Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: CffOMuTe+s/NrAEil+U8Qrod31KGmA2mQpam2lv5mDE=
Subject key identifier: E7:03:14:B4:72:11:05:51:A3:5B:E4:09:94:B1:0B:06:DD:5F:7A:17
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 019D2B853E248A907D0D417231C65BBF0E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 04E1
Signing time: Thu 26 Mar 2026 19:00:45 +0000
Manifest this update: Thu 26 Mar 2026 19:00:45 +0000
Manifest next update: Fri 27 Mar 2026 19:00:45 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: /CWqN+vVKLT9TPMURXYy21Ry9IVAqE3q9lM7+v0240g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:3e:24:8a:90:7d:0d:41:72:31:c6:5b:bf:0e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: Mar 26 19:00:45 2026 GMT
Not After : Mar 27 19:00:45 2026 GMT
Subject: CN=e70314b472110551a35be40994b10b06dd5f7a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:d7:51:a9:8b:6a:1c:b3:70:41:3b:d0:05:
1e:a3:00:e4:c8:05:86:9b:14:3b:39:d1:b5:7c:44:
88:1b:e3:04:2d:2c:7d:5d:d1:90:ff:8d:dd:b3:5d:
22:ff:bb:e0:92:f9:4f:8c:cd:5f:c0:34:2b:23:5d:
b6:3e:be:3a:33:bf:a5:92:26:02:eb:3c:a0:5d:94:
f5:e0:b7:d2:13:46:09:6d:7c:9d:75:3d:ab:8c:3d:
98:d8:db:17:a8:d7:6b:c9:74:b8:67:7e:20:da:b8:
7b:e1:1b:9a:58:f1:b8:d8:ff:cb:d2:28:9c:ea:e4:
f4:32:67:2a:7b:78:ce:5b:00:6d:0f:76:d9:bd:6e:
16:a6:4c:ec:e1:ae:33:e3:53:8d:b5:21:61:e9:bf:
a1:ce:98:7b:cf:93:5f:b4:a7:cb:09:9a:41:d7:b2:
bf:19:5a:da:60:f8:b0:93:77:23:10:a5:81:72:2c:
3a:17:24:64:78:d9:a4:ea:82:00:47:2a:4f:12:24:
03:ee:fb:c1:6c:0d:07:36:b0:86:0a:c5:ed:1f:9d:
9e:8d:16:48:c0:86:0c:5b:c5:71:27:9c:ca:3e:02:
b1:58:28:fb:37:ec:df:a6:cf:3d:7b:bd:ad:e5:7c:
b2:ab:45:1d:67:71:e6:b4:c7:fb:a3:56:58:7c:f6:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:14:B4:72:11:05:51:A3:5B:E4:09:94:B1:0B:06:DD:5F:7A:17
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:a3:dc:72:17:cb:92:cc:94:66:1a:2c:e7:83:59:d6:99:
f6:10:71:4f:02:32:4f:b0:50:8c:3c:8c:6e:e7:6f:9c:ed:b4:
ab:43:3c:04:70:c3:38:71:57:0a:44:f7:22:cf:a2:87:72:d6:
52:57:5a:e4:18:b8:77:2b:34:5d:a6:36:5d:5b:f4:4a:60:02:
4a:92:d5:a8:05:b3:e4:07:36:bd:29:aa:f8:1f:6c:f0:80:17:
94:ba:b2:ea:42:6b:1e:1b:07:f8:8b:ac:4a:8d:cb:99:93:64:
64:53:6c:27:ee:30:88:31:97:d0:1b:3d:7f:b4:22:24:f5:cf:
32:76:33:ca:de:d5:7f:f0:c8:27:29:5c:d8:2a:ec:ea:fa:4b:
9a:1a:d6:a5:91:0b:3d:89:25:b0:63:08:6f:58:63:03:f4:3e:
44:5a:a6:30:89:d4:58:26:42:f0:87:48:f1:b8:c9:7f:4f:60:
68:50:29:67:e2:24:4e:c4:b1:36:37:01:1d:7a:66:40:83:e8:
6f:6c:0c:49:98:4d:a4:f8:75:43:06:04:f4:0a:64:6c:bf:57:
2e:f0:11:f8:89:46:23:32:fb:3b:98:a9:ae:32:4d:2e:a1:ec:
c9:00:d2:ad:18:75:aa:28:91:ab:7b:18:12:a2:a2:94:a4:49:
04:8f:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:55 2026 by rpki-client