Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: kHvuRme45ikrn54at5DAKv72bdQLVRCCDdLxCyCoX/s=
Subject key identifier: 7C:A1:94:3C:6F:38:13:76:0F:AC:65:2D:B7:07:AB:5D:1E:BA:5B:69
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01A15BFA2ED47238DB0EBACD12294DAB3C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1AB5
Signing time: Wed 21 Oct 2026 01:01:25 +0000
Manifest this update: Wed 21 Oct 2026 01:01:25 +0000
Manifest next update: Thu 22 Oct 2026 01:01:25 +0000
Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: 5DK8vsCbcCkGPJG71rlMRQzy/acm1W3a13B6pvyTSmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:fa:2e:d4:72:38:db:0e:ba:cd:12:29:4d:ab:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Oct 21 01:01:25 2026 GMT
Not After : Oct 22 01:01:25 2026 GMT
Subject: CN=7ca1943c6f3813760fac652db707ab5d1eba5b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:2d:7a:8d:0d:63:f1:1b:e2:50:f5:51:42:
ed:e0:c6:38:d8:1c:f1:fa:01:33:c5:26:24:60:99:
5c:54:87:3b:d9:7e:2d:8a:88:51:9f:35:51:36:0d:
89:e6:59:01:1f:d5:48:ca:06:69:a4:f4:19:9c:ab:
01:58:cd:db:51:f3:f9:58:3d:61:5a:34:75:e1:43:
7b:e9:32:33:f3:5f:01:b4:1c:25:97:b2:0d:df:cf:
a0:34:19:76:93:06:ae:43:69:83:ef:54:09:b7:bf:
31:4f:60:10:1c:68:51:92:fb:d3:fa:b4:d5:20:3b:
8f:dc:63:a3:a0:c9:58:c0:29:b3:a3:64:71:8c:53:
21:4c:4c:dd:4e:0c:dc:65:d2:30:f7:44:5c:5e:71:
ff:11:f0:4d:3a:a6:03:b9:21:97:83:37:76:10:6d:
32:6c:bf:81:6e:75:0e:f7:98:13:bf:a0:fb:88:33:
11:94:4b:c4:7c:a9:e1:a2:20:0b:45:8f:c9:0a:aa:
3f:dd:11:22:c8:48:df:01:02:6a:b4:3f:7e:52:60:
23:35:85:70:82:c4:30:d2:7d:57:3e:95:4d:59:ae:
c8:da:13:44:57:ca:54:b1:fc:9f:8a:a9:86:90:20:
18:e9:27:27:fb:2b:40:71:89:22:81:13:c3:da:27:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:94:3C:6F:38:13:76:0F:AC:65:2D:B7:07:AB:5D:1E:BA:5B:69
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:cd:67:6c:05:28:69:3b:f9:af:c7:b8:4e:ba:ea:89:ac:
65:63:d7:0e:32:c2:ec:cd:c6:98:06:55:b9:a7:1c:8f:1d:05:
60:47:b4:eb:8d:99:df:43:5b:4c:0c:98:46:5d:31:19:e1:71:
09:72:dc:62:05:da:e1:44:06:9b:f8:27:9b:29:c7:e3:bc:02:
f3:40:38:25:b7:ee:b2:62:69:cb:88:6e:d9:94:db:0e:4b:fb:
60:13:d4:e3:13:8f:ad:d3:7e:ad:19:3c:78:85:4e:c2:24:f3:
d4:06:cd:33:9a:2c:e9:d9:9e:f9:90:37:e0:d2:50:8f:80:df:
c6:f7:12:1e:8e:c4:b0:77:af:25:8a:93:30:16:eb:1f:d7:ef:
ba:12:b8:e6:0c:b5:3f:eb:d1:e3:d6:5a:f1:39:c5:53:70:15:
1e:16:f8:b9:f4:8e:a8:b8:a4:06:3b:e6:7a:16:37:c0:65:5c:
9b:4c:a0:c2:73:b2:e4:98:33:d6:af:d7:84:4b:37:c6:c6:b4:
64:b1:6a:7c:f8:43:b3:7b:5b:4d:30:2d:32:49:86:13:83:a1:
22:c6:ee:71:dd:fe:65:11:0d:be:24:9d:37:0e:74:cd:bc:db:
91:3b:2b:8c:85:ae:37:64:f5:29:3d:c0:db:fb:38:84:e5:30:
5b:5c:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:38:22 2026 by rpki-client