Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: YhWCgOmxN/Q2JJEdo47Ni3mvqMznnSFxZaIEPgfR+ds=
Subject key identifier: 14:5B:41:F9:59:BF:D4:DB:31:EF:99:FE:26:42:EB:1C:00:26:27:87
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019CAAFD3838EF9B9CE30802569E2FB79F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0512
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: 7BQv0/7XbzgVNGWnmi2DHjcBpJU1WFJ3F+tcCKB+VII=)
4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:38:38:ef:9b:9c:e3:08:02:56:9e:2f:b7:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=145b41f959bfd4db31ef99fe2642eb1c00262787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:a9:c1:24:27:e0:43:30:20:5c:be:bc:ab:
33:fe:22:a4:da:bf:55:39:0f:97:67:c6:08:19:5f:
72:1c:be:30:45:8f:bd:05:3a:47:6e:95:dd:4a:7f:
cb:af:9e:2e:50:2e:f2:96:e0:dd:ae:94:55:b8:6d:
c4:12:87:49:52:33:aa:25:ef:9c:81:1d:97:c5:54:
d5:ec:47:46:c6:ff:95:42:45:0d:ce:93:d4:b2:63:
9a:82:fd:1a:dc:86:5e:74:bd:8b:44:3e:24:47:0e:
44:f1:a6:8e:82:e8:cd:af:94:0c:87:d8:18:90:96:
e4:d0:c6:84:e1:48:84:6c:3c:b9:96:2e:ae:dd:89:
74:07:31:22:f0:91:3a:d7:97:c1:f6:43:23:9a:87:
b7:7c:57:f8:f2:6e:1d:7e:33:7f:4d:07:c0:b8:f6:
c2:d5:11:a4:6a:3b:74:25:9b:e9:65:21:40:3e:69:
07:bd:ce:fc:3e:24:7d:77:1a:8f:9f:76:74:44:c0:
9b:e3:13:ad:e7:76:c5:15:1b:ae:d6:2a:54:d9:26:
9c:29:a2:fe:3c:02:b0:ca:7a:2b:ee:cb:b5:fe:88:
05:03:ca:20:29:48:8e:79:a2:95:58:59:d6:ea:6b:
8c:8a:18:49:d3:26:13:7d:11:40:b3:1c:90:86:9f:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:41:F9:59:BF:D4:DB:31:EF:99:FE:26:42:EB:1C:00:26:27:87
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:0e:4b:eb:c4:c0:11:98:70:56:cc:a8:35:f9:17:1c:05:
12:e3:04:9e:98:25:c5:4d:64:94:ff:6d:b4:cd:a7:5f:0f:e6:
0f:17:a7:d3:ad:4a:93:3f:43:02:4b:79:86:3e:87:1b:d3:e8:
e8:b4:b1:df:bd:9b:40:f7:5e:22:5c:4f:f8:50:8b:10:91:b9:
3b:53:fd:5b:27:43:5f:2a:3b:f2:00:92:e6:2d:6f:48:17:ce:
c0:10:7b:b9:bc:9b:0e:ba:f5:64:3e:c5:cc:1f:d9:66:d1:19:
c8:66:50:8f:31:03:39:32:41:d1:c2:ea:34:0a:ea:11:c4:12:
b7:af:b3:52:5e:04:90:c5:57:70:47:6f:39:8a:25:fc:48:71:
f4:30:35:a4:d0:fd:41:c2:cc:cb:12:b4:c7:84:0d:1e:3d:99:
bc:20:d2:2c:f5:04:94:69:67:a7:50:4b:e4:86:59:73:6f:c5:
ac:38:26:1c:15:6c:79:10:bb:c7:e6:72:93:e4:ea:7c:45:43:
ff:78:ca:3f:27:07:18:d8:eb:8c:15:57:66:ff:64:e8:29:e0:
c7:b3:b2:bd:b0:4b:59:f0:91:62:88:b9:2d:a8:5f:67:71:d0:
90:66:5c:8b:47:7e:35:4f:c0:fa:cc:8c:01:b9:bd:39:34:be:
b7:8b:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:11 2026 by rpki-client