Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: I0WHdHQlem6qvlU43ARsJiq8HfpxanvG8yOBL2w+xyA=
Subject key identifier: 49:2B:E9:67:4C:12:4B:3C:D6:DD:BD:CA:38:E9:07:45:F5:B8:89:5E
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 019D25BA5C625801F001BB94282C395C9F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: 0k4uhWX2tXs6kn4QDDQyW9bCkYc.roa (hash: 6Eugvm0/9Fesv15b1kgGMNxIPO6CcT7Ckl1hTPHgrgM=)
2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: JSe2Zi8owhBgol52Bhp6O87KOTejzxUEPc4l44ob+KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5c:62:58:01:f0:01:bb:94:28:2c:39:5c:9f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=492be9674c124b3cd6ddbdca38e90745f5b8895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:43:78:e9:aa:61:d0:58:f2:b4:66:5e:6b:
8a:ce:2d:04:d2:f5:db:96:df:ba:de:2b:e7:bc:f4:
60:7e:39:8c:37:2d:6c:11:52:4b:c0:8b:4b:e5:f6:
33:de:6e:72:06:f5:d1:8a:52:e8:39:e1:bb:02:dd:
b0:48:c6:d9:fd:2c:57:a4:b7:06:33:2b:da:03:a3:
d0:d5:c2:4b:14:b2:89:a6:4e:3f:3e:e2:eb:a5:62:
2a:a2:8b:24:2c:6e:23:ea:30:70:31:4f:21:8c:d8:
5b:3c:fb:24:0e:3e:6c:9a:cc:08:ce:f3:b1:56:bd:
15:48:ff:e8:91:d5:c2:e6:d4:28:91:f4:06:a2:3c:
94:e2:2b:79:ef:c6:f0:0e:91:d9:af:46:12:cf:20:
50:70:03:2a:a7:7b:81:d4:8b:0a:57:2d:a9:34:03:
f5:4c:a7:57:16:90:fc:71:7f:2c:c5:86:fa:17:a1:
35:a6:77:09:a8:61:cc:6f:19:bd:f9:54:ff:31:a5:
e4:a3:8a:75:c2:54:38:0b:0a:92:1b:0b:62:e8:68:
a8:3b:7a:81:70:54:8d:fc:c3:64:45:c0:fc:34:95:
ad:d0:9c:b7:2a:f9:4d:36:7d:56:d2:7f:85:8a:e3:
1e:5f:8b:46:48:ff:67:fa:78:b6:84:bc:8c:76:38:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:E9:67:4C:12:4B:3C:D6:DD:BD:CA:38:E9:07:45:F5:B8:89:5E
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ea:12:e4:85:ab:32:4c:69:9f:ca:f0:6a:8e:12:ad:f4:77:
d9:44:2d:db:35:53:87:51:6d:07:9c:96:f4:b9:60:ca:f0:6a:
1f:a3:5d:7a:a3:f9:d6:77:e6:39:79:e5:72:e3:8e:68:25:63:
1d:dd:2b:67:61:0f:3b:e6:13:67:80:16:cb:b1:00:66:0b:af:
5d:ee:59:62:25:b5:74:2a:a8:1a:0b:98:85:af:63:6d:d5:87:
14:54:69:c7:69:42:73:fe:44:e8:d4:16:f8:69:09:9b:d7:25:
56:b9:9e:7a:62:5a:32:17:3a:fa:d0:fe:61:e3:75:d7:a8:ad:
18:1e:50:c3:ce:6c:3a:87:fb:3e:07:b3:4f:99:a7:74:49:0c:
09:fb:ef:a0:c2:24:fb:e1:d0:71:bf:e4:d3:e3:17:d9:f1:32:
97:ee:e2:91:8d:3c:f3:e5:49:24:42:92:ea:71:93:b3:7a:e5:
7b:6f:a2:21:08:73:29:d3:e5:90:f9:0a:df:41:fc:0a:5c:19:
e1:e7:ca:97:52:f9:d1:44:06:48:25:7a:26:03:1c:5c:7c:e6:
58:8a:31:f1:7f:92:87:07:ab:4d:7e:ec:85:4b:c7:0a:79:9f:
b0:d6:0a:79:98:b4:e9:78:30:95:68:3d:fc:c5:cc:da:2e:df:
80:df:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:56 2026 by rpki-client