Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: 7IvCaOcpABQk1W3Gm6bzimtN3nYXwR6o0Z134pGNHoc=
Subject key identifier: D4:B9:D1:17:0F:17:69:8D:20:FD:5E:BD:9E:96:E4:05:60:AE:16:52
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 019D27044DADAB85AF6B3AAE9ED4E3D93BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: 02D8
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: COcv6oq5sDbpsP-8FRPQHVDfLWk.roa (hash: K+pmGXQPSyOf6hHKQS1u54A+Zj+KnwyEdp4hK5MQqRM=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: L45oeBeSSkT+aB2oz4A9mfjm7qbsnHe8ImT4/tOEFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4d:ad:ab:85:af:6b:3a:ae:9e:d4:e3:d9:3b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=d4b9d1170f17698d20fd5ebd9e96e40560ae1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:3a:34:4f:ec:26:1c:cb:8d:d3:76:ec:d9:
c5:d7:b5:34:bb:89:6d:37:f8:76:a0:fa:4b:0c:0e:
2c:8a:e4:6d:e7:8a:d2:cb:fb:22:0d:ee:e3:b8:3a:
17:d7:a8:11:ed:8a:54:9e:85:e8:dd:ce:c3:1b:e7:
cf:9c:d6:32:ff:5b:ac:7c:70:0b:a4:5f:7e:20:7f:
ee:40:8e:3f:f5:6c:82:2f:83:65:39:dc:9c:01:05:
03:9c:58:ae:59:89:61:05:53:2a:82:0d:5b:fe:a0:
6c:98:8f:e2:39:ca:90:5b:8c:0f:30:8b:41:29:1b:
78:bf:6b:10:a0:39:5a:9a:a1:56:f6:6a:be:2f:fb:
bf:1f:f8:12:3c:07:3d:94:ef:29:e1:85:4c:ff:b7:
ea:2d:fd:24:8a:39:1e:4b:52:de:5a:c1:e4:f2:09:
43:ed:45:67:ee:1f:0c:a9:73:3c:e8:da:89:a7:b8:
3f:26:d5:7a:79:65:5b:25:cd:87:0b:60:75:d7:00:
4c:dd:1d:6f:fc:be:fe:13:48:b6:b6:fa:8f:0b:ba:
02:83:e5:dd:25:8f:18:da:a1:60:31:d2:2e:1a:3a:
98:1f:a8:79:ef:be:26:0e:7d:14:6a:b5:bb:58:72:
1d:bf:16:d8:2e:86:2c:17:c9:4b:59:2b:e5:59:4a:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:D1:17:0F:17:69:8D:20:FD:5E:BD:9E:96:E4:05:60:AE:16:52
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:76:53:1b:d9:00:1c:fa:1a:40:c2:f2:0a:69:26:5e:18:
be:0e:0f:8b:4d:38:42:f9:72:f3:e9:e3:0f:2d:1f:9d:42:6a:
48:c1:7a:b3:dc:13:5b:7f:1d:b9:d3:c0:25:51:41:07:7f:98:
c7:4f:71:9a:32:c6:d8:99:0f:0a:d7:8b:45:37:11:5c:e2:80:
6a:b6:b4:61:87:0a:5a:95:1a:d0:1e:f8:e2:87:8c:24:00:37:
0c:b8:08:43:92:76:d8:84:14:82:69:9e:26:29:62:69:54:58:
c5:41:01:61:93:6d:0e:af:70:5a:f1:eb:9b:2d:85:b8:a0:b4:
6a:66:5c:12:54:86:e3:d2:89:6c:c4:93:14:ac:d7:ca:ca:b6:
8a:0a:55:1f:c0:90:30:6b:eb:f3:43:06:82:e9:b3:be:73:f6:
17:3b:f2:38:9e:4b:5b:f5:0e:11:cc:96:ac:3e:a8:f4:d0:98:
b9:b4:36:5b:6f:c5:71:29:a8:c6:6f:9b:17:a0:4d:4e:36:ce:
6e:33:f5:b4:27:d4:2e:be:8d:30:12:08:51:42:22:d0:d4:eb:
6e:bb:0e:de:21:4d:00:c3:69:65:0c:70:b5:45:22:f5:82:2e:
4c:ea:e1:05:86:3d:47:ee:88:d3:cd:67:68:db:76:39:8a:70:
e4:2c:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:59 2026 by rpki-client