Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: XKkKNN1lU4vVkYZztrOUYnRyeq1u2ap7BT11iewsfhc=
Subject key identifier: 1A:8F:D9:7D:44:72:92:43:BF:43:EF:4A:9B:79:FF:9D:AC:62:E7:43
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019FA0A898B367261F75581D6E879E26346B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 23:00:31 +0000
Manifest this update: Sun 26 Jul 2026 23:00:31 +0000
Manifest next update: Mon 27 Jul 2026 23:00:31 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: AnQVHcmSW48fjYb5K49oYvNl7TmZ5kT3xorW/3xXf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:98:b3:67:26:1f:75:58:1d:6e:87:9e:26:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jul 26 23:00:31 2026 GMT
Not After : Jul 27 23:00:31 2026 GMT
Subject: CN=1a8fd97d44729243bf43ef4a9b79ff9dac62e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:31:a7:fc:ef:09:63:7d:d0:59:e6:78:0d:
fb:2d:ec:b5:40:2d:bd:0b:98:ea:67:3a:f9:5f:af:
d7:ce:d4:93:aa:9e:d2:0b:5d:f9:ce:44:f5:22:ee:
5f:6e:c1:c1:ac:5c:5a:37:7b:39:97:7f:1c:ad:f3:
ab:3e:aa:55:5c:36:f5:0a:2f:0c:1e:d7:f3:a8:78:
3a:e1:8b:62:c2:8d:4a:5f:fd:02:85:99:9f:3a:43:
6c:bd:cf:af:de:72:68:f4:06:8c:3a:89:67:27:0d:
e3:f4:65:91:a9:8b:80:5e:25:61:f4:45:ab:46:d7:
ca:1f:b2:7e:2e:0f:90:8a:09:65:c1:97:25:b5:75:
da:da:60:ae:1f:07:57:66:78:9f:5f:b5:01:d5:19:
28:91:03:5c:ed:c1:00:08:b7:0a:21:bc:c4:f8:70:
64:d2:f6:51:61:6d:6b:50:64:d6:76:bd:f5:ac:e2:
c3:e3:91:46:b1:79:12:6b:af:a7:a8:82:64:47:14:
6d:02:c0:f0:ec:f2:e9:f4:ba:45:bb:12:ac:17:15:
e2:fe:3e:9c:af:9b:d3:6b:e2:89:f6:00:81:27:41:
f0:a0:bd:fc:d6:66:f4:b1:05:a1:4b:1d:57:98:09:
73:c1:72:73:4a:d4:75:de:ef:a5:d5:12:6f:00:f6:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8F:D9:7D:44:72:92:43:BF:43:EF:4A:9B:79:FF:9D:AC:62:E7:43
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:23:f7:27:2b:da:9c:05:ca:d7:b0:f2:89:59:d7:e9:b1:
c2:27:43:a2:65:ed:97:55:c4:d4:0d:0b:05:72:89:2f:fc:20:
93:80:6d:79:d7:f6:a6:1f:17:35:82:fc:cb:0b:f2:c1:38:b6:
dc:b3:27:32:53:2a:e7:dd:ab:a9:6f:63:63:71:01:1a:5b:ef:
69:97:43:bd:7d:26:d8:e7:60:da:ab:af:6f:5e:b5:4a:5f:5c:
99:8e:c8:c3:6f:74:14:c4:c8:fd:c5:51:3f:95:8f:c9:fa:08:
5e:61:4c:ae:4d:1f:eb:73:4c:d5:ba:26:78:9e:d1:4d:c1:4c:
32:40:1d:d7:fc:25:36:df:de:33:22:58:c5:a1:7e:ce:d6:19:
ea:05:c0:47:b9:37:30:f2:aa:37:df:8f:8a:f9:74:26:c2:4f:
64:3e:e1:ea:09:d3:be:70:8e:ce:d8:93:ca:b3:5d:00:28:e3:
9a:6e:f2:16:5e:e1:b5:7b:8b:ff:8a:1b:ca:5b:7a:c6:9c:62:
c1:58:36:57:85:c3:71:6f:30:af:12:ec:db:1f:81:85:64:60:
75:43:b3:f5:a9:a8:ab:39:ec:ea:e7:2a:40:7f:9e:20:5a:43:
5b:b4:ad:12:53:29:ff:a7:6e:f9:46:03:0d:90:70:a5:5f:ca:
e1:a1:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:43 2026 by rpki-client