Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: d4Xwrx/i1raHqYodsDcJW4mSxncm+dBSklD6Klq7Pm4=
Subject key identifier: 23:3D:B7:65:4D:55:12:C4:5B:AF:18:34:68:CD:1C:38:CA:29:CB:7E
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 019D38667998C06C06C7FB7B655742CE901C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: 02E1
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: COcv6oq5sDbpsP-8FRPQHVDfLWk.roa (hash: K+pmGXQPSyOf6hHKQS1u54A+Zj+KnwyEdp4hK5MQqRM=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: BIzsMIzo4s5WXj0DXcQYwqWOk9r0Znsqihx/sBjFaW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:79:98:c0:6c:06:c7:fb:7b:65:57:42:ce:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=233db7654d5512c45baf183468cd1c38ca29cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:c9:b9:b0:31:06:89:96:85:de:5b:a2:cb:
df:ab:0e:d6:95:f3:60:08:a3:ed:bb:9e:83:86:27:
6c:2d:81:83:5d:e2:52:16:0c:b5:c6:f8:ec:bb:24:
f3:16:fa:8c:46:07:5a:4c:ac:b4:b3:59:03:ea:e2:
d0:b2:fd:49:de:72:80:c8:0d:50:15:b3:d6:e5:7f:
58:1c:6b:17:36:84:00:6f:2d:8a:86:8f:24:5a:6d:
31:ef:d4:e6:95:a5:dc:8a:cd:ae:11:d4:d0:b7:5f:
a2:f4:bf:8d:90:e4:aa:47:bb:f5:38:67:0a:0e:bb:
7b:e3:13:3e:da:9d:d1:18:c3:d7:f5:26:5b:b5:c7:
6f:56:36:e1:52:1b:e7:44:b9:c9:19:1e:15:37:df:
2b:87:6f:14:c3:70:45:b9:3a:74:4e:c0:d1:e4:a0:
c6:e8:3e:ad:e5:c9:3d:b1:94:87:da:89:c0:85:98:
30:ce:26:0e:cc:62:3e:ea:7f:2b:0b:15:a2:76:26:
24:a0:b2:5a:19:21:a0:5f:55:3e:58:0a:1c:a8:7f:
a6:eb:e9:28:6c:a6:b0:a9:2f:6b:71:a0:5b:f2:96:
43:0d:89:f8:7c:a4:ef:70:be:a7:04:33:d5:b5:9e:
a0:03:d6:10:7d:b6:03:81:f2:65:cd:d9:b5:8c:4d:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:B7:65:4D:55:12:C4:5B:AF:18:34:68:CD:1C:38:CA:29:CB:7E
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:16:50:86:f6:5c:93:7f:83:73:f1:5a:4a:14:79:df:18:
0f:db:c6:8f:79:ba:09:30:b6:79:57:d3:77:f8:e5:67:f9:4e:
5c:ca:ae:1c:e1:f1:54:7d:54:f7:d0:0c:7a:57:90:4f:53:7c:
f2:d3:f2:b7:0c:fc:21:f9:74:6a:dc:8c:a0:47:a5:84:e5:83:
9c:a9:d3:6a:cd:b1:af:1d:81:6d:17:60:f0:81:98:4f:48:a7:
0c:61:e5:8c:73:70:3b:fd:c1:08:35:d1:61:e1:ab:d2:bb:24:
9b:14:a0:8a:b2:f6:e5:9f:43:13:37:a6:33:09:d0:3b:e2:4a:
d3:bc:f4:c0:d9:96:a6:d8:a4:de:63:52:b3:0f:a7:01:4d:ca:
1a:4b:97:9e:27:3d:4c:d8:a9:5b:37:71:af:78:e2:0c:8b:7f:
d8:5d:2d:b8:ac:79:d2:ce:c8:1f:bf:42:6f:42:32:f1:6c:12:
20:0c:2c:63:cd:87:a4:a2:e5:5b:f7:3f:97:45:ab:5c:80:5b:
a3:7c:60:66:61:b0:c6:5d:e5:50:74:19:72:84:36:6d:46:08:
78:42:36:96:39:d8:ac:a1:e4:b9:46:2e:70:d1:8d:32:13:4b:
9b:9e:23:f6:ef:0b:1f:97:dd:8e:2e:0c:3f:f0:05:58:76:cb:
55:1a:30:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnmYwGwGx/t7ZVdCzpAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NWNlYzE2NjBhZDJkZmU3NzFhOWExMjM0YjFkMTJhOWM1
YjgyMTEwHhcNMjYwMzI5MDcwMjEyWhcNMjYwMzMwMDcwMjEyWjAzMTEwLwYDVQQD
EygyMzNkYjc2NTRkNTUxMmM0NWJhZjE4MzQ2OGNkMWMzOGNhMjljYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmPJubAxBomWhd5bosvfqw7WlfNg
CKPtu56DhidsLYGDXeJSFgy1xvjsuyTzFvqMRgdaTKy0s1kD6uLQsv1J3nKAyA1Q
FbPW5X9YHGsXNoQAby2Kho8kWm0x79TmlaXcis2uEdTQt1+i9L+NkOSqR7v1OGcK
Drt74xM+2p3RGMPX9SZbtcdvVjbhUhvnRLnJGR4VN98rh28Uw3BFuTp0TsDR5KDG
6D6t5ck9sZSH2onAhZgwziYOzGI+6n8rCxWidiYkoLJaGSGgX1U+WAocqH+m6+ko
bKawqS9rcaBb8pZDDYn4fKTvcL6nBDPVtZ6gA9YQfbYDgfJlzdm1jE0piwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM9t2VNVRLEW68YNGjNHDjKKct+MB8GA1UdIwQY
MBaAFKRc7BZgrS3+dxqaEjSx0SqcW4IRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjIt
OTNhMzU2OTRmNjg1LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjItOTNhMzU2OTRmNjg1
LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM8WUIb2
XJN/g3PxWkoUed8YD9vGj3m6CTC2eVfTd/jlZ/lOXMquHOHxVH1U99AMeleQT1N8
8tPytwz8Ifl0atyMoEelhOWDnKnTas2xrx2BbRdg8IGYT0inDGHljHNwO/3BCDXR
YeGr0rskmxSgirL25Z9DEzemMwnQO+JK07z0wNmWptik3mNSsw+nAU3KGkuXnic9
TNipWzdxr3jiDIt/2F0tuKx50s7IH79Cb0Iy8WwSIAwsY82HpKLlW/c/l0WrXIBb
o3xgZmGwxl3lUHQZcoQ2bUYIeEI2ljnYrKHkuUYucNGNMhNLm54j9u8LH5fdji4M
P/AFWHbLVRowKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:52 2026 by rpki-client