Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: Qpq4vI+SDNJJIn4ddTBbPGJEbVGA/h+sLJJ2PeEV6fc=
Subject key identifier: 4F:39:53:2E:F3:A9:EF:72:1B:3D:0E:09:DC:47:45:DB:86:D9:FB:6A
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019E1E6C28765DF672E01A9A6F65AC885DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: VO0pnl/Jhk5ajxV9B1pPRIb7bmVFHc98tYAqL3TQmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:28:76:5d:f6:72:e0:1a:9a:6f:65:ac:88:5d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=4f39532ef3a9ef721b3d0e09dc4745db86d9fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:49:1e:00:ce:51:99:87:9b:cd:c9:93:3a:
98:30:9e:dc:2a:6e:c8:c7:07:e3:cf:28:e1:8c:a0:
e9:46:f9:20:c0:b6:38:79:2e:7c:fd:d9:22:cc:fc:
0c:ab:d2:7e:8b:b2:43:c0:64:13:cd:57:c7:a0:ea:
5c:b2:0f:13:65:e4:b5:b7:8e:d7:4d:e1:e3:0d:cf:
d5:74:79:a3:5a:6e:90:6d:02:d9:ce:5d:a0:8c:6f:
9e:d9:73:73:e5:ca:8e:38:68:11:5e:a8:42:01:67:
65:45:3d:66:93:7c:09:8e:35:df:c2:6d:0c:41:3d:
e3:bc:d4:6a:8b:04:ae:b3:87:a2:a3:83:e0:a4:fb:
1d:84:d2:7f:14:26:43:04:eb:a9:65:22:56:ce:34:
c3:79:29:4a:9a:8a:5c:d2:f5:e1:32:ce:b4:0b:bb:
db:78:a8:7a:17:98:54:20:48:46:d2:48:be:1f:0e:
7f:95:15:0a:a9:98:98:76:01:1d:d4:19:e6:26:f0:
19:8c:b6:81:78:ec:20:56:c4:c8:62:1f:ae:20:6b:
ae:e9:74:9b:85:ac:d3:38:09:4c:e8:26:bd:70:d6:
a5:5d:75:9d:d1:7f:b9:67:43:7f:b4:26:a4:dc:16:
5d:84:d0:c8:ea:5a:75:b6:8f:23:fc:f7:d5:a7:69:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:53:2E:F3:A9:EF:72:1B:3D:0E:09:DC:47:45:DB:86:D9:FB:6A
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:0a:70:29:e2:49:37:af:dc:a8:62:b7:d1:dd:94:49:ff:
73:85:bc:3b:89:ec:75:36:74:50:ae:09:24:75:22:83:9f:2c:
ea:cd:9d:8d:59:55:b8:3a:cc:4d:dc:82:a3:c2:e5:59:81:87:
69:a2:44:3a:33:5f:20:4b:08:80:70:75:98:9e:d9:62:7c:3f:
b1:11:d1:ce:a9:d3:db:2f:1e:db:c1:48:9d:dd:61:84:e2:c3:
0e:b3:3c:17:c0:52:f6:f5:ff:fc:2d:d8:71:6e:cb:43:49:61:
d8:a7:94:ef:7d:1e:71:f4:d9:fe:66:2b:b3:14:c5:46:04:27:
c9:58:65:ed:ab:00:f9:d7:ac:39:9b:1f:82:f8:4d:19:e4:a2:
a0:21:05:9b:d5:af:aa:5e:92:f0:50:d4:60:12:c9:e9:a0:0b:
5d:8e:92:ce:ff:30:10:ba:56:0d:89:65:b3:68:de:aa:10:e0:
e8:38:91:6e:e7:43:64:e0:22:4c:37:cb:60:c6:4e:39:6e:86:
2d:49:69:2b:1b:d7:31:fa:b8:ed:ff:ad:d5:80:8f:61:36:25:
08:69:3c:60:1e:5d:a4:8a:dc:ce:e0:fd:14:47:a7:83:04:30:
aa:86:29:97:68:b5:3e:d5:4d:aa:55:9a:92:48:5a:3f:fc:53:
44:a6:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:45 2026 by rpki-client