Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: 89x1PrWE7T+m/9TG67+lkZG9Xz0eVu5Zk43fCSVRRlc=
Subject key identifier: BF:75:E4:C8:3C:21:E5:A2:B9:1D:DD:A4:1F:50:6E:05:2B:76:84:8C
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019E1DC7646AC8DD9CC08E408DFBE08F6F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 05D2
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: luMilRgg76fLs4aN8yqkKVNiD7TsFHQSaoOt6hRR3RA=)
4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:64:6a:c8:dd:9c:c0:8e:40:8d:fb:e0:8f:6f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=bf75e4c83c21e5a2b91ddda41f506e052b76848c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:6c:4f:68:b1:77:49:24:7b:e8:27:17:19:
6c:9f:3e:64:57:ba:d1:73:6b:42:9c:70:1a:36:5a:
6d:f6:65:58:6e:02:42:52:31:30:84:d2:bc:71:07:
e1:8c:63:12:ef:3b:66:19:b7:8b:91:d0:67:e9:9d:
ba:62:86:6d:7a:57:ae:f0:ef:8f:78:d1:e6:9d:a7:
d2:3b:f9:04:69:f4:9d:ba:d1:06:92:69:72:65:16:
95:be:83:e2:12:33:d0:64:2f:c5:92:5c:81:d0:f7:
4c:be:7c:0e:79:9d:ae:90:4d:31:4d:e5:af:da:09:
a1:8a:b7:36:05:c3:5b:ed:e7:45:46:57:63:90:4a:
37:a8:2d:df:75:c6:eb:a8:e0:6a:66:5f:b7:2f:a9:
15:e1:e2:d5:cf:02:ff:cb:29:54:8e:9c:62:15:3e:
75:1c:e1:d8:46:d0:64:0a:2b:d8:9c:64:62:d6:3e:
4e:f0:cd:b9:49:3f:75:86:55:9b:75:58:d1:a3:2a:
1d:1e:1d:8e:a2:77:bf:54:af:57:c8:43:3d:68:69:
15:a5:02:47:9e:3e:4c:07:ab:46:50:9c:a2:8b:9a:
10:05:cb:b9:6d:0c:3d:cc:06:18:78:c8:a2:cc:78:
96:a8:14:ed:91:95:05:0b:d3:70:92:e9:7c:90:77:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:E4:C8:3C:21:E5:A2:B9:1D:DD:A4:1F:50:6E:05:2B:76:84:8C
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:c3:c2:1e:8d:0b:ad:95:b7:14:dc:76:92:b9:bf:cb:05:
99:4c:5c:2a:76:e2:ab:01:00:3d:dd:f7:e0:d5:f8:31:63:5c:
8b:fd:f0:98:0b:66:47:02:89:67:28:d6:89:ea:61:78:eb:73:
b6:fc:c2:47:a4:11:53:d8:71:d6:2f:ba:e3:1f:e6:e3:12:ba:
de:40:0a:81:e7:a5:f5:5e:2a:24:0a:a5:39:24:70:bb:a5:03:
ac:64:26:0c:8b:f0:dc:d9:ca:dc:c1:bd:fc:24:98:ed:d2:51:
c4:4f:fd:c0:2e:42:c6:de:0f:a9:d6:3a:98:a4:e3:d9:df:a3:
79:12:b6:6a:c8:a8:bb:b0:8e:e7:f9:f0:e3:29:ab:e4:d5:9d:
44:48:2e:73:aa:be:17:1e:65:90:0c:77:86:ae:1d:09:f9:00:
a4:9f:cf:2a:77:7f:f1:16:73:2c:c4:eb:a4:c0:5d:a4:f7:b7:
4c:43:00:52:1b:d5:31:31:1a:81:62:31:63:c2:d5:3d:36:84:
1f:14:b6:bd:e7:2c:e6:51:a5:de:7e:11:74:3e:03:a6:fc:0f:
45:68:4d:d8:b7:22:f5:4a:4c:61:26:77:dc:45:56:d2:ae:9f:
56:b1:f4:9d:61:b4:92:fc:d4:9b:4c:04:76:cd:6a:cf:7f:c8:
54:d1:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:10 2026 by rpki-client