Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 7cZmdmAjBRvk5Ytmmq1qUOGsml5JKwYNqVg2x14XBxY=
Subject key identifier: 62:ED:02:AA:BC:59:5B:63:23:AD:25:BB:AD:EC:21:DB:2A:70:58:D3
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01A0D4CBCCE109A789E3782C5A8A508E36EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:02:00 +0000
Manifest this update: Thu 24 Sep 2026 19:02:00 +0000
Manifest next update: Fri 25 Sep 2026 19:02:00 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: UUC6D30o+duwFDXGIUUxsb/rtVCLjn+Aoho9fDfHdhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:cc:e1:09:a7:89:e3:78:2c:5a:8a:50:8e:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Sep 24 19:02:00 2026 GMT
Not After : Sep 25 19:02:00 2026 GMT
Subject: CN=62ed02aabc595b6323ad25bbadec21db2a7058d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:0e:d7:bc:90:d5:d3:e8:1c:f3:24:54:c7:
89:dc:44:64:5a:ce:f0:eb:06:e7:84:da:ef:5f:38:
6d:87:1e:83:40:a9:94:34:59:1d:19:c1:38:3f:6c:
16:0f:e4:10:ce:4c:64:f1:c8:08:75:2e:1b:e0:2f:
03:68:a0:7e:04:6e:24:bc:6e:e5:99:95:fa:17:2c:
18:61:f6:98:0c:01:ff:19:98:17:c6:3d:99:b5:d7:
1b:6c:b4:3e:aa:d1:2a:3c:44:81:be:d5:6a:19:de:
a2:29:bb:eb:05:1f:ca:f2:a0:92:65:8a:67:39:15:
94:1a:3d:78:42:7d:08:27:3d:f5:c4:13:88:d8:99:
12:f7:7d:81:b7:ce:cb:a3:ed:1e:64:12:62:9a:a0:
15:15:5f:50:03:5a:5f:21:c8:ca:87:ab:66:1c:c5:
e3:53:b0:c0:92:85:16:55:d6:85:de:70:14:47:7a:
80:8d:ef:7d:f0:fc:cb:23:9a:26:c4:36:0f:8a:cc:
2d:1a:5f:d0:85:da:a6:e9:b4:fa:f6:26:8d:df:7b:
95:fb:9b:fc:5b:14:bd:4e:9b:9d:af:e3:42:5f:58:
b9:0c:5e:04:66:a7:c1:10:d0:59:9e:5c:9a:cd:d6:
3a:42:08:5c:01:72:3f:21:36:42:14:fb:35:14:09:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:02:AA:BC:59:5B:63:23:AD:25:BB:AD:EC:21:DB:2A:70:58:D3
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:ae:58:9f:e9:51:54:c6:18:3e:8f:06:1b:f3:57:b8:e7:
14:0f:87:33:ec:ae:c2:75:2b:45:91:a3:dc:f5:1e:10:fe:ee:
c8:45:86:25:58:c1:b0:dc:0c:44:bb:58:24:97:17:2c:36:95:
7f:d8:f5:24:ca:bc:7b:6b:ac:e3:79:f2:09:c1:54:35:ae:1d:
23:52:a6:19:3d:c6:b8:6f:f4:5d:97:ca:b5:18:aa:3a:64:fd:
67:8c:cc:f5:38:5f:23:2a:1e:48:52:77:11:ac:ae:4b:94:2f:
aa:29:a9:f4:7b:f2:2f:d9:4b:ce:e9:a2:9c:28:3d:63:8e:d9:
6a:66:7c:80:67:c1:20:83:21:57:7c:34:3b:6e:fa:37:ae:2b:
15:60:c3:ce:52:37:61:2f:50:f1:22:ab:cb:60:7f:c4:fb:6c:
32:47:42:8e:4a:89:10:b4:0e:5c:91:ef:31:e3:b9:3d:de:b5:
54:c5:eb:08:d0:57:41:9d:f8:9f:30:e3:e1:10:f8:6a:e4:a0:
25:fb:d0:5b:1e:ad:e6:85:b5:10:c0:b1:f9:f2:50:c5:ee:c3:
d2:59:45:d1:0b:eb:10:7d:da:75:6d:04:c0:82:79:df:25:70:
4e:f7:9d:10:06:27:fb:e7:69:a0:6e:ad:75:ba:56:32:87:78:
6a:e2:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:29 2026 by rpki-client