Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: jbmp0R0niJ0JSMbvwj3IdX0QDw+yDkkziPds6QaaYVM=
Subject key identifier: AD:6F:95:55:88:45:7E:C5:7C:E1:52:FC:29:75:0F:18:66:93:A2:9E
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019D39E587E10EF4165105314024179B5315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:36 +0000
Manifest this update: Sun 29 Mar 2026 14:00:36 +0000
Manifest next update: Mon 30 Mar 2026 14:00:36 +0000
Files and hashes: 1: mhzOrqeYNT7SjpUPXv-s1PAWjw8.roa (hash: Cbf7NCR/yFej0NrknKmJmQagLdwvhDzTJuSAw2w2l7c=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: YKGSOUO3eDIyqA86fHaKXShmrDPwc0NGXJ4r7/cSQu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:87:e1:0e:f4:16:51:05:31:40:24:17:9b:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Mar 29 14:00:36 2026 GMT
Not After : Mar 30 14:00:36 2026 GMT
Subject: CN=ad6f955588457ec57ce152fc29750f186693a29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cf:0b:92:44:6e:7f:cc:89:66:20:ef:12:28:
df:51:e1:b1:89:6d:df:0a:6b:40:03:1a:53:e6:f8:
fc:b1:f8:0f:45:14:65:4a:ed:a7:15:f7:e4:73:b0:
3f:aa:75:55:db:64:6a:e4:2f:f3:6a:22:d0:e9:cd:
61:20:c1:42:e9:b3:1e:56:1c:85:bb:d8:ad:ae:e5:
1a:b9:2d:be:35:a9:7b:46:38:ba:61:8e:75:e1:d2:
c2:6d:80:e9:20:17:0b:38:63:ea:8f:d1:e8:1b:40:
0a:cf:3e:a9:33:f1:fc:05:34:79:d4:9d:77:2a:23:
8c:19:34:96:be:f9:16:5e:83:11:5e:cd:35:ee:c8:
6b:68:68:fa:c3:9c:c6:4f:cd:29:85:60:a0:35:dd:
db:a2:52:05:fa:ac:8a:95:b3:ac:ff:78:e5:18:bc:
d9:55:f0:ab:08:56:0d:ba:2b:bd:0e:5e:cb:89:42:
bb:96:63:89:28:b0:06:97:b2:77:97:54:86:91:83:
13:35:43:4a:5b:a7:b2:77:c3:e3:f9:33:e9:c0:34:
7b:64:bd:94:b8:fd:c5:29:02:b6:73:3f:fd:7e:b2:
00:d2:9d:24:08:6c:7c:f1:cc:c6:ba:e8:9a:2e:66:
fc:53:8c:f5:da:58:ad:66:f6:55:38:42:f6:78:c6:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:95:55:88:45:7E:C5:7C:E1:52:FC:29:75:0F:18:66:93:A2:9E
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0f:d9:8b:35:e6:2e:e8:1c:f8:10:e6:d4:78:ed:53:fa:32:
d9:ec:b5:1e:55:3f:5d:f5:db:2d:da:28:d8:aa:1c:08:74:a9:
d2:56:2d:9e:d4:17:f7:56:c5:cd:6b:44:cc:74:72:6a:99:cf:
d3:b2:ca:d6:4a:53:46:af:01:7c:92:80:80:08:88:2a:59:33:
13:4c:3e:35:97:1d:b3:31:31:77:66:bd:dc:0d:b1:70:6d:ce:
cc:06:22:85:8d:e3:55:b8:0d:4f:1b:e4:05:9c:52:6d:1f:37:
b3:a7:f7:24:a3:6e:53:99:b0:39:6a:5f:2b:72:42:7c:04:0e:
cd:d9:d0:3c:6c:3b:72:e6:b3:db:f9:83:3e:6b:a2:60:ef:26:
bf:09:10:35:8a:8a:89:37:aa:8e:0d:a0:c6:c6:64:85:b8:6b:
25:fa:cf:34:77:f9:f6:de:b1:6b:91:39:66:e2:69:e5:08:dc:
6a:71:58:71:c8:26:76:56:18:80:cd:ac:78:a9:e1:a8:92:9f:
71:65:b1:45:9e:53:7b:65:46:b2:8a:83:fc:24:86:81:dc:83:
25:80:fd:a5:93:31:37:c6:da:4e:72:57:fd:a6:fc:fc:6b:04:
0e:24:8d:aa:8f:1d:83:c0:e6:22:74:e8:c6:c9:17:1a:06:fd:
b5:25:0f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055YfhDvQWUQUxQCQXm1MVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1Y2NlNzkxNmM3YWZhNjQ5NTMyYTdiODI5YTQ1OWQ2ZWU1
ZTM2YmMwHhcNMjYwMzI5MTQwMDM2WhcNMjYwMzMwMTQwMDM2WjAzMTEwLwYDVQQD
EyhhZDZmOTU1NTg4NDU3ZWM1N2NlMTUyZmMyOTc1MGYxODY2OTNhMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s8LkkRuf8yJZiDvEijfUeGxiW3f
CmtAAxpT5vj8sfgPRRRlSu2nFffkc7A/qnVV22Rq5C/zaiLQ6c1hIMFC6bMeVhyF
u9itruUauS2+Nal7Rji6YY514dLCbYDpIBcLOGPqj9HoG0AKzz6pM/H8BTR51J13
KiOMGTSWvvkWXoMRXs017shraGj6w5zGT80phWCgNd3bolIF+qyKlbOs/3jlGLzZ
VfCrCFYNuiu9Dl7LiUK7lmOJKLAGl7J3l1SGkYMTNUNKW6eyd8Pj+TPpwDR7ZL2U
uP3FKQK2cz/9frIA0p0kCGx88czGuuiaLmb8U4z12litZvZVOEL2eMakmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1vlVWIRX7FfOFS/Cl1Dxhmk6KeMB8GA1UdIwQY
MBaAFKXM55FsevpklTKnuCmkWdbuXja8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYt
NDI5NjkzN2M5ZDk0LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYtNDI5NjkzN2M5ZDk0
LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ/ZizXm
Lugc+BDm1HjtU/oy2ey1HlU/XfXbLdoo2KocCHSp0lYtntQX91bFzWtEzHRyapnP
07LK1kpTRq8BfJKAgAiIKlkzE0w+NZcdszExd2a93A2xcG3OzAYihY3jVbgNTxvk
BZxSbR83s6f3JKNuU5mwOWpfK3JCfAQOzdnQPGw7cuaz2/mDPmuiYO8mvwkQNYqK
iTeqjg2gxsZkhbhrJfrPNHf59t6xa5E5ZuJp5QjcanFYccgmdlYYgM2seKnhqJKf
cWWxRZ5Te2VGsoqD/CSGgdyDJYD9pZMxN8baTnJX/ab8/GsEDiSNqo8dg8DmInTo
xskXGgb9tSUPQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:25 2026 by rpki-client