
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: GEWc2FJjcBkE+S3W6brsVOsckxusPMj413d2Qs4bJJ8=
Subject key identifier: 69:1A:70:96:FC:08:B7:DF:52:2B:12:CF:53:02:AD:82:9B:58:EC:7E
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019ED319205BBA7C73D7B5E347C1182D99AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 01:01:39 +0000
Manifest this update: Wed 17 Jun 2026 01:01:39 +0000
Manifest next update: Thu 18 Jun 2026 01:01:39 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: VxRQlQBlBoJYHlSUQlL7gG2A3BZqXKepjU15HeY6Eyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:19:20:5b:ba:7c:73:d7:b5:e3:47:c1:18:2d:99:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jun 17 01:01:39 2026 GMT
Not After : Jun 18 01:01:39 2026 GMT
Subject: CN=691a7096fc08b7df522b12cf5302ad829b58ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:e3:cc:65:4b:b5:81:dc:56:66:bc:81:d5:
29:6d:db:66:62:44:d5:8d:df:65:03:fe:19:b7:36:
cd:a7:5d:75:d2:6d:90:3d:e4:3d:85:e0:ee:e1:d2:
7a:43:d4:6e:38:11:62:6b:dd:af:fe:33:cd:f3:3b:
ba:62:86:7d:25:4d:22:d5:41:74:df:82:2e:aa:ef:
f5:ea:6b:c2:1a:6e:f6:36:11:70:48:10:7b:3d:67:
9d:a1:27:51:8f:47:67:2e:03:38:c2:4e:1a:02:69:
6c:05:14:0d:25:4e:5e:ed:33:bd:50:f1:32:fc:86:
ab:f7:33:64:5d:a3:1d:eb:58:50:14:b0:94:ea:e2:
31:23:c4:f8:4a:51:dc:24:a6:02:88:19:7e:bb:d7:
39:78:37:92:73:99:9e:98:5d:08:f7:cc:f9:cd:98:
5d:5b:5b:ae:b1:96:d4:04:00:37:1f:6c:e2:14:ad:
3e:cb:2a:0f:a2:d3:1b:ac:7e:0b:1b:6c:a0:ab:bc:
74:90:72:c3:46:1c:00:25:5c:a2:63:9e:a0:c5:08:
32:9f:7c:0e:6a:2b:e4:ed:dc:e2:cf:f3:ca:64:49:
f0:6d:52:1e:28:9f:a5:b0:90:2a:1f:bc:ce:45:d4:
c3:8d:37:62:57:1c:30:35:1f:68:df:81:92:31:54:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:70:96:FC:08:B7:DF:52:2B:12:CF:53:02:AD:82:9B:58:EC:7E
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:af:c5:0a:02:58:b9:28:40:8f:93:4a:7c:86:4a:98:8f:
d4:db:ab:2e:ad:43:0f:4c:66:fc:0c:33:31:c4:af:de:dd:00:
a6:b6:68:96:f6:18:02:0e:5f:3b:7f:b0:4b:c8:55:0f:d3:46:
c4:f2:8a:f4:43:04:fb:b2:94:ee:13:f1:66:a8:f7:a5:56:21:
de:ce:96:02:a5:76:f6:1c:a3:58:e8:d8:fb:20:93:a2:f4:32:
6b:b5:dc:e4:39:88:e7:06:94:c5:f4:7c:7f:bc:7f:34:a0:fe:
7d:46:df:12:bb:7d:d3:eb:23:c6:94:6c:63:9e:16:36:b7:c1:
ad:d3:b2:26:dd:4c:d6:46:ef:29:95:73:9e:09:85:d0:ec:d1:
c8:44:4b:65:f5:fa:35:4d:37:e8:87:b4:95:07:3a:ba:93:b7:
d9:a2:f9:82:09:02:c8:3e:56:36:6b:93:c3:10:b0:b5:9e:93:
19:4a:e8:29:6b:d9:e2:f9:f5:c1:39:07:b0:57:4c:60:0f:bc:
8f:0d:67:48:fc:25:b1:46:bd:26:14:50:8e:a0:85:81:34:18:
de:30:70:7c:99:10:b7:23:37:a2:0b:c1:1a:44:f5:b6:66:32:
45:8a:ee:bb:2c:d2:16:da:5c:94:9a:72:ef:88:ae:99:a9:04:
3f:8d:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:47 2026 by rpki-client