Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: UP09xRN/hvcXTV92YOd8w+vvh1bNngtVXo7VNv/xQns=
Subject key identifier: 8A:A7:9E:BE:6F:89:E6:24:C6:37:E1:A2:B0:A7:30:83:64:92:12:39
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019CE5239DB8A4B7FD201EE4A931F9D17A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0EF9
Signing time: Fri 13 Mar 2026 03:00:42 +0000
Manifest this update: Fri 13 Mar 2026 03:00:42 +0000
Manifest next update: Sat 14 Mar 2026 03:00:42 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: BwSqM+Odd4UrafbUHNJ6hBRYj2YkNMGOcHk8caU9jUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:9d:b8:a4:b7:fd:20:1e:e4:a9:31:f9:d1:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Mar 13 03:00:42 2026 GMT
Not After : Mar 14 03:00:42 2026 GMT
Subject: CN=8aa79ebe6f89e624c637e1a2b0a7308364921239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:55:da:11:0b:d4:b5:d6:3a:59:df:ce:c2:
de:a1:99:af:d7:0f:28:41:f1:f0:02:1c:e3:33:d3:
54:7a:d4:17:85:6b:57:00:da:98:9e:44:98:4a:78:
3c:65:9f:b3:03:e2:39:b3:22:10:5a:19:d6:ad:d5:
e1:e7:90:21:84:c1:69:43:cb:9a:f7:d9:c0:60:07:
d5:72:d9:b5:57:ff:b6:5c:41:6b:a3:49:c7:fc:28:
d8:31:89:2c:f6:d8:46:0c:0e:ed:93:47:20:b3:03:
84:69:fc:45:d4:8b:36:db:23:66:47:df:16:ae:87:
54:b2:c8:56:c0:ac:17:00:81:5c:61:5b:61:3d:09:
b3:61:72:c2:87:81:00:1e:12:6f:6f:a0:0f:5b:77:
98:a0:f7:ba:97:21:dc:be:58:57:f7:cb:03:0c:e8:
15:29:3d:50:47:4f:c5:bd:2f:10:62:e4:72:20:5a:
fe:0c:55:09:6a:5f:fe:1d:6c:7b:5a:52:28:cf:b3:
e8:04:eb:39:7f:14:5e:54:b4:1e:61:63:e8:ff:81:
92:f3:f2:94:f0:ef:26:9f:49:2c:f1:25:42:cc:c0:
d3:05:36:c7:c6:8a:c2:97:97:f5:a9:57:be:86:aa:
a7:53:b4:eb:d2:ad:c7:a9:c1:95:a8:f2:93:c3:a5:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:9E:BE:6F:89:E6:24:C6:37:E1:A2:B0:A7:30:83:64:92:12:39
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:f1:60:d8:a9:8f:24:14:0e:63:7e:f5:50:db:51:cd:a2:
d2:64:10:33:e0:bf:bd:a0:0f:b7:81:f0:b0:53:98:17:5c:8d:
af:63:d5:46:2c:28:e7:2f:8e:68:23:1b:39:59:58:95:08:09:
f5:84:cf:66:30:dc:8e:8f:bd:17:4e:10:da:41:36:ad:df:fb:
ed:82:36:da:c3:43:4d:56:ce:58:bf:72:fd:9d:bb:c4:7d:ae:
ca:ba:82:45:03:93:62:9d:7c:30:a7:b7:8a:fd:ae:42:a5:3c:
78:85:5d:6c:42:12:1e:88:f0:3f:04:58:df:3a:c1:13:6a:99:
c6:2d:a5:82:51:c0:3c:fa:9c:59:2d:ef:5d:71:57:0b:93:9a:
3d:d4:cc:9b:5f:dc:f8:aa:46:4a:62:38:e6:c2:23:a3:4c:5d:
01:80:2d:96:86:fe:cb:2d:53:1b:72:0e:bb:43:5d:fe:09:d5:
4b:2e:65:56:03:b1:64:67:49:cb:ba:77:84:f6:6c:89:93:f1:
22:c2:54:00:0b:1c:51:49:0d:60:3c:23:fc:9d:a0:35:ae:e4:
c9:80:48:59:85:77:b8:8f:21:91:06:62:7c:82:5c:86:53:e4:
fa:a9:44:95:ce:31:e7:c4:e4:a6:73:cb:00:88:d7:70:bd:85:
54:d7:be:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI524pLf9IB7kqTH50XphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjYwMzEzMDMwMDQyWhcNMjYwMzE0MDMwMDQyWjAzMTEwLwYDVQQD
Eyg4YWE3OWViZTZmODllNjI0YzYzN2UxYTJiMGE3MzA4MzY0OTIxMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5JV2hEL1LXWOlnfzsLeoZmv1w8o
QfHwAhzjM9NUetQXhWtXANqYnkSYSng8ZZ+zA+I5syIQWhnWrdXh55AhhMFpQ8ua
99nAYAfVctm1V/+2XEFro0nH/CjYMYks9thGDA7tk0cgswOEafxF1Is22yNmR98W
rodUsshWwKwXAIFcYVthPQmzYXLCh4EAHhJvb6APW3eYoPe6lyHcvlhX98sDDOgV
KT1QR0/FvS8QYuRyIFr+DFUJal/+HWx7WlIoz7PoBOs5fxReVLQeYWPo/4GS8/KU
8O8mn0ks8SVCzMDTBTbHxorCl5f1qVe+hqqnU7Tr0q3HqcGVqPKTw6U0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqnnr5vieYkxjfhorCnMINkkhI5MB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg/xYNip
jyQUDmN+9VDbUc2i0mQQM+C/vaAPt4HwsFOYF1yNr2PVRiwo5y+OaCMbOVlYlQgJ
9YTPZjDcjo+9F04Q2kE2rd/77YI22sNDTVbOWL9y/Z27xH2uyrqCRQOTYp18MKe3
iv2uQqU8eIVdbEISHojwPwRY3zrBE2qZxi2lglHAPPqcWS3vXXFXC5OaPdTMm1/c
+KpGSmI45sIjo0xdAYAtlob+yy1TG3IOu0Nd/gnVSy5lVgOxZGdJy7p3hPZsiZPx
IsJUAAscUUkNYDwj/J2gNa7kyYBIWYV3uI8hkQZifIJchlPk+qlElc4x58TkpnPL
AIjXcL2FVNe+Gg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:03 2026 by rpki-client