Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: fiEXOhS8LGXrPIpYOJIk0/U4lDBrZgs47Ly/AI15XGg=
Subject key identifier: D8:22:40:58:9D:7E:A3:F6:30:97:8F:96:C5:17:E6:F3:4C:3E:5B:6F
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019E1D9017C4250CD63189D2B7A4FD58E65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:00:42 +0000
Manifest this update: Tue 12 May 2026 19:00:42 +0000
Manifest next update: Wed 13 May 2026 19:00:42 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: akg7/uGZdow5esGWaxoGH6XO+chUDTMzZZmkCnn9nBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:17:c4:25:0c:d6:31:89:d2:b7:a4:fd:58:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: May 12 19:00:42 2026 GMT
Not After : May 13 19:00:42 2026 GMT
Subject: CN=d82240589d7ea3f630978f96c517e6f34c3e5b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:08:9d:13:79:9e:5e:98:f7:c8:4c:d8:99:
ad:92:4b:26:94:ea:07:e6:c3:2b:e4:12:1a:fa:67:
2c:68:6f:95:72:67:fb:93:4d:87:36:bb:72:2b:36:
d9:6b:76:d6:16:f1:cc:d6:3a:b2:49:51:50:39:f0:
00:5d:0a:9e:fc:88:1e:0d:39:02:9b:1c:65:4f:78:
48:e8:42:5d:23:46:20:ce:7d:75:39:be:c4:86:cd:
ed:0b:97:95:19:71:9c:c5:cf:3f:f5:70:b4:c8:62:
8b:d0:e1:32:7d:82:1e:8e:3c:34:07:78:5a:04:73:
e6:cd:ba:90:45:9b:3a:d2:4b:ff:9f:6f:22:8a:15:
af:e8:0d:ac:8d:69:cf:e1:b7:1c:4c:1e:42:fc:67:
3c:8d:76:06:b6:e0:d0:f3:fb:d5:83:74:24:5a:2a:
43:47:15:aa:21:82:2c:63:1f:b4:61:56:0e:bd:ca:
64:cc:40:ac:67:28:d9:51:c4:1f:04:25:e9:67:9f:
b6:58:bd:25:64:cb:43:a6:e1:ad:2b:5b:ea:41:8c:
3d:a8:e5:1a:a8:32:b9:81:85:17:64:6c:53:bd:c1:
02:e8:f0:8a:9f:5f:02:c3:cf:f5:7a:f3:0e:70:c0:
55:49:94:b7:01:79:f6:91:58:0a:56:28:28:fd:f6:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:40:58:9D:7E:A3:F6:30:97:8F:96:C5:17:E6:F3:4C:3E:5B:6F
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:16:bd:7e:74:8e:58:dc:72:7e:b2:03:7b:47:5f:49:3f:ed:
6c:16:22:e0:41:44:fc:53:fc:13:bd:34:a7:ec:1b:c5:2a:42:
0d:c6:bf:8e:da:c6:4c:b1:6c:35:b8:59:4f:f8:a6:fb:a2:aa:
a3:29:5a:57:5a:5b:73:de:6e:f4:f2:1d:f8:c1:e7:a6:1d:04:
af:e2:0f:bb:80:67:f3:db:13:77:13:4d:dd:a9:33:37:41:3d:
87:e4:1e:3a:4a:5f:fb:1d:a6:a8:e1:ac:51:d1:88:8c:8f:76:
4e:81:12:47:46:e9:d4:df:0d:8e:b1:bc:e5:61:e2:bc:1a:9e:
ad:f7:b7:63:e0:5d:f1:39:f2:85:78:cb:2a:b4:da:9f:95:7b:
5c:35:70:f9:38:5d:aa:d3:ce:0e:a6:b6:b8:50:e8:d5:6f:52:
88:70:ca:7c:fe:2a:d7:69:a9:cb:9a:71:53:03:e0:ec:d9:2e:
5d:b4:cd:b0:bc:8a:e0:08:9e:7b:a7:72:76:d3:25:83:13:c4:
9c:47:b8:3d:b9:47:a0:08:22:02:48:1a:a8:35:dd:d9:1c:61:
44:f2:ce:f5:e6:6b:8b:e4:74:9d:25:5e:73:26:56:2c:f0:dc:
f6:3c:7e:d5:1c:16:07:50:6e:88:31:0c:35:f6:50:62:b0:a7:
f7:44:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:35 2026 by rpki-client