Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: q5XU68j7/JA8vjzIoXEvcP7InF3fJH3OLmf5VhG7SZY=
Subject key identifier: 20:88:C0:DD:26:A1:5B:39:DC:31:31:2E:1B:52:D0:8F:5B:94:AC:C5
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019CAE6C0DA6D5A5AE156B915BAD9E33530B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 0530
Signing time: Mon 02 Mar 2026 12:00:42 +0000
Manifest this update: Mon 02 Mar 2026 12:00:42 +0000
Manifest next update: Tue 03 Mar 2026 12:00:42 +0000
Files and hashes: 1: YwawbICucv1VVVjY7k0DxU3talA.roa (hash: 5ZeGP6xC2kmeddsR+KaHD991eNkeiFSXFDKflsvbyMs=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: vcvukFqquM9V926kYxtdFmi4y8bQrfNb0LeMRkp3+9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:0d:a6:d5:a5:ae:15:6b:91:5b:ad:9e:33:53:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Mar 2 12:00:42 2026 GMT
Not After : Mar 3 12:00:42 2026 GMT
Subject: CN=2088c0dd26a15b39dc31312e1b52d08f5b94acc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:df:95:af:73:45:2f:b4:36:67:3a:e3:51:
ff:1f:90:f3:4d:55:bd:59:ea:d0:bf:3f:f7:ab:72:
a4:65:31:1d:2f:c6:17:ef:97:fa:98:ec:76:74:c6:
cf:e0:de:f4:12:cd:53:da:dc:0e:ae:55:cb:9b:3c:
58:38:b7:9b:52:e1:d7:8a:c3:eb:b5:a8:3c:e1:7f:
7e:c5:c7:a4:95:53:a9:29:a9:62:24:47:a6:be:29:
dc:86:7c:c5:34:14:dc:34:c6:c2:cd:3b:b6:5c:b6:
3e:e2:82:a6:97:b7:a7:44:7f:49:32:16:f2:09:93:
7e:78:09:81:85:6a:21:ff:d1:a9:ce:2a:8a:45:2f:
60:42:89:75:5b:6a:c9:64:ae:7c:26:ec:46:52:ff:
12:e1:e1:fe:85:87:3f:22:20:30:ec:48:55:84:d4:
d1:14:0d:fa:78:c3:7b:c4:04:ed:91:66:4f:f3:89:
55:92:53:2a:28:2f:01:66:90:fb:e0:b3:fe:33:bb:
88:98:7b:6d:f2:f6:69:db:84:60:fb:2e:10:59:ee:
f7:fe:af:75:09:de:6a:3a:28:4e:6d:46:8b:27:42:
b8:57:64:06:77:7f:9f:51:d2:c7:19:02:24:60:c8:
8d:1c:f0:07:a2:0b:cb:94:e2:36:ec:2d:3c:68:54:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:C0:DD:26:A1:5B:39:DC:31:31:2E:1B:52:D0:8F:5B:94:AC:C5
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d7:63:85:64:9f:b4:04:86:13:32:6e:68:5c:b6:c3:12:1e:
40:4b:4b:0a:da:94:1f:8c:d6:60:27:fd:cc:10:6a:23:5c:4f:
4e:27:6e:fc:78:99:16:fd:ab:2c:d4:ff:93:61:4f:17:a9:e8:
f7:06:4b:9a:5b:84:61:49:1a:56:68:a1:23:8f:5e:38:31:be:
0d:81:d8:92:2c:96:a5:73:7b:a3:f9:6d:41:6a:82:9c:e4:91:
f5:3b:eb:78:7b:a2:ae:8c:11:20:67:49:5c:1c:10:a3:48:89:
23:af:e9:3f:bb:1e:64:a7:92:f9:38:dd:26:33:9a:4c:2e:3b:
73:65:a7:0a:b1:4a:d5:61:06:ca:d2:45:7a:61:1d:20:a1:23:
18:18:f2:15:47:2c:8b:3f:e0:37:ab:f2:58:a5:60:1d:8b:29:
3c:5e:48:6a:0f:3f:a7:92:71:b5:98:0a:a5:17:04:ce:6a:a5:
c6:74:6e:3e:ba:e9:cf:1b:c0:8a:2e:bd:5e:7a:c2:5b:b6:5a:
b2:9c:48:33:9c:25:7a:3e:50:e3:17:81:ab:d0:b5:8c:e1:20:
de:e5:72:a1:5b:3e:5e:a3:c9:1a:1b:b8:8e:55:50:b7:5c:59:
01:1f:47:5f:84:7e:4f:c6:5c:05:00:c2:0f:1f:5e:24:85:5e:
ed:e4:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:10 2026 by rpki-client