25 06:00:21 2026 GMT
Subject: CN=67b15a216d5f7b7273616b67c202292f9d5c418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:67:b7:15:89:81:c4:da:cb:3a:95:f5:e4:
02:b8:be:66:09:c2:f4:f3:25:27:c3:63:96:d3:8d:
bd:5d:86:36:5e:23:af:e2:74:40:bd:07:f3:f6:7a:
45:43:3a:8f:30:ba:cc:22:a0:19:31:8c:4b:cf:60:
d8:6b:be:b0:c4:3a:13:6f:2c:7f:49:85:ac:1a:d8:
4c:17:01:2a:cb:1a:d8:52:4b:83:8e:76:9f:eb:f1:
c4:61:9e:a6:3d:9b:37:01:3c:75:a9:dd:50:a8:67:
bb:9c:b1:f6:7a:9b:b9:4b:a5:1f:5a:fc:79:5b:32:
a7:aa:4b:a5:a3:2f:41:f6:6f:c3:ad:4e:66:c8:86:
c8:3d:a3:24:18:a1:00:c1:54:f0:a9:0b:83:b1:5e:
44:55:43:33:75:f8:23:8b:e3:de:27:41:01:5a:f3:
20:16:2f:8a:ec:7c:be:14:9e:7b:86:9b:5f:84:1b:
5c:01:f4:ba:18:85:e1:0f:31:6f:7b:23:1e:a9:40:
dc:70:a9:ff:bf:a5:17:72:79:e2:1f:c8:3b:27:42:
6c:48:02:f6:fd:d0:fa:05:8b:63:b1:28:06:ed:fe:
95:be:d7:07:29:7f:3f:22:2d:7e:38:44:ed:b9:5d:
b8:8b:bd:1c:98:91:bf:87:17:8f:12:10:61:47:6c:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:5A:21:6D:5F:7B:72:73:61:6B:67:C2:02:29:2F:9D:5C:41:8E
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:b5:12:c2:8f:c7:80:71:c0:51:64:dc:7a:1d:b8:a8:a1:
28:82:e7:fd:ae:0f:37:28:e6:b4:41:8b:47:e4:8c:25:93:ab:
96:2c:db:75:da:c7:f6:5d:64:d9:0d:f6:21:4d:37:78:2a:51:
30:99:d5:af:5b:52:70:f6:cd:63:54:15:c3:0b:4c:07:de:07:
22:51:53:f6:c4:ce:dd:76:b7:aa:fe:ab:66:7d:00:66:88:b9:
44:8a:4c:63:a1:cc:a3:1f:b7:f5:51:a8:69:8f:2a:4b:3f:01:
9f:e4:b3:5b:4b:6f:b6:cc:b5:f6:fc:1f:93:1f:66:fa:c3:b3:
f9:f3:47:67:cf:f7:fe:ca:47:7a:86:1d:4f:d6:1e:fa:a9:a0:
47:c9:e5:3a:e6:1d:a8:b3:e7:ba:f4:a2:8c:c0:2d:e2:93:9a:
45:dd:ee:bb:2c:b7:8c:bc:36:dd:41:3e:49:9d:36:db:42:c2:
63:1e:23:9f:86:a4:fd:2e:a9:18:76:e0:ad:21:77:08:87:e0:
4f:66:17:f8:42:cd:d7:45:9d:5c:c7:f5:b3:f7:90:ed:69:72:
a6:a5:66:59:1e:e8:a2:b4:3f:47:66:d6:02:2d:f5:5a:2b:7c:
6e:b1:19:1c:6f:20:59:93:20:d6:b3:a9:16:78:43:f6:e9:e3:
74:0c:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:08 2026 by rpki-client