Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: dxfG0/cBoagTWOFmrnsW7X2OsF8vBmAEnMMLiDoZ+WQ=
Subject key identifier: 96:72:EA:8E:D6:A7:BE:E7:9D:C4:57:46:36:90:0F:65:2D:64:B7:76
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01A0D983C589BC8436FDF83CBBCFA40348F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 17:01:26 +0000
Manifest this update: Fri 25 Sep 2026 17:01:26 +0000
Manifest next update: Sat 26 Sep 2026 17:01:26 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: at3DiX15wACesMjEaa5Sj+FhYyBgMmmqcO4LWKDEbQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:c5:89:bc:84:36:fd:f8:3c:bb:cf:a4:03:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Sep 25 17:01:26 2026 GMT
Not After : Sep 26 17:01:26 2026 GMT
Subject: CN=9672ea8ed6a7bee79dc4574636900f652d64b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:9d:e4:af:41:59:3c:34:54:31:ad:31:0e:
4d:9f:86:9a:7f:8d:b0:7a:4f:3e:09:39:21:04:ef:
0c:16:66:2d:6b:ec:de:5f:64:eb:bb:6f:ef:6f:44:
92:66:83:00:87:50:77:c7:50:d9:59:7d:f8:e5:e4:
a0:2d:7f:9a:bc:85:7c:e8:68:ff:ee:99:c9:af:60:
4d:1d:71:cf:59:ee:87:5d:be:b2:64:aa:ad:83:7a:
1f:7f:0b:da:58:7f:95:c3:30:ab:08:98:60:72:1d:
40:7e:8f:84:20:22:6d:0e:b7:28:9d:42:99:6c:7d:
43:c3:c0:79:c2:c3:4b:16:93:8f:27:6b:7c:f1:e9:
6d:f4:23:c9:22:8e:7a:ab:a9:d7:79:bf:44:03:fd:
40:77:53:f6:69:fd:a2:6d:d2:f3:23:c6:59:49:47:
00:72:29:9f:42:aa:e0:50:81:ae:2b:29:d4:96:5d:
28:24:f3:3f:db:a1:9f:d9:30:3e:e6:15:c9:e9:3f:
b4:88:31:a1:03:39:cc:74:82:82:e3:2d:f5:97:df:
69:5b:e9:08:df:66:ab:b1:2d:7e:08:7f:70:d8:0d:
61:c7:65:25:3f:26:b8:d1:81:6e:69:38:d6:02:c5:
4d:25:80:8e:26:e8:0b:1a:b0:7d:d7:99:82:3a:fe:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:EA:8E:D6:A7:BE:E7:9D:C4:57:46:36:90:0F:65:2D:64:B7:76
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9d:7b:a2:a2:39:75:3e:f2:9e:89:b3:5f:19:5f:28:9f:62:
bf:4b:b1:08:0f:f2:57:95:e7:31:f8:2a:89:d0:b4:f1:79:94:
65:7f:7b:3f:7f:3e:e2:3d:b5:c2:4f:1f:25:ee:67:65:26:a1:
ae:4e:73:e6:97:9c:b3:66:5a:43:11:14:61:21:2e:48:d3:14:
88:51:cf:2c:43:40:42:f4:e4:98:3b:48:43:25:c1:1d:b7:f0:
f4:1f:d9:83:c0:6b:2c:b4:02:27:03:3d:43:54:5c:63:6f:31:
75:5f:ae:62:50:88:7c:7a:84:c9:1d:46:6e:a6:6e:e1:c9:13:
b4:98:d3:5e:43:ea:56:aa:fc:6a:a9:53:6c:53:8c:fb:00:f7:
17:d6:59:ee:f9:2f:20:50:d4:07:1c:af:71:bb:c2:c7:4b:f2:
74:e2:e6:d1:40:d8:c9:b6:22:bd:13:f9:5f:c2:1f:72:30:89:
06:a3:f0:4d:86:d8:1f:99:33:d0:91:b8:34:9f:67:d9:d9:0d:
d6:de:9a:1c:00:4e:6b:5d:bb:9f:59:76:0b:85:3c:8b:87:b3:
e1:9b:42:0a:4d:08:fa:16:26:ac:98:23:a4:52:43:7f:ae:09:
42:b7:1d:17:01:8a:83:ef:c0:61:29:0e:6b:aa:93:10:c3:f8:
56:06:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:04:57 2026 by rpki-client