Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: KPDyJ0uODFV6lPZxWn3LzfcuFygQkQ9mhpgvARvvgxA=
Subject key identifier: AC:4A:F0:37:6C:1A:3E:24:24:92:AC:41:E7:AF:DE:9C:4C:20:3B:C5
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019F111C710A1446FAD314D11756EB0A79D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0650
Signing time: Mon 29 Jun 2026 02:01:44 +0000
Manifest this update: Mon 29 Jun 2026 02:01:44 +0000
Manifest next update: Tue 30 Jun 2026 02:01:44 +0000
Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: cRA5FeXxh1AMrVIJAVhvfBVRG5a+MX8XNPoZrSrAw44=)
4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:71:0a:14:46:fa:d3:14:d1:17:56:eb:0a:79:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jun 29 02:01:44 2026 GMT
Not After : Jun 30 02:01:44 2026 GMT
Subject: CN=ac4af0376c1a3e242492ac41e7afde9c4c203bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:fc:ce:92:e4:1c:c0:c2:bb:0f:9a:5a:6f:
9b:74:7e:1e:9c:53:f6:39:17:ba:52:73:d9:36:df:
1b:a1:e1:25:5c:84:8f:22:32:0a:d0:4c:e5:df:9c:
de:19:cd:b4:c9:06:15:18:ed:a8:a5:38:bf:d5:12:
00:f0:07:05:74:a7:b0:57:e8:cd:81:95:d6:ae:f0:
5a:7c:f8:ee:1a:e9:82:2e:d7:dd:e0:4c:05:b2:1c:
96:0e:99:d3:2c:21:da:00:50:91:2d:ea:7b:34:92:
63:e8:89:e7:7b:de:d4:fa:21:5a:9c:a3:a6:7e:84:
c7:fa:fc:eb:46:10:99:68:c1:28:18:70:9f:62:a3:
53:c7:0f:fc:31:f4:da:d0:c9:40:a3:fd:f9:a6:bd:
ee:6e:5a:ef:dd:28:45:51:7d:13:b6:bf:fb:66:b9:
2e:13:91:c2:2e:d4:4c:2e:5a:d2:4a:88:d5:fb:19:
bd:4a:b8:44:06:c8:38:9b:b5:97:a0:fa:02:1b:80:
0a:b3:e0:74:b1:d9:52:fa:db:36:25:72:4d:f0:13:
ac:6d:5e:26:f9:82:6a:ca:98:f3:59:c6:b5:73:c1:
88:2a:19:86:bf:7d:54:4d:62:33:6d:f8:61:b6:db:
18:2b:ee:16:00:bb:3b:c5:97:da:67:c8:0b:81:02:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:F0:37:6C:1A:3E:24:24:92:AC:41:E7:AF:DE:9C:4C:20:3B:C5
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:f3:31:d1:1f:54:37:d1:b6:c2:74:37:87:e7:57:50:76:
c4:bf:81:27:3a:fd:18:ea:89:3e:4e:c8:fa:e3:b3:2d:ad:c0:
a3:0b:4c:25:02:8f:b4:ed:30:b2:a8:af:d9:e0:a5:f9:52:3b:
bd:46:6e:33:b0:c4:2a:fa:e8:02:3e:8c:ab:ad:82:f5:b9:de:
1f:53:3d:f5:53:70:3e:fb:81:f2:e0:67:86:60:51:0f:f7:0f:
c3:b1:2e:e7:28:35:4c:79:d5:c0:a6:fe:f9:2f:25:3d:03:8d:
b2:3c:7d:bc:31:f3:71:f2:85:90:d1:b3:c3:bc:b9:1b:7e:9b:
9f:5c:01:21:70:2e:ee:6b:3b:e0:15:ae:60:52:14:4d:78:d7:
a7:97:a0:5a:c8:48:22:e9:0f:d7:df:47:0b:15:89:ed:0e:2d:
b3:f2:da:2e:7b:e8:df:92:74:e7:5f:57:b0:88:0d:a8:b9:0a:
86:72:8d:8a:47:7d:5c:08:12:93:94:cd:73:a6:2a:a4:9e:e1:
2c:74:78:a6:25:00:0c:d4:4d:b3:e3:79:15:52:bf:b6:0b:59:
b8:1a:7f:02:df:20:b4:a3:8c:ab:4c:64:ca:50:96:44:95:25:
74:4e:39:21:7c:fc:21:57:51:34:4f:03:c5:f0:ab:63:56:25:
d6:07:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:34 2026 by rpki-client