Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: ixlLuMogu5dpStKiu1dmzGrYt/z1IrCz13PnLEFfHF4=
Subject key identifier: C1:E2:3E:ED:EF:D9:84:ED:0A:70:46:4A:4B:C8:07:6F:66:8C:8B:91
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019D2A04C4C6193EE9477533747742CE151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 0570
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: YwawbICucv1VVVjY7k0DxU3talA.roa (hash: 5ZeGP6xC2kmeddsR+KaHD991eNkeiFSXFDKflsvbyMs=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: p+n5if/TJ1aJe4LgVw9IOFxdB7SRavs1pCn3bJrgubY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c4:c6:19:3e:e9:47:75:33:74:77:42:ce:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=c1e23eedefd984ed0a70464a4bc8076f668c8b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:12:6d:0c:0a:97:08:f9:ee:c0:ff:29:5a:
fd:7c:a0:35:34:59:a2:5b:38:7f:c4:1e:ca:4e:dc:
70:cf:0b:ef:a0:a2:3a:8a:cf:29:58:38:ef:4e:2d:
fd:5e:9d:1c:7b:98:c6:4e:6e:2e:03:37:67:b0:e7:
2f:e2:06:0d:73:a9:a0:1e:c8:db:34:83:f7:a4:48:
eb:7b:25:51:de:09:cf:a9:a3:dc:6e:7b:c9:6b:4f:
81:76:2c:5f:98:88:98:96:8a:67:96:e6:f0:3e:54:
38:40:7b:db:f0:da:e1:82:c6:ca:6f:50:99:52:15:
a1:f9:a9:94:e4:6c:bb:0d:e2:2e:88:6a:e1:5c:31:
07:60:70:8e:ad:a3:79:a9:69:42:d1:f3:fb:d2:52:
fd:6e:6c:e0:00:93:fa:a6:b7:8f:7e:88:5d:cb:49:
8a:36:38:a4:e7:69:ee:1a:8e:be:87:35:3a:6c:52:
4f:7e:49:df:68:33:43:f9:0e:a3:c9:27:f5:28:94:
f7:c7:cd:cb:df:33:db:24:79:87:61:a2:8c:d9:cc:
fb:65:a0:43:54:2f:43:93:d1:2c:6f:cb:1d:5c:7a:
19:8c:1a:96:7c:0d:88:b6:27:1e:e1:bf:d7:3b:3c:
33:cf:e6:af:9f:c1:11:91:00:84:33:86:9e:de:8d:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:3E:ED:EF:D9:84:ED:0A:70:46:4A:4B:C8:07:6F:66:8C:8B:91
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:83:71:f0:b9:b5:b2:76:dc:27:b6:02:99:50:1f:52:de:
70:4a:27:0c:00:4a:33:dd:f0:ea:cf:f1:e0:eb:af:89:d7:dd:
64:3e:02:db:80:80:b2:89:ef:27:d7:b3:98:b8:dd:c0:c1:91:
15:5d:1c:80:af:2c:34:3b:b9:19:ee:c0:8d:ac:d0:63:64:88:
05:2a:88:3f:06:9d:c7:dd:96:25:a2:dc:a9:51:44:39:b2:cb:
85:a4:d6:c9:1a:c3:90:56:fc:f5:0a:06:0f:20:e3:11:66:a6:
5c:1c:4e:5b:6f:df:cb:d7:79:cb:4b:01:0a:ec:76:1f:84:c0:
7e:ee:62:ae:ea:5c:de:34:d4:e3:b0:75:43:46:72:30:df:81:
dd:d9:ee:d5:c4:0e:19:13:66:cd:94:fa:df:c1:32:5d:d6:d4:
a3:58:d7:34:79:2c:53:f8:df:b0:e0:fa:ce:4a:6e:8a:32:9b:
b6:c6:81:c5:f6:c8:77:42:aa:e0:9f:ec:d5:5d:7a:e1:7c:4a:
40:09:9a:14:28:36:f8:4e:d9:f3:7c:15:a8:0e:57:cd:71:69:
14:d6:f0:93:c3:df:4e:db:1b:51:0a:ba:f0:12:27:2e:19:44:
92:06:31:30:f7:2c:20:51:48:2f:c7:71:f8:22:10:3a:99:59:
6f:e6:e0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBMTGGT7pR3UzdHdCzhUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTIyMzk3ZWMwZDE0OTkyMDFhZjBmYTllYTJhMDRiN2Q1
Y2ZhNmEwHhcNMjYwMzI2MTIwMDQ4WhcNMjYwMzI3MTIwMDQ4WjAzMTEwLwYDVQQD
EyhjMWUyM2VlZGVmZDk4NGVkMGE3MDQ2NGE0YmM4MDc2ZjY2OGM4YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ASbQwKlwj57sD/KVr9fKA1NFmi
Wzh/xB7KTtxwzwvvoKI6is8pWDjvTi39Xp0ce5jGTm4uAzdnsOcv4gYNc6mgHsjb
NIP3pEjreyVR3gnPqaPcbnvJa0+BdixfmIiYlopnlubwPlQ4QHvb8NrhgsbKb1CZ
UhWh+amU5Gy7DeIuiGrhXDEHYHCOraN5qWlC0fP70lL9bmzgAJP6prePfohdy0mK
Njik52nuGo6+hzU6bFJPfknfaDND+Q6jySf1KJT3x83L3zPbJHmHYaKM2cz7ZaBD
VC9Dk9Esb8sdXHoZjBqWfA2Itice4b/XOzwzz+avn8ERkQCEM4ae3o3YawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHiPu3v2YTtCnBGSkvIB29mjIuRMB8GA1UdIwQY
MBaAFKRSI5fsDRSZIBrw+p6ioEt9XPpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgt
ZmVjMDRjNDk1NTAyLzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgtZmVjMDRjNDk1NTAy
LzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlmDcfC5
tbJ23Ce2AplQH1LecEonDABKM93w6s/x4OuvidfdZD4C24CAsonvJ9ezmLjdwMGR
FV0cgK8sNDu5Ge7AjazQY2SIBSqIPwadx92WJaLcqVFEObLLhaTWyRrDkFb89QoG
DyDjEWamXBxOW2/fy9d5y0sBCux2H4TAfu5irupc3jTU47B1Q0ZyMN+B3dnu1cQO
GRNmzZT638EyXdbUo1jXNHksU/jfsOD6zkpuijKbtsaBxfbId0Kq4J/s1V164XxK
QAmaFCg2+E7Z83wVqA5XzXFpFNbwk8PfTtsbUQq68BInLhlEkgYxMPcsIFFIL8dx
+CIQOplZb+bgmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:29 2026 by rpki-client