Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: ZGFUaarffU8D6OWXbbYJABpefqc86Y48JidCaf6n45o=
Subject key identifier: 73:1F:D8:F8:37:F7:68:8D:14:8C:28:32:03:BE:47:0C:EE:69:92:61
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019D37C02AFBC338CB8380187AEF2AEDB267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: IVhmq63gfqZeisZl+rhXMsBl6FbiIPxJkMRhXydM/bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2a:fb:c3:38:cb:83:80:18:7a:ef:2a:ed:b2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=731fd8f837f7688d148c283203be470cee699261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:16:7c:c2:e4:7f:f1:7f:99:89:36:7b:84:
97:42:44:e9:f9:22:ff:b3:8f:fa:23:b2:1d:df:96:
c2:60:68:27:c3:a6:5c:13:c5:d9:6a:1d:7d:f8:9a:
3d:ad:ca:fe:16:bb:71:60:ea:28:87:44:57:c6:4d:
66:d9:e3:ff:f7:65:64:27:e5:b6:f7:6c:e0:fc:9d:
8e:ae:53:0b:62:8f:6d:d1:23:ed:2f:a9:b3:14:c8:
83:fa:ba:57:59:1d:e1:b4:a8:d8:dd:47:0d:2f:f7:
8f:25:8c:83:e2:7f:2c:6b:da:4a:8e:d6:28:16:0f:
e8:79:a2:9a:8f:cd:c7:23:2d:4a:ce:7f:8d:62:e2:
32:79:46:8f:f6:f4:13:2b:c7:2f:9d:4c:b8:43:0a:
e8:27:08:36:57:be:d3:6d:39:0d:a6:86:3c:28:fa:
2a:64:c3:03:10:72:ad:ed:bd:49:74:b1:d4:15:fe:
c6:94:2a:bc:01:3a:28:a3:45:b3:7b:12:77:f1:fd:
71:1e:22:28:e6:07:f2:eb:9c:43:11:85:c3:a0:e7:
9e:f8:3b:48:47:37:ae:35:21:41:e5:29:e4:49:70:
58:17:8c:60:5c:ea:21:57:42:41:a5:82:6e:c7:cb:
55:d3:b2:19:cf:2f:06:4e:be:4b:87:cf:ec:36:de:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:D8:F8:37:F7:68:8D:14:8C:28:32:03:BE:47:0C:EE:69:92:61
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:1b:3c:0a:df:c1:7c:7e:5a:25:29:f5:ad:d3:46:3c:1e:
b8:f3:e9:d3:ab:82:e8:93:17:80:91:b8:24:cd:45:fc:1c:d3:
f2:db:b6:bc:d4:1e:f9:5b:5d:65:8f:7c:bb:2d:61:e2:83:31:
01:c2:a5:28:ef:67:ff:30:d8:50:00:05:98:cd:08:cc:22:12:
2e:9d:03:e5:23:37:1a:3c:e0:5d:c8:0a:3c:07:12:b2:36:20:
b5:ed:fb:87:09:ac:9a:91:8d:d0:b8:15:1c:c0:bb:6f:0d:a0:
00:13:05:4d:94:82:94:d0:bb:4f:6e:0a:06:1c:18:ed:04:18:
fe:4e:76:93:ec:13:21:6c:0e:cc:dc:c3:93:3f:2d:18:a5:e8:
bc:d1:55:9d:88:a7:2b:0a:8b:96:4a:5d:21:47:fd:1e:3a:4a:
be:02:ad:09:0c:f6:1a:dd:42:e2:f2:f5:69:8d:d2:60:5f:53:
a6:83:fb:49:65:eb:6e:e1:58:24:27:9d:31:fa:15:4b:56:76:
5f:a8:7e:32:bf:44:64:a0:49:34:07:06:d1:4b:c2:f0:07:29:
54:b2:37:4d:ea:27:ca:f5:72:4e:94:f4:87:ee:d0:97:d8:77:
6f:4a:84:14:9d:e2:86:74:3a:33:b6:40:5f:34:a4:24:02:ea:
e1:00:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client