Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: A5thN4e1zn23DcQI13MIMT/pTvW1oJfCT7s+/30Yqi4=
Subject key identifier: F1:8D:09:D5:D4:E2:93:D3:FC:C6:2D:9A:56:26:6D:47:A3:99:19:10
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019D984F8C555C2575BCC190508529E37B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: oTWrymCldGwVP4P9q8FLGsWmKv9S/qdt7TPWty0yBFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8c:55:5c:25:75:bc:c1:90:50:85:29:e3:7b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=f18d09d5d4e293d3fcc62d9a56266d47a3991910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:ba:6b:7e:d3:f7:88:7a:8f:54:55:5b:cd:
de:26:1a:17:d3:8d:6a:08:98:6c:02:47:47:fe:53:
83:0f:24:2b:fe:d9:18:44:cf:d3:70:fb:32:72:5b:
c9:60:22:d1:c8:cc:1f:66:f8:4d:21:40:9c:eb:6b:
3a:31:ab:35:8b:f8:ac:3e:6b:70:c2:d7:d0:22:ef:
85:d2:1a:19:49:49:6e:1c:8d:c7:21:d5:c2:43:c1:
11:0c:89:e2:94:68:0a:36:15:4d:4b:b4:b5:05:c2:
18:a2:fa:fb:24:8b:11:cd:21:df:12:49:87:d1:e2:
2d:5b:51:a3:90:55:3e:68:ce:9d:99:b2:52:e1:8a:
bb:54:0f:70:57:94:89:a8:b3:dd:f2:0c:46:9a:60:
f1:9e:c7:2e:e9:10:8a:08:e7:29:50:c5:6e:01:e1:
c6:cb:de:5d:1c:0e:58:46:cc:1c:9e:e7:ed:97:e2:
da:24:22:a2:ea:8e:fe:f2:ff:e9:7a:5b:cb:09:71:
48:70:c0:b0:f8:dd:9f:71:8d:34:e6:e6:7d:db:66:
f4:d1:e3:ad:68:18:2f:db:0a:db:44:39:35:80:c5:
bc:16:29:a5:3e:4c:8f:88:5d:ac:c2:09:91:e5:c4:
f9:cc:33:23:ca:65:c9:8c:31:73:88:47:42:02:66:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:09:D5:D4:E2:93:D3:FC:C6:2D:9A:56:26:6D:47:A3:99:19:10
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0d:9f:3f:63:39:03:81:5a:f5:fc:62:a7:3e:fd:74:1e:4e:
18:f0:f8:28:b4:4f:1d:c9:8c:dc:60:b7:76:f8:a8:82:14:4b:
22:43:c0:5d:4f:ec:8c:88:a9:9d:55:d1:3f:f2:9c:85:df:ff:
eb:e8:91:6e:b4:cf:f6:f3:ac:59:d2:b9:72:50:5c:96:88:51:
e9:f6:4c:86:5c:02:2c:0e:c4:1b:c6:bf:3b:11:b4:a4:24:2a:
11:a9:ca:59:c4:03:7f:ac:60:fe:8e:c2:57:c1:3b:22:58:8e:
e5:12:61:11:46:3d:c2:21:9f:9c:31:41:73:d0:cb:bf:a7:e4:
f5:3f:5f:ac:25:74:35:85:c3:e9:01:dc:76:3b:6d:f4:31:d2:
34:ef:91:42:96:80:e8:4d:94:72:e9:93:d9:b3:68:1f:10:48:
d1:8e:e6:80:a3:73:3b:9f:c5:fe:43:6f:19:76:74:38:05:5d:
20:5f:53:52:9e:55:78:df:e2:2a:86:b9:6d:d3:a8:0e:11:fd:
81:73:15:67:bd:81:0d:cd:14:78:b6:c1:a6:77:77:ab:e5:32:
e9:22:f1:a7:60:13:f0:63:af:21:72:6b:de:79:41:fc:84:d3:
72:39:fb:8b:04:58:41:4e:cf:a3:c9:09:17:cd:ad:d9:92:9f:
2d:eb:41:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT4xVXCV1vMGQUIUp43sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjYwNDE2MjIwMDQzWhcNMjYwNDE3MjIwMDQzWjAzMTEwLwYDVQQD
EyhmMThkMDlkNWQ0ZTI5M2QzZmNjNjJkOWE1NjI2NmQ0N2EzOTkxOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5u6a37T94h6j1RVW83eJhoX041q
CJhsAkdH/lODDyQr/tkYRM/TcPsyclvJYCLRyMwfZvhNIUCc62s6Mas1i/isPmtw
wtfQIu+F0hoZSUluHI3HIdXCQ8ERDInilGgKNhVNS7S1BcIYovr7JIsRzSHfEkmH
0eItW1GjkFU+aM6dmbJS4Yq7VA9wV5SJqLPd8gxGmmDxnscu6RCKCOcpUMVuAeHG
y95dHA5YRswcnuftl+LaJCKi6o7+8v/pelvLCXFIcMCw+N2fcY005uZ922b00eOt
aBgv2wrbRDk1gMW8FimlPkyPiF2swgmR5cT5zDMjymXJjDFziEdCAmYAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGNCdXU4pPT/MYtmlYmbUejmRkQMB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw2fP2M5
A4Fa9fxipz79dB5OGPD4KLRPHcmM3GC3dvioghRLIkPAXU/sjIipnVXRP/Kchd//
6+iRbrTP9vOsWdK5clBclohR6fZMhlwCLA7EG8a/OxG0pCQqEanKWcQDf6xg/o7C
V8E7IliO5RJhEUY9wiGfnDFBc9DLv6fk9T9frCV0NYXD6QHcdjtt9DHSNO+RQpaA
6E2UcumT2bNoHxBI0Y7mgKNzO5/F/kNvGXZ0OAVdIF9TUp5VeN/iKoa5bdOoDhH9
gXMVZ72BDc0UeLbBpnd3q+Uy6SLxp2AT8GOvIXJr3nlB/ITTcjn7iwRYQU7Po8kJ
F82t2ZKfLetB3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:20 2026 by rpki-client