Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: X4Rwb6wMSDjm6TjBcjb2wA9LyDPcw6Ubtm113SfvKo0=
Subject key identifier: 29:73:EE:5C:0E:9A:3B:56:1E:2A:65:59:28:92:8D:01:7F:8F:42:89
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 019D38656F5176737DEF4B6D64236D2B0DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: ez-_2yXQINxTXFqz70FZ9NoROGQ.roa (hash: olw+Bd9k/ZVI7cVK/9gF+FMThvydmQHcFJPrW3uNy3k=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: oRvAK0j/jO6FCVBV3REnZGScFNMQKDvxyRHpW4hz2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6f:51:76:73:7d:ef:4b:6d:64:23:6d:2b:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=2973ee5c0e9a3b561e2a655928928d017f8f4289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:d3:0b:2a:0f:92:e6:3b:f0:c9:a7:48:82:
20:e1:38:de:6f:e1:2f:89:64:44:5c:43:6a:4d:6c:
ef:1b:8f:3c:36:bc:a8:d3:97:1a:d7:be:99:03:25:
d8:f8:59:d0:fb:c5:c4:24:4b:ca:a4:51:c5:51:ce:
87:31:68:21:b6:59:b1:64:61:f8:a7:99:74:0f:de:
b3:87:62:a8:ae:2e:9e:17:ef:46:d9:3d:bc:15:fb:
4a:62:83:f7:89:3e:bb:0e:1a:13:56:6e:c9:fe:11:
53:31:43:d8:15:bb:a2:d1:a0:c0:f0:0f:5b:9b:f4:
bc:65:47:09:6b:66:d0:ca:df:d3:10:43:48:c8:24:
17:40:87:69:75:de:b2:c0:f6:88:4e:3e:10:25:b7:
a5:c9:2c:32:0f:bb:d2:12:4e:73:b4:31:12:56:37:
40:e0:8b:33:5b:bc:62:81:20:8e:ff:9b:d4:81:61:
67:0e:67:7b:d3:f9:55:02:09:5d:9c:6f:b2:ea:9c:
05:e5:a3:77:44:94:8b:82:50:90:68:fd:39:cd:bc:
19:d7:c8:d1:6f:a0:26:07:c0:5e:cd:c1:aa:ea:cb:
03:75:48:bf:41:20:08:31:e3:0f:e1:a9:1c:d8:5a:
23:36:72:5b:9f:17:e1:f2:39:d1:89:2d:b7:2e:2f:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:EE:5C:0E:9A:3B:56:1E:2A:65:59:28:92:8D:01:7F:8F:42:89
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b6:f4:ff:37:a1:f5:70:35:86:5b:7c:a6:26:a0:16:fd:25:
aa:05:ad:4e:77:f9:72:5d:0b:49:e8:5b:cc:7d:c6:1e:03:6b:
83:fb:56:63:f0:59:12:de:e3:9c:28:71:e3:cd:96:43:a3:5a:
9d:46:c7:2e:ff:4e:53:a0:e3:d7:c5:c9:97:8d:c8:40:c2:ce:
20:81:3e:74:ee:8e:92:ad:05:cf:9f:76:9b:50:a2:7f:58:75:
5f:8d:a7:31:c5:0e:02:4e:04:41:52:65:f3:d4:4d:3f:b5:1e:
25:c9:0d:ad:b5:04:3e:ac:cd:ab:e9:ab:c7:92:4e:08:36:61:
14:9a:f1:b7:76:95:e2:46:5a:d3:8a:67:ac:c7:29:ed:f6:69:
dd:cb:f2:24:0b:e6:b1:2d:76:45:c2:d4:e3:b5:97:72:3a:89:
4f:fd:65:e1:ec:75:55:f7:a8:ef:82:6d:77:57:55:b9:5a:37:
ba:aa:ab:fb:7e:36:45:e4:bb:4a:e2:87:af:70:cf:2a:c2:7a:
a2:28:02:8b:c7:d5:e0:72:69:fa:96:ca:1f:0e:23:0f:10:a8:
1f:3b:ce:77:e1:3f:27:e0:f3:9e:bf:bf:90:a5:01:12:6f:76:
12:36:19:84:71:df:60:4e:0e:1a:f4:53:45:ef:95:ff:09:3a:
3f:39:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:49 2026 by rpki-client