Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: D4t/IQcAD2xx+2fcQNGrnlN+1neKxweWanYu8VNuFIU=
Subject key identifier: 91:DD:BF:96:18:BF:98:B1:DE:A1:FB:57:0D:5A:5E:4A:51:53:E3:0A
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019CAAFD89C0B909774EEAF4E13302E8843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: mhzOrqeYNT7SjpUPXv-s1PAWjw8.roa (hash: Cbf7NCR/yFej0NrknKmJmQagLdwvhDzTJuSAw2w2l7c=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: DY0FP7pZkaDDbdYtMfoCfWppb2qVloNMIxIK6AUgBO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:89:c0:b9:09:77:4e:ea:f4:e1:33:02:e8:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=91ddbf9618bf98b1dea1fb570d5a5e4a5153e30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:9c:20:40:0f:b8:af:35:05:5e:94:49:fb:
a3:b6:12:a8:1f:1a:0c:ee:98:39:cd:3f:c9:01:26:
7d:81:6b:b2:c4:3a:1a:15:35:89:f1:24:6f:1a:2d:
e5:32:65:09:76:41:38:48:6d:12:72:69:29:36:8c:
90:e6:24:4d:5f:2e:a0:a9:04:4f:08:33:77:3b:37:
ee:4b:7b:9b:37:f2:0a:c1:e2:2a:93:92:75:5c:c9:
b8:3e:27:79:3e:b9:63:aa:81:05:e5:44:38:d4:27:
eb:23:61:38:9f:47:6f:ba:86:c9:ff:c1:e1:97:28:
a0:7c:a9:fb:d6:be:25:8e:4c:1d:57:65:ba:91:2d:
a6:5f:87:65:0f:a3:08:82:2b:6c:be:01:f9:74:65:
0b:9a:49:e0:8e:f4:9b:30:d1:c4:73:2b:ca:58:6f:
c3:a8:41:f1:13:2d:cc:c4:4a:6e:f6:c0:03:a8:ea:
ee:04:07:0f:bb:19:17:22:18:6c:db:c9:f3:a6:fe:
d2:ea:92:8b:71:9e:55:f0:c7:75:d5:bd:90:92:22:
c9:76:b2:08:c8:56:c1:fa:54:cb:fc:65:f7:42:91:
26:f4:9b:c9:59:13:05:25:d6:ce:8f:97:5d:8e:0e:
a5:de:c5:d6:9a:be:75:ae:af:f7:c5:f5:13:35:8b:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:BF:96:18:BF:98:B1:DE:A1:FB:57:0D:5A:5E:4A:51:53:E3:0A
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:5e:ac:37:20:d2:82:02:fc:f6:e7:d3:24:ac:68:c2:26:
05:dd:78:18:fb:8e:07:c9:b6:e5:1c:28:de:50:0b:19:32:97:
0b:54:2b:3a:56:8e:43:a5:17:20:3d:b5:17:e2:2d:d8:d3:e7:
3c:a3:67:32:5b:3e:99:be:0c:a3:d1:83:81:55:15:8b:db:0c:
fe:e4:9a:0a:dd:f2:2f:17:3c:73:32:87:12:82:63:c7:8a:07:
99:14:0e:ec:21:1d:60:62:7d:23:47:61:4c:23:e0:ae:c5:55:
9f:6e:f0:1c:4b:44:93:4c:f3:0b:b9:70:94:94:41:8a:2a:f7:
bf:e8:3c:e9:54:d8:73:ab:8f:87:a4:1b:15:1b:02:69:a9:ce:
b9:f9:ed:85:c1:ac:a4:01:0c:22:0c:20:c9:ad:a7:7c:96:68:
fc:be:ed:6c:53:10:2d:ab:f5:7a:e0:f8:e0:e3:82:d5:d3:1a:
29:49:94:eb:da:45:77:4c:ea:7a:58:50:ae:9f:d8:3c:ab:8d:
4e:41:59:19:49:a6:af:50:4f:d5:00:2d:e6:b1:d5:2d:b3:4f:
b1:b1:4d:0d:14:c1:1f:ff:2f:6a:b6:27:d8:e7:51:d7:80:bb:
68:42:f2:2b:81:e6:b3:14:06:2b:53:ae:f3:fc:56:a2:46:02:
8b:dc:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:09 2026 by rpki-client