Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: gMvuzvRC31nJZPtSCnsUfMKuGuUXvsoL3jUVJqyCLFE=
Subject key identifier: 60:2B:0B:F0:EE:B7:BD:A5:F8:93:29:1E:59:ED:65:C5:D7:C4:2D:37
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019F91360020898738D4E89576DD2826A7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:01:02 +0000
Manifest this update: Thu 23 Jul 2026 23:01:02 +0000
Manifest next update: Fri 24 Jul 2026 23:01:02 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: PmkLbqhrVb5kWXL3kPW+Vx+0/mLSTIKVAlrWyPz5jgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:00:20:89:87:38:d4:e8:95:76:dd:28:26:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jul 23 23:01:02 2026 GMT
Not After : Jul 24 23:01:02 2026 GMT
Subject: CN=602b0bf0eeb7bda5f893291e59ed65c5d7c42d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:72:dc:9d:20:10:fc:c9:94:8d:cb:b5:d9:
92:d7:60:63:a3:9e:9f:69:6d:c9:c4:4e:29:af:9d:
53:3c:8c:5a:9e:6f:67:20:94:4e:95:d9:67:84:82:
07:0a:35:16:fc:be:b0:38:38:0c:77:f4:58:15:c9:
a3:0e:a8:f5:89:25:9a:0e:4b:4c:0f:c8:b5:b6:74:
9f:d1:05:99:7b:9a:0c:3c:ac:8e:14:e4:a3:b3:2a:
25:f2:ff:61:77:42:74:17:b7:de:8f:06:fe:42:0f:
5a:2d:e0:56:d1:b0:91:3b:8f:58:f9:a3:fe:71:b8:
ef:a2:a9:d6:9b:35:fe:d6:ba:17:dc:ca:cb:00:a6:
e6:12:02:2e:c0:e1:08:c9:a5:50:a9:6f:dd:36:56:
a1:8c:08:bf:1f:fe:9f:d1:5b:27:e5:21:af:39:15:
c2:81:bc:d5:f9:b0:87:72:07:26:e2:ef:1a:7a:6e:
fa:66:2d:a9:57:02:44:55:b7:f8:f4:59:7c:fa:94:
43:77:07:8f:53:c9:de:6f:35:e2:d3:fd:d6:b8:46:
b0:05:74:24:9f:91:ca:a5:69:0a:92:b4:06:df:ce:
82:1d:45:0d:83:ca:61:86:2b:76:f6:75:ca:73:26:
08:56:c0:5a:62:c2:44:d7:e9:96:99:22:b2:ba:5b:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:0B:F0:EE:B7:BD:A5:F8:93:29:1E:59:ED:65:C5:D7:C4:2D:37
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9e:ca:54:a9:aa:9a:cb:af:b6:73:2e:46:a5:c3:c3:8b:5d:
27:de:9d:be:8b:2b:f1:94:5d:8c:49:43:af:b4:e8:5a:76:03:
f8:fd:85:93:f5:f8:c0:87:c6:9b:50:63:ac:f0:b2:99:90:e3:
3c:56:55:e6:27:55:d4:25:d5:1b:3a:78:3f:b9:e1:62:a8:a7:
b3:79:c4:d2:8d:00:85:b7:81:c7:0f:d2:5d:b6:d8:14:45:e4:
8e:77:67:ff:e2:57:fd:4e:82:a3:24:48:d4:b9:63:a1:a9:4e:
35:93:04:b1:c6:06:63:83:ef:05:a5:4e:b2:97:89:19:37:f4:
7f:90:55:1e:e8:cc:23:c4:30:aa:81:40:e7:dc:29:e1:b2:3e:
90:67:32:de:de:ee:8b:2f:eb:2d:6a:eb:c9:5f:52:40:98:60:
07:78:22:c2:c7:d0:f5:f9:7d:af:14:c6:b6:cb:5f:1d:05:80:
03:ab:cf:b0:76:d5:53:eb:8c:36:e6:18:85:84:48:bb:b6:0f:
68:6d:3a:6a:bf:bc:2e:fa:d7:dd:f6:36:79:7b:c0:5b:12:8e:
e5:1a:b3:3d:bc:f6:67:7c:c3:b4:d0:bb:73:45:18:5a:61:f8:
fe:03:4d:f2:cb:01:dc:e9:4a:f2:69:07:c3:bd:19:45:f6:96:
15:c9:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:40 2026 by rpki-client