Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: unMpgaZZEF/8NUhfdhurjA5eMrInDP1/jOEoG5Fzw28=
Subject key identifier: 48:93:D2:C8:27:86:D3:2A:49:E7:03:69:78:13:94:6C:55:FC:3E:65
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019F9323F413089120B36918748195E29E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:34 +0000
Manifest this update: Fri 24 Jul 2026 08:00:34 +0000
Manifest next update: Sat 25 Jul 2026 08:00:34 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: Asd5yggtmWypk64XZeH4F8uS1oKJzDMRx5i0jXNN6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f4:13:08:91:20:b3:69:18:74:81:95:e2:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jul 24 08:00:34 2026 GMT
Not After : Jul 25 08:00:34 2026 GMT
Subject: CN=4893d2c82786d32a49e703697813946c55fc3e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:dc:54:57:32:de:49:44:ef:00:7f:64:f4:
69:27:3e:ad:79:59:e1:6a:a1:50:a6:9e:48:47:35:
3c:0e:ed:fc:16:a6:d8:66:27:68:0c:22:d4:d5:00:
c5:14:68:4d:e3:74:1e:e5:ad:80:88:22:15:71:7f:
6c:61:dd:77:31:f3:1b:6d:8c:f9:23:e8:33:9d:e5:
ae:17:b4:1b:eb:41:30:2a:7f:05:01:7d:42:cf:13:
da:e0:31:08:7d:65:2b:58:dc:77:68:bb:c2:26:d3:
db:01:e5:a7:92:45:f2:ae:16:0d:9a:34:26:91:64:
e6:d4:2b:c0:b6:6d:b9:d5:ee:4b:c7:62:4f:ec:cb:
f4:3e:93:8d:f7:bf:a5:05:59:a5:c5:54:89:f6:86:
fd:ab:35:5b:78:eb:c1:ec:dc:a8:cc:c4:ae:fe:18:
aa:4b:f4:6e:fe:28:5e:ca:07:39:1d:ca:a4:28:e4:
14:84:b3:64:5e:db:c4:52:eb:0a:cf:23:23:54:f5:
cc:d0:b1:6d:47:51:49:49:88:6c:85:56:4d:c1:c0:
58:74:fe:30:91:d7:f4:5d:0a:7a:12:2b:3a:0e:67:
3d:ff:2b:66:49:5a:ad:a4:95:a1:89:7a:ab:d4:7f:
d0:67:f4:47:01:49:ef:08:ad:f0:4e:3f:77:41:39:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:D2:C8:27:86:D3:2A:49:E7:03:69:78:13:94:6C:55:FC:3E:65
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6b:04:82:b4:67:62:aa:20:b3:5a:81:62:66:7a:4c:6d:06:
a5:1b:fa:82:3f:f7:76:2e:72:9a:98:6d:35:4e:83:61:39:5c:
e8:24:e2:f3:27:08:a4:1c:c9:52:93:ef:3b:8b:79:5a:b8:90:
a5:c4:0b:cb:ac:7a:97:f0:5f:62:ed:cf:5c:97:2d:ce:6f:27:
ae:14:32:5c:cc:f5:30:12:7b:fa:05:4b:dc:29:f8:48:bb:a7:
b6:aa:61:19:a6:c7:20:bd:71:88:c7:5c:5f:fe:b6:c4:34:3f:
3b:e7:2a:1b:bd:2e:f8:e0:9e:0b:37:14:b2:8e:f6:00:30:ee:
97:ee:89:67:80:a8:c7:3d:fd:ac:21:31:48:b6:2d:07:7a:8a:
58:c7:41:35:97:92:ad:d5:23:34:a5:1d:c2:97:a1:8d:8a:b8:
60:07:cf:66:d6:b5:a9:40:70:af:f5:46:83:4a:2a:a3:bc:a7:
9e:bd:23:34:02:86:f0:23:e3:d3:2a:b4:66:eb:42:2f:1c:9e:
ba:cb:dc:a9:86:87:2f:7e:8d:a7:ce:9a:02:2f:6c:8c:2a:0f:
c9:5a:a4:fc:74:cb:c7:2a:e7:fc:64:28:7f:48:6e:cb:23:64:
b4:a9:52:a7:26:fd:66:9f:bc:af:cd:c9:b9:08:e2:5d:0e:4e:
ae:71:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:34 2026 by rpki-client