Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: nkNqv057O+7wSZsBT1iVTwrICuirQTm0tPQN0rlMYAU=
Subject key identifier: 7A:B2:CD:7B:57:B4:CF:55:FE:DA:02:B7:51:55:9D:02:80:12:93:E0
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019CAAC62AAC95769F15A8E677FD32DC20FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: BVh/F7hLexndMfTBQSLNDryqVWTSc3SH/w4E+/QlAdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2a:ac:95:76:9f:15:a8:e6:77:fd:32:dc:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=7ab2cd7b57b4cf55feda02b751559d02801293e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:ac:00:87:d2:f0:aa:3e:dc:c4:f7:43:8a:
45:b1:99:47:f8:8d:09:28:05:d5:38:fc:86:d0:f2:
8d:f9:f0:6c:05:f8:38:db:e1:36:0d:a2:34:db:55:
c7:0d:27:9b:e5:59:ec:fc:e0:e2:4f:f9:1e:18:bf:
8c:0b:a9:0c:d3:8e:69:4e:0c:2f:80:93:f6:b7:8e:
22:5c:db:8e:08:f1:72:21:5e:86:42:32:8f:61:c8:
70:37:66:a8:3b:cb:f1:48:52:ef:1c:bd:f6:57:d9:
2d:68:c2:81:f5:f1:18:e4:97:81:44:ef:56:1c:7f:
c5:21:29:3f:d2:55:b9:55:45:f1:86:e6:69:e6:41:
6a:72:78:81:ff:80:9b:80:1a:e6:4a:af:9d:71:80:
86:40:67:95:6f:aa:90:99:76:fa:13:fc:f7:b1:18:
df:1d:74:e8:ad:23:97:22:2c:04:8b:73:81:0e:b1:
b2:e2:4a:f1:bd:71:86:36:5a:99:9b:0a:20:61:42:
fa:ac:18:0b:3a:e3:a6:11:fc:78:9e:96:58:01:e0:
2d:83:0a:80:c8:88:89:7b:5a:83:76:67:06:b7:ba:
03:e2:6f:29:9c:5b:48:55:c8:75:21:78:30:2f:45:
0f:11:13:fc:98:14:c0:a7:3a:75:9c:7c:7a:9b:00:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:CD:7B:57:B4:CF:55:FE:DA:02:B7:51:55:9D:02:80:12:93:E0
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:12:58:7b:97:ef:56:f2:a7:f7:58:8b:da:47:dd:b6:5e:
f6:a5:f7:ce:0f:42:8c:22:28:26:25:3a:82:27:8d:dc:7e:ea:
22:d7:0f:c0:51:6e:01:2d:f6:38:3f:44:54:97:d2:1a:35:29:
4d:df:9d:3b:03:48:6e:8c:14:cc:c4:df:9f:f6:74:33:c5:c1:
9b:cf:a2:c4:3c:e9:64:31:73:35:61:dd:6e:2c:ca:3c:0f:73:
71:dd:af:66:5e:e8:de:32:9c:ec:3d:9c:c8:42:9e:19:ad:b8:
00:f0:e8:17:ea:6e:86:09:3e:40:46:0c:37:b8:f2:c1:a9:a4:
1c:c8:d9:6f:c0:03:d3:74:ab:1d:e0:f6:fe:50:2c:4e:80:c7:
74:6d:89:16:d0:e3:49:84:3e:22:f6:bf:08:69:a2:62:90:28:
ba:4a:95:cf:29:0c:42:e3:fb:cd:e4:1b:e3:33:cb:2f:02:ca:
3e:e2:fc:fe:30:be:2d:28:62:94:da:44:7a:76:62:13:88:e2:
74:42:9b:8d:db:f2:25:2e:9e:8c:c8:9a:ba:46:23:c5:b8:88:
bb:9a:d5:e3:a3:13:c0:25:da:27:ff:33:5c:91:05:85:25:83:
25:8b:ca:36:31:85:30:b1:47:cf:0d:79:e1:68:38:3f:a7:68:
ef:3a:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:37 2026 by rpki-client