
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: 1zJOL9/UxDWwi37Kyiuy/k/sdRf5BrPJQNhAd0Id1tY=
Subject key identifier: B8:52:F7:36:B6:E3:32:5E:D4:5B:7D:97:F9:64:9B:9F:79:5B:AE:BB
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 01A17D3C973B44D29BBF4AE412CBC7C888DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 115A
Signing time: Tue 27 Oct 2026 12:01:25 +0000
Manifest this update: Tue 27 Oct 2026 12:01:25 +0000
Manifest next update: Wed 28 Oct 2026 12:01:25 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: YKWjRh9mearDE+T4cf7AlJ0QXJbFS7P8wVKPSqkl5Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:97:3b:44:d2:9b:bf:4a:e4:12:cb:c7:c8:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Oct 27 12:01:25 2026 GMT
Not After : Oct 28 12:01:25 2026 GMT
Subject: CN=b852f736b6e3325ed45b7d97f9649b9f795baebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:73:3d:f4:7a:18:b7:83:b4:e9:da:8a:11:
09:c4:0c:59:5e:cd:ec:06:7b:f6:54:36:31:37:d8:
53:2a:2c:72:13:06:87:17:a3:2b:19:18:c8:ef:58:
99:7a:10:4f:b6:cd:76:90:97:a9:83:93:d9:b3:3d:
b7:3a:72:92:5f:eb:c6:e2:5e:ce:55:1c:9c:7b:4b:
25:78:34:79:a9:b9:c1:c5:bf:62:2b:ea:c1:d8:23:
31:ac:41:53:75:a8:26:4e:ed:5b:af:a2:57:1e:4b:
0a:5a:7d:1a:c4:43:21:10:4c:d7:22:93:42:e9:2e:
85:78:a3:72:70:19:9c:22:72:b2:65:2f:98:1f:c0:
b7:03:13:b6:7a:91:c5:95:b6:a3:02:8f:dc:ec:a9:
ed:b5:c8:2f:ef:ae:c6:0c:df:05:45:60:c7:03:b4:
fd:a4:de:e7:2b:ab:e4:0c:fe:63:c2:a1:82:92:f2:
fa:c2:28:52:27:4d:e6:89:09:89:13:c8:e4:bc:08:
84:99:d9:7b:62:72:e0:83:09:57:c2:a3:ab:b0:68:
1e:19:3d:d4:ef:05:cd:96:bb:9d:8d:64:f3:c1:0f:
e5:76:7d:9e:0b:90:0a:c8:78:4c:d8:68:0f:7f:6f:
ef:9d:0a:0a:69:14:3d:b4:03:62:74:4b:3c:f6:6f:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:F7:36:B6:E3:32:5E:D4:5B:7D:97:F9:64:9B:9F:79:5B:AE:BB
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:b4:64:93:96:52:d1:a8:fa:ca:83:3c:ab:d6:00:a9:d0:
2f:6d:3e:7c:c5:45:01:fa:cd:55:c5:cd:0c:f7:e7:b2:c0:90:
03:db:7c:f3:6e:dc:5e:a0:79:16:a3:af:ac:1e:02:35:1a:ce:
eb:4d:2d:3d:04:19:75:2f:46:d5:d3:d5:00:54:cf:3a:6e:98:
84:58:75:27:39:4d:1c:ad:30:55:90:13:c3:11:c0:33:64:3f:
0d:6a:56:1c:41:e4:57:8d:df:eb:61:98:8e:56:d0:ad:cb:0f:
a3:1e:9c:36:0a:5c:8d:d6:bd:b4:bc:dc:c3:12:d8:da:9c:e0:
66:1e:c2:ec:55:1f:e1:67:3f:4a:04:52:33:80:15:09:48:77:
43:d0:90:55:4c:fc:e8:90:c4:81:1f:06:67:90:29:8d:39:7f:
02:b4:c2:33:6c:8c:32:e9:41:74:8c:3d:09:77:51:e9:36:5a:
0b:a8:46:50:52:16:d3:18:42:56:7e:cd:58:0e:68:21:f6:32:
e1:9b:ef:7a:39:3d:b7:b7:db:b4:5c:ea:a5:67:41:8e:d8:8d:
83:71:88:80:ac:1c:72:5f:71:7e:42:33:65:52:ef:b1:ea:6f:
97:45:59:d3:b4:1d:d9:a3:d0:26:55:fd:05:b6:b9:c6:a2:6c:
b6:3b:7e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PJc7RNKbv0rkEsvHyIjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjYxMDI3MTIwMTI1WhcNMjYxMDI4MTIwMTI1WjAzMTEwLwYDVQQD
EyhiODUyZjczNmI2ZTMzMjVlZDQ1YjdkOTdmOTY0OWI5Zjc5NWJhZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOhzPfR6GLeDtOnaihEJxAxZXs3s
Bnv2VDYxN9hTKixyEwaHF6MrGRjI71iZehBPts12kJepg5PZsz23OnKSX+vG4l7O
VRyce0sleDR5qbnBxb9iK+rB2CMxrEFTdagmTu1br6JXHksKWn0axEMhEEzXIpNC
6S6FeKNycBmcInKyZS+YH8C3AxO2epHFlbajAo/c7Knttcgv767GDN8FRWDHA7T9
pN7nK6vkDP5jwqGCkvL6wihSJ03miQmJE8jkvAiEmdl7YnLggwlXwqOrsGgeGT3U
7wXNlrudjWTzwQ/ldn2eC5AKyHhM2GgPf2/vnQoKaRQ9tANidEs89m+5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhS9za24zJe1Ft9l/lkm595W667MB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3C0ZJOW
UtGo+sqDPKvWAKnQL20+fMVFAfrNVcXNDPfnssCQA9t8827cXqB5FqOvrB4CNRrO
600tPQQZdS9G1dPVAFTPOm6YhFh1JzlNHK0wVZATwxHAM2Q/DWpWHEHkV43f62GY
jlbQrcsPox6cNgpcjda9tLzcwxLY2pzgZh7C7FUf4Wc/SgRSM4AVCUh3Q9CQVUz8
6JDEgR8GZ5ApjTl/ArTCM2yMMulBdIw9CXdR6TZaC6hGUFIW0xhCVn7NWA5oIfYy
4Zvvejk9t7fbtFzqpWdBjtiNg3GIgKwccl9xfkIzZVLvsepvl0VZ07Qd2aPQJlX9
Bba5xqJstjt+bw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:31 2026 by rpki-client