Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: FIrdFK+TOtGr8XRVRrB7pCqjCy4lOLCJ9M7EdNKOa8o=
Subject key identifier: EA:F6:61:A7:D7:31:0A:B3:7F:65:B7:84:8E:8C:25:F6:B8:24:AF:D3
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019F9436A7432D5D9A9BF25DC183A8A365F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:37 +0000
Manifest this update: Fri 24 Jul 2026 13:00:37 +0000
Manifest next update: Sat 25 Jul 2026 13:00:37 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: N3cYqQjW2JQtau1dvlUPCULbtxEX+ek4QUQnMR/y1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:a7:43:2d:5d:9a:9b:f2:5d:c1:83:a8:a3:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jul 24 13:00:37 2026 GMT
Not After : Jul 25 13:00:37 2026 GMT
Subject: CN=eaf661a7d7310ab37f65b7848e8c25f6b824afd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:e0:3c:bd:37:de:9d:34:e1:10:d4:5d:01:
e6:dc:06:55:d4:29:d4:f6:84:9e:9e:d8:ee:3a:07:
3b:1b:bf:56:86:ee:6d:97:01:32:83:c2:4d:48:17:
d9:8d:2e:85:66:13:91:fc:77:9d:30:56:1e:fe:1b:
b1:d1:82:50:9e:d5:5d:80:4c:d1:d8:86:02:9d:15:
f6:ea:92:bf:e2:61:1e:fc:e2:26:1b:00:89:c0:6b:
7e:bb:11:22:b9:c1:35:04:23:5c:a9:03:58:13:89:
a8:ff:12:9a:6c:ab:70:0d:9b:fa:09:0f:bc:3b:8e:
74:ff:75:00:86:67:4f:11:da:18:21:95:b3:c9:c3:
4c:6e:24:06:58:ad:9d:e3:0c:25:81:b4:20:2f:05:
34:37:33:2d:b2:f1:71:99:30:ff:76:fc:80:0a:e5:
a4:cd:fb:65:a5:b4:7f:f3:c4:08:94:a3:03:be:4a:
4a:5c:39:89:0c:71:01:98:bf:cc:11:00:9f:ff:4d:
e1:3b:cd:51:31:3b:4b:60:1c:a3:c1:25:76:43:58:
09:b3:fc:9e:48:87:0b:65:94:27:20:2c:63:47:97:
a1:db:3f:07:e6:7e:57:81:72:21:e3:2b:1d:a7:b1:
ca:b6:07:1a:1e:73:08:e9:c2:6c:27:cc:19:25:03:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:61:A7:D7:31:0A:B3:7F:65:B7:84:8E:8C:25:F6:B8:24:AF:D3
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:95:36:96:51:2f:cb:29:7a:00:3c:2d:3c:e9:a1:2f:21:58:
37:14:f9:16:fc:34:59:38:fb:f3:6c:26:08:d9:a8:dd:f0:d0:
a1:c6:00:69:93:8a:f8:85:82:d3:41:cd:20:96:f1:f6:a6:c9:
a4:cd:ef:a7:80:68:9b:93:32:dd:20:d1:f0:5b:e5:7b:fe:76:
49:c3:ab:c2:9c:da:d1:b1:fa:5a:94:87:81:63:c3:57:1e:bd:
b7:64:9b:e7:fc:67:8d:ae:84:d8:eb:7b:25:22:d2:52:7b:73:
24:1f:bb:0d:b7:13:11:53:74:7c:09:15:2c:b8:14:f8:c6:67:
63:ac:c2:b3:3a:ac:e5:9d:11:2a:34:df:ae:a4:5c:4d:0a:ab:
67:fe:bc:0b:50:f2:03:cf:d0:2c:a1:11:23:16:0c:31:4b:b7:
cc:97:12:34:e2:a3:7c:eb:dd:6e:d8:7e:d2:b6:97:f2:4f:78:
bc:b1:59:1b:8d:17:d1:3e:99:86:bb:a8:27:10:51:5b:af:09:
58:27:9a:f4:a0:53:93:b5:ee:b2:25:d8:6b:a1:3d:8a:58:3a:
da:28:fb:84:b6:98:96:10:d1:30:09:8c:19:14:8d:04:0f:29:
83:da:df:90:42:0f:0e:f5:93:75:f7:2f:72:dd:a2:4e:fd:e9:
77:22:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:47:54 2026 by rpki-client