Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: PcvhHURDkiua6bGfr+aqwTxiLOGnOU/J+YwVPsLtevk=
Subject key identifier: FA:FF:A9:87:F2:7D:BA:A6:CE:7E:07:CA:1E:E8:B3:8D:21:BA:9D:3E
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019EC0A3D76A8B5796F3B3CC48A1AA45C9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:23 +0000
Manifest this update: Sat 13 Jun 2026 11:00:23 +0000
Manifest next update: Sun 14 Jun 2026 11:00:23 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: DlS4XOdsjDCCWXp1O+0IXTkodHqmIdmvDtVAOLh2rYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:d7:6a:8b:57:96:f3:b3:cc:48:a1:aa:45:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jun 13 11:00:23 2026 GMT
Not After : Jun 14 11:00:23 2026 GMT
Subject: CN=faffa987f27dbaa6ce7e07ca1ee8b38d21ba9d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:cf:b4:15:18:d4:22:a6:6b:d7:30:64:c7:
02:7c:bf:7a:5b:3f:5c:34:00:21:2d:a3:7a:68:6e:
d9:44:92:d0:84:a5:4e:9c:df:96:82:5a:74:ff:b8:
f2:af:a5:e2:c3:bb:b6:dc:43:bc:e9:e2:ae:9b:f1:
03:07:ca:23:4c:ab:b7:8a:6e:b6:11:bd:60:a5:fa:
75:33:0f:3c:71:82:f5:b4:ec:25:9e:f0:c7:b9:6c:
8f:60:2a:9d:ec:a8:83:72:c3:03:dd:73:72:e7:c0:
11:42:55:a4:af:04:92:20:80:f7:a1:4c:a5:68:fa:
28:77:6e:1a:dd:71:e3:6e:d1:bf:31:3b:06:4c:42:
4e:09:b7:94:0b:c8:ea:2d:6c:f2:1c:06:ff:55:02:
5e:1f:68:06:86:5a:e1:4f:ae:5a:49:0c:c5:f0:54:
7f:d9:80:76:9e:ad:f5:79:92:02:96:8b:89:2c:b4:
ec:65:2b:5f:1a:e8:27:4a:d0:38:6b:7a:22:0c:f1:
88:5a:c5:08:2d:cf:a9:38:5e:f4:24:9a:71:09:33:
77:aa:51:f0:4b:75:2a:08:17:f1:69:b8:25:ac:bc:
99:dc:ee:1b:7d:23:8f:4d:75:11:1e:98:e1:c8:6c:
36:6d:81:bd:86:32:b3:6b:f2:b9:81:72:64:07:77:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:A9:87:F2:7D:BA:A6:CE:7E:07:CA:1E:E8:B3:8D:21:BA:9D:3E
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:2f:69:3c:77:28:a7:1e:7a:60:af:df:31:c8:0f:90:73:
62:4a:08:b9:09:86:f3:73:9c:5d:13:cf:cb:16:c1:2a:8b:37:
0c:90:e3:10:fd:02:86:5f:31:75:4c:3e:ad:31:d0:03:0c:c2:
0c:4a:55:21:c8:4e:26:54:4c:f7:4c:9f:3a:96:cd:c6:58:0e:
7b:9d:b2:8d:e7:3e:a7:76:f8:46:17:fe:9e:84:bc:90:fa:88:
cc:30:fe:74:b3:97:a5:f3:28:f2:a7:a2:3d:a6:cd:09:8a:0d:
50:20:20:2a:0f:b4:ec:e3:3f:8b:f8:59:b5:cc:1a:5f:b3:c6:
8c:77:88:64:84:c5:c1:0e:3e:2e:a5:45:33:14:05:bf:8b:5a:
3b:e7:af:4a:37:22:79:26:18:16:4e:5a:5f:48:3c:71:57:9f:
6a:59:53:b6:fe:49:c0:6b:0d:f8:56:e9:6c:35:21:a2:bb:f9:
78:79:d0:c6:8d:28:d3:36:cb:4c:c7:0b:9d:48:bd:45:c0:bf:
14:02:48:96:0d:bb:c8:08:d3:cb:1a:3f:d3:be:c6:92:f0:83:
cc:51:4c:bc:4d:bf:1d:04:7d:87:0a:74:73:b8:ad:72:64:23:
4c:92:39:a3:f5:e6:7c:f6:a3:49:5d:12:1e:48:60:aa:bd:f4:
d0:76:3c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao9dqi1eW87PMSKGqRcnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm
NTM4NTMwHhcNMjYwNjEzMTEwMDIzWhcNMjYwNjE0MTEwMDIzWjAzMTEwLwYDVQQD
EyhmYWZmYTk4N2YyN2RiYWE2Y2U3ZTA3Y2ExZWU4YjM4ZDIxYmE5ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrHPtBUY1CKma9cwZMcCfL96Wz9c
NAAhLaN6aG7ZRJLQhKVOnN+Wglp0/7jyr6Xiw7u23EO86eKum/EDB8ojTKu3im62
Eb1gpfp1Mw88cYL1tOwlnvDHuWyPYCqd7KiDcsMD3XNy58ARQlWkrwSSIID3oUyl
aPood24a3XHjbtG/MTsGTEJOCbeUC8jqLWzyHAb/VQJeH2gGhlrhT65aSQzF8FR/
2YB2nq31eZIClouJLLTsZStfGugnStA4a3oiDPGIWsUILc+pOF70JJpxCTN3qlHw
S3UqCBfxabglrLyZ3O4bfSOPTXURHpjhyGw2bYG9hjKza/K5gXJkB3erZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr/qYfyfbqmzn4Hyh7os40hup0+MB8GA1UdIwQY
MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct
YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx
LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtIvaTx3
KKceemCv3zHID5BzYkoIuQmG83OcXRPPyxbBKos3DJDjEP0Chl8xdUw+rTHQAwzC
DEpVIchOJlRM90yfOpbNxlgOe52yjec+p3b4Rhf+noS8kPqIzDD+dLOXpfMo8qei
PabNCYoNUCAgKg+07OM/i/hZtcwaX7PGjHeIZITFwQ4+LqVFMxQFv4taO+evSjci
eSYYFk5aX0g8cVefallTtv5JwGsN+FbpbDUhorv5eHnQxo0o0zbLTMcLnUi9RcC/
FAJIlg27yAjTyxo/077GkvCDzFFMvE2/HQR9hwp0c7itcmQjTJI5o/XmfPajSV0S
Hkhgqr300HY81g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:38 2026 by rpki-client