Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: fmevgQBBBOEtvXp2rEVy9F/LkGIu5fra/2n+C30Y0ZU=
Subject key identifier: 7A:A2:E1:65:AA:85:3A:8A:CC:15:75:53:78:7D:C6:6A:97:29:E4:A0
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01A18751B00EB4CB5AAAF3EA9069675542C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 11:00:39 +0000
Manifest this update: Thu 29 Oct 2026 11:00:39 +0000
Manifest next update: Fri 30 Oct 2026 11:00:39 +0000
Files and hashes: 1: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (hash: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=)
2: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (hash: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM=)
3: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: Fl1Mh7EiJuCyJgh2wuBaB0VcKieviuxKnIq6quo4dVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:b0:0e:b4:cb:5a:aa:f3:ea:90:69:67:55:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Oct 29 11:00:39 2026 GMT
Not After : Oct 30 11:00:39 2026 GMT
Subject: CN=7aa2e165aa853a8acc157553787dc66a9729e4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:f4:4d:bb:46:4f:5b:0d:9e:70:4f:96:10:
80:4f:8b:e5:5c:2c:68:a7:09:69:b2:d1:72:f7:1d:
b4:c0:92:bc:ac:0a:dd:c6:6b:db:c6:b8:54:f4:ae:
eb:f5:04:5e:a2:29:d1:dd:7d:de:8f:44:7c:78:a4:
f4:1e:83:e0:a2:09:72:b1:e2:91:0f:e1:af:ca:20:
b9:bf:43:9a:71:9c:0c:bf:14:b2:b7:d1:33:08:09:
73:10:19:d6:ac:4c:d8:47:10:36:8d:9f:97:4e:50:
01:13:db:51:1c:35:bf:e0:8c:97:8f:19:54:cd:2b:
b6:3c:ef:d7:11:c9:c8:c4:20:cc:18:7e:6b:de:4e:
4d:2c:cf:ff:c9:26:9c:38:f0:75:09:b2:61:54:9c:
35:03:bc:3a:cd:59:77:a5:0f:23:04:2d:d7:da:9a:
45:85:8d:1a:0e:83:9d:26:e9:d2:55:50:43:b5:bb:
42:5d:4a:2c:92:6c:28:31:12:3b:ac:7d:35:ed:9e:
74:87:d8:1c:58:50:fe:49:63:ee:02:d8:20:41:f8:
80:28:13:e8:0e:b4:73:3f:15:a6:51:4c:4f:d3:be:
8a:07:62:71:43:66:10:09:4d:a9:9f:ea:9d:04:6a:
d8:80:44:08:04:b3:8a:e3:2b:9b:9b:7e:81:1b:de:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:E1:65:AA:85:3A:8A:CC:15:75:53:78:7D:C6:6A:97:29:E4:A0
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d5:34:96:bb:0e:41:eb:84:11:47:4e:19:6f:35:48:f1:69:
cf:a7:70:21:51:16:7e:28:3d:dd:ea:a4:ea:81:e4:45:d1:49:
d0:fe:7f:4a:21:41:be:8f:74:0e:5e:8c:e8:9b:ec:e2:9a:36:
ac:14:43:ae:33:a5:26:f5:a7:68:af:2a:96:be:55:a5:a3:df:
6d:d8:c3:fc:bb:a8:8c:5f:cc:22:a4:d1:2e:5e:08:7d:32:68:
61:e5:95:96:48:ce:8d:91:7a:58:b5:ef:49:2e:8b:e4:a6:c6:
8c:1c:eb:3a:fe:b4:51:f4:91:ed:45:da:c1:b8:05:b2:66:c8:
1c:78:bd:76:34:68:08:e1:89:ba:c6:36:6b:2d:47:b7:c0:2d:
23:bf:53:61:00:5c:35:ef:e0:89:a8:51:f8:c0:e4:81:de:43:
99:cc:38:9d:8f:0b:ec:0e:8d:b1:2e:96:6b:63:18:f1:25:92:
f0:8f:b6:53:a2:36:7c:c9:2b:fb:9e:25:1a:78:ac:e2:44:0e:
f8:9b:ba:5a:bd:6a:5f:3d:82:ea:42:08:ac:d0:09:6b:a1:a9:
8a:3e:cc:69:8c:d2:d1:79:55:63:bb:5b:cf:bd:5d:d0:da:1b:
d2:ba:a7:de:1b:13:00:e2:62:51:75:96:9e:97:66:42:37:a2:
ed:14:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:50:54 2026 by rpki-client