Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: IARbSFDgEKSY9T23seLPk6TG3khadXFeuqiDkkvr8/Y=
Subject key identifier: 55:38:D0:67:14:35:C9:E6:15:1F:95:80:05:A4:89:FA:14:41:2B:AE
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019D2695C07C638E5417C127E2693660F8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: mhzOrqeYNT7SjpUPXv-s1PAWjw8.roa (hash: Cbf7NCR/yFej0NrknKmJmQagLdwvhDzTJuSAw2w2l7c=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: JxDkhfudhE3utXvGndGcP204/IK0MTx9tpJWGo4/GXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c0:7c:63:8e:54:17:c1:27:e2:69:36:60:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=5538d0671435c9e6151f958005a489fa14412bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:16:0c:ea:bd:28:7c:bf:f4:ae:0c:f3:b9:
09:11:d7:81:62:fe:c3:64:ff:63:df:7b:a0:4b:13:
2b:e8:94:a1:79:cc:44:26:cf:cd:27:32:c0:77:91:
ec:36:a2:eb:2d:da:a3:70:d5:60:32:2a:7f:90:bd:
7a:0f:ac:c6:63:e6:10:85:e1:89:6d:51:59:0f:b4:
76:74:bf:4c:08:9e:70:42:71:d6:90:3c:81:1a:3c:
d7:14:cc:8e:17:ae:af:33:a1:9e:d6:79:56:e1:b9:
78:27:50:58:28:05:d9:c1:82:05:c8:05:8e:9f:ca:
26:5f:7f:75:b7:f6:54:73:15:8b:b5:7f:d9:3f:5c:
0d:9b:22:60:4f:7c:34:06:af:8e:08:65:31:ad:41:
63:54:a3:df:dd:a8:3c:97:2f:6a:7a:08:45:f1:7b:
20:e8:cf:9d:a5:bc:3c:37:83:dd:64:c5:ae:f3:bc:
b9:4c:05:91:6b:77:2f:34:f2:2b:bb:04:d9:2b:8c:
85:89:a8:95:c4:42:6f:60:1d:7a:63:2b:2a:05:7f:
72:28:7e:d5:41:55:a4:11:1d:ef:09:7c:d6:ae:3e:
ad:f2:44:31:3c:41:b7:bf:e3:bb:11:15:e4:19:9a:
2d:17:59:c4:6a:b9:aa:ae:fd:8e:a5:2c:c8:3a:a3:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:D0:67:14:35:C9:E6:15:1F:95:80:05:A4:89:FA:14:41:2B:AE
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fb:ed:db:27:27:2c:ab:b5:06:88:d7:44:d3:a4:a8:25:ce:
f8:0c:9a:00:3e:b2:2b:04:0c:8a:6f:4a:0e:82:94:6f:8a:79:
21:12:d2:08:f4:a0:74:be:6f:61:b4:ff:02:bc:31:cd:2d:c2:
98:f6:50:ab:cb:48:5a:9b:51:35:ca:a2:09:e7:0e:d3:de:01:
1b:7d:51:fb:d6:43:9c:c3:c4:00:fa:e8:41:ec:01:b3:fd:55:
f0:51:56:5e:f0:d5:a5:c9:99:92:11:e4:ba:29:e4:ef:81:aa:
79:af:5d:f6:da:c3:3e:dd:75:0d:64:00:c9:7e:f9:03:06:5b:
ad:59:c0:8e:d8:15:3d:47:b8:9f:fd:ad:1b:7a:56:b7:55:32:
ab:b2:db:6f:17:88:de:27:f4:bd:dc:c7:ce:44:f7:f4:90:80:
7d:de:15:e0:de:ad:24:0c:93:de:eb:49:81:a7:88:69:2b:fb:
21:14:1e:28:86:e4:07:c2:e2:be:d7:d3:9f:ae:20:c5:1f:7b:
c9:0b:28:4f:33:5d:c4:e6:b5:8e:8c:81:c3:a8:aa:bf:f8:5c:
67:e6:fb:1f:f7:3a:d5:ce:0c:b3:c9:c9:48:36:39:55:78:e3:
56:ba:0a:37:2e:83:51:04:41:93:53:73:3b:97:0d:2a:e0:e3:
09:16:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client