Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: VrSPlLObk2iUDJvpihhUlBt+WYm1eBWRg+ySqf391is=
Subject key identifier: 3E:A7:E6:55:9D:E3:7B:8D:5E:31:57:82:4C:0A:5E:0F:A3:DC:D5:EF
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019CABA20572028920DED341DDD31B6327DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: uzcNJuEqDQPZBMiqTx4Sik8Nl8RMGbjDyEZKT50akLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:05:72:02:89:20:de:d3:41:dd:d3:1b:63:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=3ea7e6559de37b8d5e3157824c0a5e0fa3dcd5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:87:ed:e2:f8:f1:35:9a:a1:fe:83:cd:bc:
b1:4e:60:e8:a5:be:51:eb:e6:a3:b6:30:73:5d:73:
f8:fa:c9:ee:9e:89:a9:54:61:35:3c:31:98:42:2a:
de:d7:af:6f:32:be:79:6d:36:97:f7:8e:38:f3:26:
c8:4f:e5:72:5d:cf:eb:39:16:6c:a3:af:d4:00:34:
fe:6e:6c:a9:91:9b:9d:e7:3b:1a:d2:b6:f4:d6:86:
d8:0c:73:4f:15:41:0b:a1:fe:c3:3a:77:c5:7c:35:
b5:ce:75:46:3b:3e:2e:fd:9b:b9:df:ce:84:04:41:
45:af:c9:a8:53:e1:fe:86:f0:d4:f9:cb:3d:fb:4b:
02:f9:39:c3:a8:9c:a1:94:88:60:ca:66:3c:21:0e:
4a:b7:4f:45:7c:02:da:d2:5f:0e:d2:c2:a9:74:94:
02:23:a5:15:cd:f4:b5:44:ab:a3:a5:0a:07:51:9b:
e0:5f:7f:2f:ba:c9:25:4c:4c:78:17:64:93:f1:a7:
b6:32:66:1c:aa:1d:ac:41:79:10:25:6b:28:50:a3:
11:7c:cd:67:69:ce:cb:86:8a:93:a2:1f:1e:b6:00:
f9:c5:d9:02:45:d9:8e:15:ae:91:57:15:32:5c:f4:
68:d4:fd:66:a2:bd:24:56:9c:71:43:d2:24:06:46:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:E6:55:9D:E3:7B:8D:5E:31:57:82:4C:0A:5E:0F:A3:DC:D5:EF
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:ae:09:6d:23:bb:4a:fb:63:49:cd:1a:3d:d0:4f:d9:86:
b5:2a:72:0b:63:97:0a:97:01:12:93:89:20:ca:76:65:bb:1a:
93:34:11:02:d9:b1:40:12:50:49:0e:db:62:61:d7:d4:57:89:
a9:41:5c:84:0c:23:ab:76:ee:d8:24:4c:8a:67:03:50:6c:4e:
cb:14:6c:7d:6a:ea:46:ec:23:47:cb:9e:c3:51:e7:e0:5d:36:
7e:93:03:2e:7e:4d:d7:50:86:23:77:27:06:01:8a:ac:d7:b5:
39:35:8c:26:15:41:34:c2:a3:2f:a8:e2:68:b7:8f:80:3f:9e:
7b:3f:d2:67:d8:5b:0f:d8:67:98:0a:a5:93:ec:d3:6d:10:30:
24:7d:76:61:51:ee:09:9d:21:35:9a:c8:26:48:53:d7:da:e8:
8f:05:9d:22:55:1c:bc:39:bf:39:72:80:99:99:a8:1b:28:10:
3f:17:e2:30:db:28:54:40:fb:6c:4b:8c:ff:bb:58:e7:63:32:
ac:62:8d:72:50:70:f7:d3:81:29:aa:0b:93:7f:50:f8:cb:32:
cb:35:70:fb:3e:65:87:b1:01:51:07:a9:d2:b2:af:65:21:d3:
fd:c4:a0:ce:f3:09:41:be:3f:f7:6e:87:fd:6d:5b:3c:72:b9:
8e:39:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:00 2026 by rpki-client