Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: rnzFTmn6f679zgbkY8u1lHmIZtwKEZUZlRiT8zOpsOM=
Subject key identifier: D6:E7:45:B8:26:AE:A2:99:2E:75:2D:E6:72:A6:96:17:5F:43:6D:48
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 019CAB6AF0C6722002B69D2AD3B983B36714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: ez-_2yXQINxTXFqz70FZ9NoROGQ.roa (hash: olw+Bd9k/ZVI7cVK/9gF+FMThvydmQHcFJPrW3uNy3k=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: bSZG0htKvjv2LG1xlXLTNfNkZeZj2fwTOFZ3siLIyG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f0:c6:72:20:02:b6:9d:2a:d3:b9:83:b3:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=d6e745b826aea2992e752de672a696175f436d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:ea:03:72:91:0b:81:e2:2e:95:e0:4d:95:
e7:4a:5a:9c:65:f7:d4:a3:37:06:0d:a6:86:1b:ca:
fb:ac:f0:72:ff:56:97:3d:60:ea:df:f2:a4:73:47:
1f:c3:91:8d:90:0b:39:2c:d1:0f:bc:6d:28:ce:79:
79:d7:c6:17:13:82:7a:73:18:58:e4:a1:f7:b0:f8:
d6:c7:ef:00:ed:cf:0b:0c:60:49:c6:87:c7:29:93:
3b:b7:1c:b7:f9:08:83:e7:19:fc:bf:55:21:ba:9b:
b8:b5:14:bd:39:1d:37:2f:88:c2:89:3c:cd:35:71:
9e:b1:6c:7a:4c:5b:3c:fb:af:75:79:d7:fa:2a:6a:
f5:91:a2:74:75:c1:d0:66:4e:a8:08:4b:90:fd:3e:
14:3b:1a:3b:f2:21:37:89:19:09:1e:7e:07:71:45:
1f:31:d8:b5:90:e9:2a:e5:c3:8d:33:11:64:e7:f5:
63:c8:a5:57:44:c2:bf:48:de:db:cf:aa:ae:17:20:
49:f8:dc:21:db:f4:02:8e:0f:fe:2b:1b:ca:a6:45:
22:6a:75:a5:79:3b:c3:2d:31:0f:ba:d6:df:5f:d5:
74:82:a9:8b:65:69:3c:42:bc:8d:bb:41:de:80:7b:
75:46:2f:a7:b4:3d:ac:61:e9:ca:85:58:8c:3c:74:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:45:B8:26:AE:A2:99:2E:75:2D:E6:72:A6:96:17:5F:43:6D:48
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:ff:db:fa:b2:28:79:3c:59:ef:04:4f:75:5b:ee:6b:5d:
80:23:79:0b:b1:e9:9b:a3:55:25:db:3f:f4:a5:f4:92:4a:5c:
0b:3d:24:7d:6b:6f:cd:21:b0:87:23:32:01:a4:53:8a:76:01:
12:7a:a2:31:bd:18:b3:88:4d:87:14:4b:4e:29:0f:ca:90:db:
1b:64:e2:07:1e:12:8e:c7:00:8f:11:0d:db:b7:30:a1:ad:aa:
40:e9:4b:ca:78:45:40:c2:37:04:9a:d8:8d:4e:57:10:40:07:
74:0a:01:26:0c:d8:0f:aa:5a:07:e2:d5:2b:de:a2:e6:ef:70:
bb:ba:3a:dc:fc:8f:6d:ce:d9:fb:3f:13:33:3b:ee:44:6b:e1:
c3:ed:05:97:5d:89:f9:1a:3f:0d:d0:2d:68:73:bb:05:78:62:
25:95:12:b9:7a:51:c1:ff:21:9a:71:86:60:cb:5c:44:73:f9:
42:b0:cd:02:d1:79:83:c9:79:db:0b:06:d4:81:42:00:5c:88:
d6:30:cf:2e:04:3b:01:19:c4:1f:c5:a6:15:c6:25:3d:4f:df:
83:e0:a8:48:af:b1:5c:56:25:06:53:40:95:77:79:a3:c8:63:
f0:6f:b9:de:ad:b7:b3:53:3b:8c:1f:7d:e9:88:d1:9b:af:02:
3e:f2:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:25 2026 by rpki-client