Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: cw2jeGzhKX34ORe5X0KMe1vzPXj/q7bps92J80/Mw2I=
Subject key identifier: 52:33:56:FF:E6:8F:AD:4A:D7:94:E9:A5:36:EA:E1:9E:DE:F5:F6:60
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019D9DE3850B96AFE5BD60E2A8050AF010E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 05AC
Signing time: Sat 18 Apr 2026 00:00:26 +0000
Manifest this update: Sat 18 Apr 2026 00:00:26 +0000
Manifest next update: Sun 19 Apr 2026 00:00:26 +0000
Files and hashes: 1: YwawbICucv1VVVjY7k0DxU3talA.roa (hash: 5ZeGP6xC2kmeddsR+KaHD991eNkeiFSXFDKflsvbyMs=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 4AB3GdJHFLR8k4ruYaBLlYZDkNaWRHUXOpaEORotvNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:85:0b:96:af:e5:bd:60:e2:a8:05:0a:f0:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Apr 18 00:00:26 2026 GMT
Not After : Apr 19 00:00:26 2026 GMT
Subject: CN=523356ffe68fad4ad794e9a536eae19edef5f660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:40:95:8e:34:29:59:fd:73:15:7e:b7:8f:
93:bf:e2:c9:a4:51:3b:bd:c4:c5:18:03:50:62:18:
2a:1b:97:56:e2:83:a3:b7:c8:46:07:c9:8a:13:c9:
39:e5:4a:ab:70:59:0b:de:d9:ec:19:ef:5e:0a:d8:
36:71:0b:4a:1c:12:e0:08:52:ed:f8:8a:e1:bb:17:
be:6d:e6:41:75:4a:56:cf:06:67:5b:bb:31:95:9f:
9e:4a:40:59:d5:38:60:da:61:d1:b0:99:12:b2:ae:
ad:2d:c8:ab:ee:79:3a:5b:58:9d:02:1e:15:36:7a:
f5:79:ca:c9:aa:01:5d:e0:43:e9:d7:6f:38:c3:e5:
99:11:c3:74:34:f8:b6:f0:6c:d7:ca:41:bc:9f:f0:
20:ac:6d:cd:b2:3d:6b:20:22:ee:ed:56:55:25:0c:
24:7b:e3:8a:cd:dc:f9:1b:7b:fa:cd:5f:76:d8:bb:
93:98:7e:46:03:2e:a6:16:f0:c5:24:11:35:5f:ad:
14:99:c3:f3:d2:03:50:69:95:d4:da:b4:d0:14:82:
ba:80:ae:4f:d6:e1:fc:3c:cd:3e:3f:f0:c8:21:40:
b9:97:41:01:10:c9:a6:d3:37:ee:60:8a:fb:a9:99:
21:e0:fe:61:03:b3:ac:2f:30:a2:c7:99:87:20:ca:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:56:FF:E6:8F:AD:4A:D7:94:E9:A5:36:EA:E1:9E:DE:F5:F6:60
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:a4:00:ac:6f:53:6d:08:0b:a4:ed:a9:fa:6e:f2:ba:33:
da:6c:40:da:99:d0:51:2c:fb:cf:26:2b:a4:83:7d:6b:25:79:
42:bc:2d:90:83:91:f7:c1:98:29:6c:13:bc:04:a0:4e:ca:b5:
a5:5c:d2:b6:3b:93:4e:80:1b:91:71:1c:45:3a:41:c7:86:6a:
d9:e2:fa:eb:9c:94:9a:28:71:cd:1b:03:e0:3c:9d:d7:61:ae:
6b:53:57:46:17:de:ed:ed:79:5d:ff:b9:5b:ab:d9:c3:e7:4c:
f5:f5:60:1f:6a:f8:d4:b5:b4:c4:fc:69:9d:23:08:7a:e7:13:
5b:3d:92:58:96:6a:41:7a:6e:73:b5:f4:3b:db:51:61:bc:47:
0f:cd:00:87:6e:4d:29:c3:44:49:4f:82:73:3c:df:de:a9:76:
5e:df:83:9f:9c:76:24:01:6c:0d:36:20:32:92:ff:cc:5c:8f:
31:a8:52:05:88:5f:75:5e:e7:db:16:bd:79:4b:7e:22:51:b0:
4c:3e:20:37:1e:21:eb:70:b8:2d:11:66:aa:c3:82:99:23:8f:
d1:24:77:b6:71:de:c2:13:1c:51:01:9c:c9:a6:12:25:10:81:
f4:53:cc:4c:6f:44:e5:93:91:5e:c5:8b:42:cc:8b:63:70:af:
df:48:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:49 2026 by rpki-client