Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: AL+2iML4z0lcSo8yquY1zO0Ab5c9eNdiExj4D15fTr0=
Subject key identifier: 75:17:EB:1B:F3:04:22:0B:9A:D4:BB:7E:DA:03:D2:A8:EC:26:0B:A4
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019D992BC6D9B0944E618C7F2BE6C091E179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:01:16 +0000
Manifest this update: Fri 17 Apr 2026 02:01:16 +0000
Manifest next update: Sat 18 Apr 2026 02:01:16 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: zTyc2/aSBZOPgxBzzO/4Vd9g1nzVNpeGGiIp0W0skvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:c6:d9:b0:94:4e:61:8c:7f:2b:e6:c0:91:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Apr 17 02:01:16 2026 GMT
Not After : Apr 18 02:01:16 2026 GMT
Subject: CN=7517eb1bf304220b9ad4bb7eda03d2a8ec260ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:84:4c:a5:2c:84:d1:8f:95:c6:79:6f:8e:
d8:ea:0e:ba:ec:0c:c4:89:bc:f8:e1:38:ee:d2:d4:
95:73:69:a7:06:b7:99:6b:2f:93:75:9f:06:2b:48:
f0:3a:2d:46:fc:e1:4b:ea:93:89:64:62:e2:8f:96:
71:a4:76:08:9c:82:93:82:c6:72:f5:6a:0e:ba:2b:
ea:3e:5e:98:aa:0e:2a:d9:6f:84:24:7e:04:c9:25:
dc:1e:15:21:6a:e6:83:5b:e2:52:38:74:bf:17:28:
7f:48:04:5c:dc:0c:d6:0d:d4:c5:87:a8:a5:50:67:
df:c6:b3:a8:f5:cb:24:c9:a6:ff:16:be:a9:f5:95:
53:de:d1:f5:c7:ee:db:17:d9:49:46:32:39:d4:e8:
5e:b2:1b:a9:9c:c8:b5:b2:c2:77:8e:82:67:40:a2:
39:8d:9a:ba:e1:e2:1d:ae:1d:16:34:ec:28:c7:f0:
e7:13:54:b7:17:29:f8:2c:c9:1a:8f:3d:46:e4:3f:
38:bc:0a:82:29:71:1b:48:8d:d3:fc:7b:76:07:65:
bb:52:48:ff:3b:67:e7:51:a0:4b:b9:bb:e6:8d:73:
17:aa:1a:03:b9:e0:8b:c5:16:a8:1c:ce:9b:11:c1:
0f:01:71:26:83:e2:55:ba:b0:2e:16:a4:86:c8:d7:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:EB:1B:F3:04:22:0B:9A:D4:BB:7E:DA:03:D2:A8:EC:26:0B:A4
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b4:1d:f1:f5:3a:47:86:ad:99:14:2d:44:a9:67:83:96:03:
6b:c1:3c:18:a0:90:ab:30:be:12:38:77:86:34:46:61:de:79:
11:a3:ff:e9:03:69:53:e7:b9:6c:90:a1:3b:1b:75:24:0d:ed:
1c:46:54:46:01:de:31:df:29:bb:7d:5f:67:78:44:48:68:36:
ef:e1:08:44:87:2b:11:09:a4:93:25:14:9e:bd:d2:bf:81:15:
fd:2c:d4:57:bc:c2:20:6a:41:9d:69:3b:a7:f9:a6:ac:aa:6b:
fa:a7:94:f8:eb:d5:bf:ab:23:c6:4d:9f:9c:b7:99:fb:a9:ed:
0e:73:2a:b1:2a:3c:77:e2:04:8c:04:ad:63:b2:ec:06:ea:e5:
36:39:39:2e:d7:f6:62:23:95:7a:07:6a:77:5a:76:d8:56:13:
b0:5b:0b:32:e0:7a:6d:3d:19:7c:1e:73:e5:22:83:46:a0:ff:
ec:25:40:bf:fa:69:51:66:8d:0c:60:8e:9a:d2:33:02:b5:1c:
1d:0f:59:e7:00:b5:d0:5c:1a:5c:82:83:27:2f:a2:da:ca:c9:
97:7a:b0:13:8c:b6:f9:ad:ed:d2:a1:3f:fd:03:3f:c8:00:4d:
c8:b0:55:7b:b1:37:2a:63:05:a2:31:68:58:7b:a2:39:81:fa:
b3:ed:fb:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK8bZsJROYYx/K+bAkeF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm
NTM4NTMwHhcNMjYwNDE3MDIwMTE2WhcNMjYwNDE4MDIwMTE2WjAzMTEwLwYDVQQD
Eyg3NTE3ZWIxYmYzMDQyMjBiOWFkNGJiN2VkYTAzZDJhOGVjMjYwYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPaETKUshNGPlcZ5b47Y6g667AzE
ibz44Tju0tSVc2mnBreZay+TdZ8GK0jwOi1G/OFL6pOJZGLij5ZxpHYInIKTgsZy
9WoOuivqPl6Yqg4q2W+EJH4EySXcHhUhauaDW+JSOHS/Fyh/SARc3AzWDdTFh6il
UGffxrOo9cskyab/Fr6p9ZVT3tH1x+7bF9lJRjI51OheshupnMi1ssJ3joJnQKI5
jZq64eIdrh0WNOwox/DnE1S3Fyn4LMkajz1G5D84vAqCKXEbSI3T/Ht2B2W7Ukj/
O2fnUaBLubvmjXMXqhoDueCLxRaoHM6bEcEPAXEmg+JVurAuFqSGyNdIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUX6xvzBCILmtS7ftoD0qjsJgukMB8GA1UdIwQY
MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct
YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx
LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbQd8fU6
R4atmRQtRKlng5YDa8E8GKCQqzC+Ejh3hjRGYd55EaP/6QNpU+e5bJChOxt1JA3t
HEZURgHeMd8pu31fZ3hESGg27+EIRIcrEQmkkyUUnr3Sv4EV/SzUV7zCIGpBnWk7
p/mmrKpr+qeU+OvVv6sjxk2fnLeZ+6ntDnMqsSo8d+IEjAStY7LsBurlNjk5Ltf2
YiOVegdqd1p22FYTsFsLMuB6bT0ZfB5z5SKDRqD/7CVAv/ppUWaNDGCOmtIzArUc
HQ9Z5wC10FwaXIKDJy+i2srJl3qwE4y2+a3t0qE//QM/yABNyLBVe7E3KmMFojFo
WHuiOYH6s+37eA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:48 2026 by rpki-client