Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 2SLv+afMfFRn0IeoR2jiI4uNrQMAY5UAe6u/U+60t+8=
Subject key identifier: 52:06:A1:DC:79:6D:C8:65:DE:BE:F4:22:CA:09:CF:6E:37:2D:0D:90
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01A0024AEE6A5803226C47175554126C2EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 22:01:00 +0000
Manifest this update: Fri 14 Aug 2026 22:01:00 +0000
Manifest next update: Sat 15 Aug 2026 22:01:00 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: +aQEZvyF+Z3eBjjSQUn64gwB/POgnQzRy4uJP+T7CNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ee:6a:58:03:22:6c:47:17:55:54:12:6c:2e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Aug 14 22:01:00 2026 GMT
Not After : Aug 15 22:01:00 2026 GMT
Subject: CN=5206a1dc796dc865debef422ca09cf6e372d0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:47:c5:4b:f2:95:09:40:05:ea:2b:bf:59:
95:d0:9b:2b:0b:63:57:c0:3e:e5:6a:24:69:61:ce:
f8:2d:76:26:6d:0c:c2:6a:89:9f:4e:78:d1:cc:9e:
92:fd:87:06:69:db:01:0a:33:d4:3f:27:5f:00:c1:
34:37:a8:ec:e3:07:e3:f1:41:d5:90:3b:fa:81:1f:
7c:59:01:25:10:1b:47:43:b2:27:73:90:aa:7f:bc:
64:a1:08:f0:e4:11:ca:3a:0c:5e:65:af:ec:c5:1e:
56:de:b0:7d:05:24:6a:f8:dc:30:d1:11:1b:6e:67:
91:86:24:39:6c:c7:18:4b:25:9d:86:b5:c7:1e:dc:
90:a2:34:2a:e3:7c:4b:53:5d:03:3a:c2:fa:59:9b:
34:93:fb:35:49:8a:7a:41:87:0c:6b:f2:57:f7:8c:
b6:61:53:9f:4c:19:c3:d6:6f:45:05:5d:c5:52:3a:
b2:10:44:79:50:a5:b6:45:0d:a4:95:41:28:ff:80:
84:10:8e:32:fa:5b:78:bb:8c:c1:db:d2:1a:0c:62:
f1:f4:5f:a4:8b:12:f3:8c:65:e3:12:40:ce:d4:4a:
a4:08:8a:3b:70:06:de:7a:fd:d0:7a:1a:1a:d7:81:
b5:dc:55:2f:aa:60:8b:12:7d:17:da:24:0a:86:11:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:A1:DC:79:6D:C8:65:DE:BE:F4:22:CA:09:CF:6E:37:2D:0D:90
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:31:cf:7c:8e:4f:e0:f8:56:49:a9:a2:9c:c8:df:9a:72:
e3:49:5d:06:0b:2e:d5:68:72:c8:b8:af:9c:06:66:13:54:44:
fb:74:c2:c2:68:16:d7:71:7f:5c:84:8d:82:ea:da:5b:a8:1e:
b1:92:ce:55:bb:c0:6e:9d:c1:49:c2:13:7f:05:6a:d8:d8:ed:
3d:e8:b3:25:05:42:a4:e8:ce:4f:a2:ee:eb:04:e0:cc:f1:2b:
73:be:73:b1:6c:92:d0:06:97:16:7f:f8:43:f1:62:f4:b9:79:
59:4d:0f:52:b4:70:49:a6:47:6c:b6:42:69:00:17:33:f6:98:
44:f1:50:d9:5a:57:f5:c1:f6:fa:7f:eb:9d:14:88:86:0c:23:
58:b4:f1:88:69:43:a3:22:b6:08:19:a7:a9:d9:c5:a4:bd:9f:
59:97:43:1e:90:4b:8e:a6:23:13:b2:83:33:1f:a0:07:58:20:
c2:d0:e3:7c:c6:c7:e2:ca:c4:09:83:c6:66:26:92:7d:99:20:
72:1a:75:fd:1b:c3:55:cb:03:31:8d:da:47:b7:03:f2:93:62:
a6:e7:b4:32:d2:3f:44:9c:d1:2e:dc:78:ea:6e:6f:b3:03:70:
fd:4a:69:e6:b7:81:8b:6a:aa:e6:f5:3a:a2:94:53:ed:ed:36:
17:77:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:50 2026 by rpki-client