Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: apUw2hRHCFCfbVAKYHzNOSGGa6R53PmIiYwwKGbYcJc=
Subject key identifier: FC:AB:52:82:36:89:B8:4E:46:DB:DE:79:BE:8D:93:29:34:FE:97:56
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019F189EF65BC238226E34FB34DD3156EE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:01:38 +0000
Manifest this update: Tue 30 Jun 2026 13:01:38 +0000
Manifest next update: Wed 01 Jul 2026 13:01:38 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: /FN7gRhgAIAxC4zZk2HIdAC/kAhQkB4DKBhXGQSdPXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:f6:5b:c2:38:22:6e:34:fb:34:dd:31:56:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jun 30 13:01:38 2026 GMT
Not After : Jul 1 13:01:38 2026 GMT
Subject: CN=fcab52823689b84e46dbde79be8d932934fe9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:72:36:e0:d1:e4:19:76:6c:bc:8f:c0:83:
fc:27:6b:a6:ae:d1:96:c8:7e:39:eb:e9:38:1e:59:
9b:76:f4:b2:3b:57:62:06:1f:e5:c0:ae:5d:f1:71:
47:33:bc:7a:9e:47:9e:d7:7b:40:b0:29:d1:00:ca:
02:8d:9f:c9:11:a0:25:8b:16:d8:96:8b:cf:9c:b7:
4c:61:04:7d:5d:3e:b9:93:49:d3:2f:cf:d2:6b:5d:
dd:d4:97:ff:c4:84:a0:ac:cb:82:1d:aa:14:4a:35:
7a:c2:c6:31:3b:ef:cd:b2:a9:a1:ab:b2:d6:21:be:
13:79:e9:74:83:20:e0:2f:b5:1f:53:12:dd:4f:d4:
db:fb:b0:5f:0a:f4:39:aa:73:cd:66:c9:78:e8:e5:
3a:47:ba:d6:38:02:05:4e:72:44:6d:e2:71:b6:d7:
7a:dc:22:8c:08:84:56:54:d5:f7:42:15:b7:14:f7:
ba:12:eb:4d:8f:cf:2f:7f:7d:62:24:34:ab:6e:92:
9c:91:45:d7:fe:4e:ec:e7:d5:61:ce:6e:cc:5f:a1:
08:9d:f4:6e:0b:e3:b7:4c:19:a7:fa:55:93:d9:b0:
8e:53:51:c8:22:93:54:cf:67:82:9b:9a:63:a5:43:
19:64:c5:11:df:fa:7c:33:d4:26:48:2b:0d:6b:96:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:52:82:36:89:B8:4E:46:DB:DE:79:BE:8D:93:29:34:FE:97:56
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cd:bc:b5:13:f8:74:2c:97:e7:8d:3d:19:5a:05:29:7c:a0:
1c:a6:d0:f9:96:a4:eb:80:cf:cb:29:8f:eb:4b:70:57:93:94:
c9:be:b1:53:f2:38:c3:a6:38:de:d4:2a:b5:57:c8:c1:3e:e3:
3e:9e:c7:a7:17:be:c8:40:fa:f9:f8:b3:e5:b6:c3:32:5a:da:
d3:fa:09:40:7b:73:2b:ea:dc:7e:aa:69:59:be:7f:c7:c2:b5:
51:6c:20:e7:ca:41:4d:05:12:31:43:de:b7:7c:92:bb:0e:df:
d8:41:6b:2c:be:a4:2d:6d:09:23:5d:48:56:97:bd:2a:f7:a1:
cf:4c:32:ba:5c:63:fc:43:c5:c7:ec:b2:72:37:d6:5b:e6:15:
99:56:6f:15:f7:7f:cf:e1:01:b3:4f:94:13:5a:54:47:3e:05:
dd:8b:a9:33:ba:ac:79:1f:c7:b3:51:57:e2:05:e3:b5:fa:e5:
cf:c0:6a:96:67:55:75:4f:4b:39:1a:9d:70:2e:27:9e:4f:8b:
2e:6d:13:81:30:4e:cd:32:ce:f2:e8:3a:ab:4b:dd:8f:5a:d6:
20:e1:49:44:6a:70:6a:81:7e:66:1d:47:7a:b1:01:f3:01:04:
51:19:86:d7:45:fa:f1:7e:e4:ef:0b:50:8d:82:1f:60:06:57:
1e:f3:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:19 2026 by rpki-client