Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: sBuWTeYS69CvIpcTxuX2OP9E/b3XcML3BpIwhkysw6I=
Subject key identifier: ED:79:6C:88:25:E9:03:48:8B:47:0A:80:E9:A6:52:8B:0D:7B:58:20
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019D24A7F015212BE5F25919BA61952F0506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0551
Signing time: Wed 25 Mar 2026 11:01:18 +0000
Manifest this update: Wed 25 Mar 2026 11:01:18 +0000
Manifest next update: Thu 26 Mar 2026 11:01:18 +0000
Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: jOlxM8ElqEyygKWxFhcMQ9TKIjRAvYUnf8oOYftriFY=)
4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:f0:15:21:2b:e5:f2:59:19:ba:61:95:2f:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Mar 25 11:01:18 2026 GMT
Not After : Mar 26 11:01:18 2026 GMT
Subject: CN=ed796c8825e903488b470a80e9a6528b0d7b5820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:f0:c3:1b:a3:37:58:b8:37:21:d9:21:2a:
79:d3:00:6c:ec:1e:23:47:aa:ad:70:a6:c0:a8:dc:
bf:02:70:34:25:64:61:18:51:c1:d2:da:b9:f6:d8:
c3:79:a1:b1:87:93:8a:e9:f5:af:27:d0:ff:50:af:
40:c6:03:7c:ba:87:ca:12:10:3d:21:df:30:c8:2a:
c6:7e:1c:d5:85:bc:c8:d2:5d:fc:2a:b2:8c:e1:99:
53:82:14:3e:3d:0f:8f:35:04:12:8d:5e:33:00:1e:
97:94:60:84:72:9b:60:dd:df:79:e8:47:5b:ae:4e:
fb:55:35:0e:53:5d:6b:44:3b:dd:89:a8:34:96:89:
0c:1b:58:c8:da:67:50:c5:90:a4:6c:0c:df:e8:f4:
0a:8f:f0:15:d2:3b:92:33:15:1b:4c:e1:89:f8:aa:
3b:6d:5d:f1:30:c5:3c:47:de:30:ff:54:3e:be:bd:
45:a8:ee:d0:bb:a0:68:e0:b9:4e:95:e4:80:3c:05:
88:af:4b:b2:b9:3a:a0:2e:b8:48:2e:a0:b2:0d:74:
86:a8:7f:c2:20:be:13:27:82:17:2f:df:4a:ae:63:
a7:47:03:17:a8:5c:9a:be:a9:4b:1f:06:ef:ec:e5:
c7:a6:fe:56:c4:a5:6e:48:d8:69:48:da:49:df:ec:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:6C:88:25:E9:03:48:8B:47:0A:80:E9:A6:52:8B:0D:7B:58:20
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:95:a3:71:a9:fd:2a:a1:ec:be:9d:ec:c3:74:ed:a4:45:a5:
5b:9a:75:12:d4:eb:39:f7:83:91:c5:5c:52:ce:ad:8a:dd:df:
13:88:53:e1:74:b9:7b:20:b1:4d:67:2f:9d:6d:89:98:a9:03:
e3:bc:63:18:9a:c1:a3:16:ca:04:17:74:54:45:e7:78:87:f1:
f6:89:1e:60:95:d7:45:85:15:bb:97:f6:bf:18:4b:59:28:20:
be:20:ba:78:ec:1b:8d:42:40:ca:f3:0d:63:51:eb:51:b4:ba:
91:7c:a7:47:11:65:16:d4:a4:7c:2e:84:c8:04:fd:7a:f7:fc:
af:90:c5:d2:2d:5f:25:47:1e:dc:93:22:5b:c9:3b:57:f6:e1:
44:9d:40:51:4e:e8:f6:23:5a:5c:91:bf:af:fa:4c:99:df:48:
cc:2a:74:73:fc:b4:9b:57:e2:49:ec:a0:cd:69:5d:24:13:d0:
2b:c5:00:f4:77:15:8a:8d:64:95:16:95:e2:e7:75:01:58:d2:
26:ab:82:69:45:87:4c:0d:d6:43:84:8e:c3:3d:0c:d8:23:d3:
0e:fe:fe:59:33:ba:99:f3:80:a1:bc:5f:dd:99:6f:b0:8c:cb:
4b:f1:23:74:b3:99:d5:4e:84:96:a8:12:f2:9a:c0:a0:43:bd:
94:ee:35:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kp/AVISvl8lkZumGVLwUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh
OTc4MWMwHhcNMjYwMzI1MTEwMTE4WhcNMjYwMzI2MTEwMTE4WjAzMTEwLwYDVQQD
EyhlZDc5NmM4ODI1ZTkwMzQ4OGI0NzBhODBlOWE2NTI4YjBkN2I1ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OTwwxujN1i4NyHZISp50wBs7B4j
R6qtcKbAqNy/AnA0JWRhGFHB0tq59tjDeaGxh5OK6fWvJ9D/UK9AxgN8uofKEhA9
Id8wyCrGfhzVhbzI0l38KrKM4ZlTghQ+PQ+PNQQSjV4zAB6XlGCEcptg3d956Edb
rk77VTUOU11rRDvdiag0lokMG1jI2mdQxZCkbAzf6PQKj/AV0juSMxUbTOGJ+Ko7
bV3xMMU8R94w/1Q+vr1FqO7Qu6Bo4LlOleSAPAWIr0uyuTqgLrhILqCyDXSGqH/C
IL4TJ4IXL99KrmOnRwMXqFyavqlLHwbv7OXHpv5WxKVuSNhpSNpJ3+y7TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO15bIgl6QNIi0cKgOmmUosNe1ggMB8GA1UdIwQY
MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt
NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl
LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Wjcan9
KqHsvp3sw3TtpEWlW5p1EtTrOfeDkcVcUs6tit3fE4hT4XS5eyCxTWcvnW2JmKkD
47xjGJrBoxbKBBd0VEXneIfx9okeYJXXRYUVu5f2vxhLWSggviC6eOwbjUJAyvMN
Y1HrUbS6kXynRxFlFtSkfC6EyAT9evf8r5DF0i1fJUce3JMiW8k7V/bhRJ1AUU7o
9iNaXJG/r/pMmd9IzCp0c/y0m1fiSeygzWldJBPQK8UA9HcVio1klRaV4ud1AVjS
JquCaUWHTA3WQ4SOwz0M2CPTDv7+WTO6mfOAobxf3ZlvsIzLS/EjdLOZ1U6ElqgS
8prAoEO9lO41GA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:01 2026 by rpki-client