Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: /6mqNEjK7/AjzIQM0s5EvxoA6rB9B0RN2Rk+Bw1leKM=
Subject key identifier: 9E:92:DE:C0:25:EE:DB:AA:6B:07:73:56:DF:8C:9E:BF:3F:CF:ED:DA
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019D254C8E902DF701DB411DE517C4E80C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 14:01:07 +0000
Manifest this update: Wed 25 Mar 2026 14:01:07 +0000
Manifest next update: Thu 26 Mar 2026 14:01:07 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: 9DVoSOo4neVVrc7H4ntumvAksIlC79B3rGhwp9G3Pmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:8e:90:2d:f7:01:db:41:1d:e5:17:c4:e8:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Mar 25 14:01:07 2026 GMT
Not After : Mar 26 14:01:07 2026 GMT
Subject: CN=9e92dec025eedbaa6b077356df8c9ebf3fcfedda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:fd:95:80:93:de:c0:67:f9:7f:92:f0:1f:
97:61:84:52:ab:ab:75:61:04:17:ca:20:e8:f1:ff:
14:50:d8:7f:f4:02:50:ea:18:f1:d9:0f:7f:fd:79:
c0:08:41:c8:59:60:d8:da:82:35:12:63:f8:33:48:
05:0c:68:a7:3e:c0:bc:9d:cc:6d:b8:39:73:7e:1c:
aa:54:24:df:d3:aa:bb:4d:e0:1e:00:05:3f:6c:f3:
34:89:21:e5:71:f7:e3:2a:f2:7f:02:0f:11:eb:b2:
3b:2d:25:48:8e:16:fc:d4:4a:6c:d7:21:cb:55:d1:
3d:99:fb:64:02:46:00:66:b2:be:34:7f:92:c1:c2:
15:9c:3a:c5:66:e2:71:cd:6b:b1:4d:14:6a:12:83:
30:4f:86:33:4e:6a:ce:2b:d1:06:19:4b:55:c1:d9:
17:01:84:00:c0:4c:49:4a:e2:9c:5d:30:27:f4:fc:
40:5e:4d:2b:6b:ea:f5:fd:1d:0d:36:dd:17:e1:ce:
2e:72:86:18:a9:b7:02:8b:2d:b9:19:e0:31:8f:fd:
8d:72:bf:2c:40:8d:72:7b:2a:fc:65:f6:72:a3:6c:
bd:d9:8d:1d:c7:8c:dc:bd:68:c3:f5:a7:3a:76:b4:
bd:5d:09:08:4f:4a:5e:ac:71:99:5f:f4:6b:35:73:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:DE:C0:25:EE:DB:AA:6B:07:73:56:DF:8C:9E:BF:3F:CF:ED:DA
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:5e:ac:12:47:20:a6:2b:01:60:cb:d9:90:b3:cc:61:5a:
b9:fb:f0:97:5d:a4:2d:2a:16:95:8c:4c:11:30:43:49:26:5f:
76:f5:42:4e:d6:8f:f4:ef:3a:2d:ff:73:a2:da:99:b0:53:c3:
a7:54:a0:0d:22:79:ac:47:24:55:2e:3a:8d:cb:2f:dc:28:62:
27:b2:f6:ac:58:fb:fc:ac:2a:a4:c8:11:c4:9b:57:05:9f:23:
03:6a:09:8b:f5:e7:0c:5d:10:ad:48:d6:0e:37:c1:78:ab:f4:
20:fa:88:b5:c0:db:8c:aa:3b:fd:9d:63:00:77:2e:a9:dc:77:
63:5b:6b:6a:b1:64:23:2c:52:70:af:91:ee:d9:26:70:d8:70:
f3:c5:ce:e7:da:57:73:93:d5:6d:bb:81:bc:36:58:7f:23:16:
73:cf:22:b5:3e:f3:fc:94:e1:36:9c:f6:52:7d:45:d9:4e:eb:
51:45:c8:57:7e:31:94:1f:f8:0f:ad:79:ce:1b:ef:b5:14:81:
3e:60:a4:8b:24:cf:7a:0b:34:8d:61:71:7d:e2:63:86:4e:5f:
41:02:b5:02:6d:e1:21:92:82:db:07:74:87:f9:9d:e1:12:41:
1c:80:52:5e:1d:aa:7c:4b:28:c7:be:54:ee:42:ad:1f:2c:91:
ad:a0:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:42 2026 by rpki-client