Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 5c43XQsHKVqq8PlFYUNhf8CInUfwxbACQnFcJ5Z0GFw=
Subject key identifier: EC:1B:69:2B:BB:64:97:35:38:B3:CB:76:62:2C:49:7A:2F:D1:71:21
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01A0D8A870598248B81D5E5104348484F73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 13:01:52 +0000
Manifest this update: Fri 25 Sep 2026 13:01:52 +0000
Manifest next update: Sat 26 Sep 2026 13:01:52 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: Lr37+NXftBW1dvujUUmNu6Szy6+Ped/Ft5iv+UZNWLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:70:59:82:48:b8:1d:5e:51:04:34:84:84:f7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Sep 25 13:01:52 2026 GMT
Not After : Sep 26 13:01:52 2026 GMT
Subject: CN=ec1b692bbb64973538b3cb76622c497a2fd17121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:0a:4d:58:78:96:0d:a2:68:5b:26:70:1e:
8f:7c:30:77:c5:1a:94:d9:68:28:8a:9d:d5:d4:f5:
a4:59:bf:5c:2f:c7:d4:b3:c8:86:fc:ae:f6:af:57:
89:74:b3:a3:07:63:42:e5:bd:d7:e2:60:8d:e1:72:
0a:8e:82:ce:c1:03:5e:dd:25:c8:0a:5c:56:15:96:
20:c4:c5:cc:16:2c:96:be:c3:07:16:01:7c:26:a7:
c9:fb:f9:a6:50:d0:61:3d:29:52:0d:6d:55:b8:c5:
50:0e:65:9f:93:45:13:8e:fe:ab:0f:b4:f0:ff:f6:
07:d8:45:b1:98:2f:93:17:49:22:9c:9b:28:73:28:
de:fb:f1:54:db:98:ac:2b:ec:9b:b3:90:15:84:ec:
dc:e4:71:a7:30:24:f6:b9:76:7e:dd:3e:ae:a7:b9:
74:b8:9f:06:4c:ce:b7:dd:62:02:a5:8c:5d:70:62:
a5:04:97:1c:9f:ba:a0:c2:00:68:21:34:d9:36:70:
52:d0:f5:0b:52:64:05:43:bf:b6:a1:3d:45:81:12:
1b:b9:6c:3a:a5:be:9d:c1:f4:09:0b:f6:65:de:cf:
de:1d:1b:54:f9:4d:4b:59:67:49:a0:54:cd:db:36:
4a:55:0a:fe:1d:0c:11:f3:eb:9d:6b:e1:88:6a:46:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:69:2B:BB:64:97:35:38:B3:CB:76:62:2C:49:7A:2F:D1:71:21
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:ee:b3:0b:dc:ec:ca:75:a8:04:94:c6:79:e6:7b:b6:fe:
70:ad:a4:4d:be:b3:bf:ef:91:b5:71:d4:d0:6d:0b:ee:d9:c7:
be:ef:e5:53:da:fc:07:89:5b:f7:f6:66:57:05:f8:ab:1e:ad:
b0:01:95:bf:5f:ec:c9:0f:d5:c6:57:b0:62:cc:81:4c:85:3b:
f5:d8:14:65:74:c1:ac:62:0a:c5:41:ae:ba:b7:b1:13:81:17:
2f:93:31:0b:ac:8f:56:c8:18:74:41:f6:68:1c:98:43:58:c2:
77:77:8d:e7:74:4c:e9:ff:85:9e:77:49:17:c4:65:24:dd:7c:
a6:27:8a:4c:b3:36:e6:7f:71:b3:6f:6f:18:2f:ac:c7:ee:c3:
5d:a3:80:07:cd:24:17:cb:65:0a:e4:e5:cc:df:ee:b5:aa:1d:
3b:a3:4a:a4:80:ce:b6:bd:51:34:44:b3:b9:65:95:91:e4:6a:
e5:3a:a5:0a:fd:bd:38:65:6e:46:9d:50:61:4d:4a:bc:55:6e:
82:d0:aa:aa:78:c7:99:43:e1:75:58:d8:e6:26:59:6d:20:a7:
d0:29:db:75:10:29:c9:1c:08:66:28:54:39:63:9a:f1:5a:f0:
93:06:d0:29:e3:fa:e3:79:89:92:b8:11:49:a4:1a:ff:35:c0:
7e:b3:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:49:25 2026 by rpki-client