Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: CLLZIx+BmgK+KGNt/ZsVYDNQEzaa6yF6FKruWspBBh8=
Subject key identifier: 1B:D1:1F:E0:45:6E:23:D7:7D:25:62:CE:A6:CF:BD:07:20:54:0D:BC
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019DA41CC9546AEA004BD7B6A035B0BC3A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0593
Signing time: Sun 19 Apr 2026 05:00:43 +0000
Manifest this update: Sun 19 Apr 2026 05:00:43 +0000
Manifest next update: Mon 20 Apr 2026 05:00:43 +0000
Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: pGta04H08fj8P/5LrGCRS32jndkR8fVnFxncRw9Xuro=)
4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c9:54:6a:ea:00:4b:d7:b6:a0:35:b0:bc:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Apr 19 05:00:43 2026 GMT
Not After : Apr 20 05:00:43 2026 GMT
Subject: CN=1bd11fe0456e23d77d2562cea6cfbd0720540dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:b0:c3:40:1e:82:69:ea:bb:b5:6b:e1:6c:
48:ae:c8:07:34:31:e6:c9:e7:c4:0f:74:39:1f:55:
4b:25:ef:ad:00:94:24:b1:a0:59:f3:fc:51:2d:c5:
9d:aa:c2:1d:8b:bd:92:87:65:1b:8b:21:6a:03:1a:
30:0f:0c:fc:00:fc:00:10:f7:d0:ec:fd:fa:6d:e4:
91:db:f7:8e:9a:70:29:69:3d:89:8a:bc:ac:11:33:
be:19:1a:79:dd:5b:26:bd:e7:59:f4:e3:b1:8d:8f:
34:38:e2:8d:09:69:28:08:3a:bb:79:f5:4e:71:db:
d2:86:2f:2a:98:c7:85:74:84:f2:23:d1:26:43:de:
8a:bf:5b:ab:3e:e4:c7:6f:62:56:2b:a9:9b:93:b3:
32:04:9d:b1:1c:28:90:d7:0b:0a:ac:e7:fb:0f:32:
e3:d2:f8:3b:11:71:4d:e1:67:f4:6c:18:b0:78:fe:
83:0f:2a:d9:27:9e:99:f4:05:72:32:f5:a9:47:29:
d1:a9:0f:a5:1a:c7:c1:15:3d:e9:58:95:63:75:a2:
5c:c8:c3:3b:ae:44:ed:50:84:e4:e8:ce:e5:5c:f3:
8b:40:86:d4:46:56:db:2d:f4:1d:06:39:be:a8:64:
a5:b2:d1:a5:1e:69:d5:fa:43:8b:aa:7c:90:7c:bd:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D1:1F:E0:45:6E:23:D7:7D:25:62:CE:A6:CF:BD:07:20:54:0D:BC
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ff:32:1e:bd:c6:28:1e:0f:07:cd:ee:89:45:93:47:24:58:
51:ea:64:2e:21:e4:ec:28:88:03:69:37:1d:e9:c2:be:74:56:
78:3d:ee:12:ee:ca:85:7d:a2:6d:38:0c:bf:fe:1c:dc:af:6e:
dc:f3:ea:59:07:71:35:8c:51:c6:7d:28:cd:67:b2:ef:ac:ea:
59:9e:00:6a:1e:9d:b0:1f:f9:2a:57:a5:d8:73:b3:90:1a:9d:
fc:83:08:39:54:fb:d2:0c:59:e5:d9:9b:6c:6d:38:0c:7b:00:
ec:fc:db:20:77:c7:0c:73:c3:a7:c4:d4:7d:3f:d5:47:36:4e:
54:0b:b4:e1:fe:5c:ec:09:9d:8d:9f:7c:e1:ea:33:6c:7d:d1:
02:10:8e:9c:6c:77:49:a6:d2:d1:39:af:de:17:cd:7b:bb:81:
e3:3c:86:30:e9:bb:09:14:81:0f:86:5c:31:e4:13:54:7d:3e:
0a:8e:05:87:b0:f9:11:bf:ab:88:44:29:39:5b:6d:de:ef:b9:
ea:d0:67:8a:ca:7c:a7:4b:e1:75:22:a7:6e:85:34:c4:3e:90:
93:cf:a0:fb:c0:4a:41:61:09:a8:dc:04:03:74:98:7c:07:6c:
87:2d:43:a0:3a:79:f2:cf:ab:0a:f1:b2:60:86:56:91:52:ed:
f3:55:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:34 2026 by rpki-client