Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: YA7xFEOwwdBrksTFCpwoYuatuH0gbnOkc0QWuDnWf1E=
Subject key identifier: 9B:64:7B:E5:9A:63:31:BF:18:BA:6D:BC:86:12:35:71:07:31:AA:2E
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019DCED09AD308826A01AACD259D24BE90B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0F72
Signing time: Mon 27 Apr 2026 12:01:10 +0000
Manifest this update: Mon 27 Apr 2026 12:01:10 +0000
Manifest next update: Tue 28 Apr 2026 12:01:10 +0000
Files and hashes: 1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: o+2HKQ6WK5hzGl+jTHPU3lE9rE2MIeg46BaonCv4IKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:9a:d3:08:82:6a:01:aa:cd:25:9d:24:be:90:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Apr 27 12:01:10 2026 GMT
Not After : Apr 28 12:01:10 2026 GMT
Subject: CN=9b647be59a6331bf18ba6dbc861235710731aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:23:99:26:f1:cc:49:93:1e:f7:0d:0c:a2:
88:a3:2a:93:c6:54:f3:79:c5:1b:df:15:ff:54:ba:
b5:6f:0d:26:39:99:a0:34:19:ef:2f:3e:fe:ea:f5:
00:8f:8b:73:c3:19:00:e1:ed:56:4f:cc:01:24:fa:
f0:d2:ec:9e:1e:ff:d2:d3:a1:f7:0e:3c:9c:4e:d4:
62:f0:d0:aa:50:da:72:ed:c4:38:b6:1a:f9:14:5e:
ff:65:1d:0d:5f:2a:46:c5:4d:9d:4b:1a:1d:84:3a:
74:3c:ee:e1:da:ad:f5:46:8b:76:0e:ef:b0:aa:e3:
fe:6f:6c:be:47:4f:37:80:ff:31:25:ba:54:dc:f0:
e4:42:2f:6e:32:93:93:f4:76:37:7c:be:25:fc:c1:
06:26:25:2c:e8:82:af:b0:63:34:20:89:ad:2c:54:
78:4d:f6:25:33:1a:3a:6d:a5:c2:9c:81:e2:16:ad:
06:9a:b7:97:c7:9c:ed:c9:51:3a:10:49:7b:b0:92:
7f:ef:7d:69:b0:4d:e7:a9:ec:59:b9:53:ca:10:58:
21:4c:4c:a7:a4:89:90:f2:fe:57:b1:52:f7:d1:eb:
fa:4f:e5:6d:51:39:11:8b:3e:78:28:60:f1:da:a6:
cd:eb:c2:42:ad:5b:58:c5:e4:23:d1:ea:1a:86:81:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:7B:E5:9A:63:31:BF:18:BA:6D:BC:86:12:35:71:07:31:AA:2E
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:00:a8:d1:64:6a:53:d8:ef:8a:4d:19:a5:74:4b:c2:dc:
8f:aa:2d:60:aa:61:80:16:ef:84:e1:8b:ba:2e:03:74:bb:b6:
a1:1a:ee:fa:28:31:1f:35:f1:39:c1:40:99:27:1a:15:cc:7d:
f6:82:f9:65:8f:7c:fe:d5:b5:a8:9b:d8:db:a7:f6:14:01:17:
e0:63:ef:b3:62:ea:34:63:6b:cd:cf:35:ae:31:c1:8f:11:d3:
ee:20:53:b3:92:24:2a:38:45:ce:47:b1:b2:bc:c6:d7:86:e2:
1c:93:a2:b0:c4:57:bd:0c:71:38:f9:05:52:5a:47:11:ae:f2:
26:77:32:a8:c0:8e:ba:b2:ae:f9:57:4f:12:81:0d:1c:e4:3d:
64:79:be:f0:d5:2d:c1:09:c1:74:3d:2f:e5:2a:c6:46:97:88:
73:fd:92:59:56:21:08:68:87:4f:25:25:c2:29:c0:ab:ac:8a:
05:08:ff:b5:c6:f6:0f:e5:1f:1a:74:00:e4:cc:ec:ed:96:59:
e7:4a:7f:3e:79:c6:51:4f:57:7b:d0:fd:95:8c:ee:4e:49:51:
56:e0:46:cd:4c:03:e0:d8:87:c8:24:a7:2b:91:b3:9e:23:5c:
76:ce:cd:3c:dd:03:d1:01:5c:a4:09:12:c7:15:33:4a:93:b6:
fd:62:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:45 2026 by rpki-client