Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 9o8KN1HnGfkaqAtuf/EFG9rt1M9tBf3KWOaaDre6T7k=
Subject key identifier: D4:83:D8:72:6E:96:AE:CB:1E:81:7B:C0:54:DB:42:DC:F3:A0:19:C6
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019D2A3B5EF1FF3704FF4796497DC850D1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:26 +0000
Manifest this update: Thu 26 Mar 2026 13:00:26 +0000
Manifest next update: Fri 27 Mar 2026 13:00:26 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: 2HJa/RCvhV3opZQnn87lZL6D22408nEOC93oB9Ja+TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:5e:f1:ff:37:04:ff:47:96:49:7d:c8:50:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Mar 26 13:00:26 2026 GMT
Not After : Mar 27 13:00:26 2026 GMT
Subject: CN=d483d8726e96aecb1e817bc054db42dcf3a019c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:4a:e4:f3:52:59:7d:6b:0d:5d:67:4f:55:
cc:a3:83:7d:17:24:f3:b2:9c:ae:d1:ef:03:45:0a:
d6:ee:fb:c8:93:ac:dc:c9:ec:eb:b0:a5:fd:3f:b4:
b9:31:71:10:19:3b:e5:3e:ce:8b:c4:b0:72:86:02:
ce:fe:2c:7a:54:49:2a:14:e7:66:59:48:97:dd:16:
2d:e5:06:68:4f:23:f8:81:46:39:29:bb:e2:c3:38:
2d:b5:06:c4:b5:00:e9:31:b6:89:99:00:00:74:f0:
b6:11:44:0f:78:4b:15:28:6d:8a:2f:90:2f:89:98:
c6:cb:cc:fc:2d:11:18:b9:38:61:61:fd:b0:91:12:
2e:e9:bb:c9:a9:c5:35:4f:81:66:d8:78:4f:15:0b:
5c:85:bf:b3:5a:5d:6d:fd:44:c2:a3:3e:28:ba:c2:
17:9d:4d:f9:22:7b:06:c5:9d:ab:d8:b6:bd:0f:f4:
d5:55:9b:b2:73:8f:43:6a:5c:09:a9:92:8a:43:f4:
6f:04:3c:e5:dd:37:43:3c:40:78:93:65:f1:f8:05:
05:95:f3:9c:66:dd:49:26:80:f2:e2:37:a9:58:cd:
7f:9a:04:13:c3:aa:d5:d8:96:77:72:45:9d:3f:6d:
b2:46:f0:8e:88:b7:31:97:c8:64:bf:8d:66:ad:7d:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:D8:72:6E:96:AE:CB:1E:81:7B:C0:54:DB:42:DC:F3:A0:19:C6
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c7:27:f7:02:d1:07:6c:f7:1d:8d:32:04:9b:0b:83:14:c5:
0a:4d:ff:84:e0:f2:30:84:4d:16:c8:99:bd:22:22:53:bb:98:
ae:7c:50:5f:75:96:32:21:85:c4:c4:9d:86:d5:ef:cc:c8:31:
f9:c1:8f:8b:15:6d:16:49:e5:67:a1:05:1a:5f:2f:b0:16:d5:
e8:b5:b3:c9:ac:24:1e:52:b1:21:87:e0:1e:9a:f3:19:0a:ef:
3c:ec:35:ae:ae:bc:75:91:f1:89:f8:02:cc:76:e0:3a:72:da:
e7:11:51:f5:02:8a:e8:8a:e0:0d:68:d7:71:dc:50:f2:bc:7e:
0e:6e:5b:4c:c7:b0:0b:e3:c9:de:57:cd:03:3f:2b:7b:a3:31:
07:89:de:2e:b6:83:28:1a:6e:f7:75:c9:07:a5:4e:82:fa:84:
34:6c:65:fe:6d:ef:d1:43:d2:bb:1c:e5:40:b2:5e:ba:e7:41:
20:ad:b5:ef:08:c6:e3:7a:55:65:07:7b:4f:17:a5:cf:b2:6f:
17:a4:8c:5a:81:9b:97:62:06:67:64:84:89:2e:44:0b:69:e8:
1b:d0:d3:2b:6c:8e:09:a6:e1:d6:8d:00:0b:95:fd:55:b8:48:
be:3a:94:89:9d:69:a8:29:2a:e1:12:df:22:a8:4b:70:4b:94:
5c:96:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:37 2026 by rpki-client