Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: Mk1cizvVfN7kgBMfOGatOTLxL00bhcWPrY4DYBSeIrs=
Subject key identifier: 76:87:1B:08:9C:D3:CA:9C:E4:22:82:8B:B5:F9:F3:0E:4F:B6:15:95
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019D28F250CCE3B3C3DAF2D38851C9DA59B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: quB2A/g2xlNF3mAkh1NpFXFPUrf58YirA4emtcMyUq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:50:cc:e3:b3:c3:da:f2:d3:88:51:c9:da:59:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=76871b089cd3ca9ce422828bb5f9f30e4fb61595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:74:97:58:8c:d2:10:98:fd:7d:30:9c:e2:
c5:81:af:92:e1:d9:a1:e8:b0:e9:b7:b3:76:b5:68:
d8:7e:1c:e3:6c:89:ae:54:25:bd:83:a6:81:61:83:
76:5b:0c:f7:c4:2c:73:50:23:c3:d9:71:3f:26:b7:
a3:e5:93:f9:03:ea:fe:d5:be:bf:24:c3:24:6e:e7:
82:c0:9d:bd:fc:be:51:3c:45:70:b7:05:b4:3d:f8:
7f:14:f5:66:d6:2d:67:5c:4c:57:36:d3:ae:e7:43:
48:49:76:f8:f1:3a:40:e3:40:da:23:04:62:89:b8:
00:91:61:57:d3:2f:66:04:73:3b:ba:2b:13:ac:d2:
ec:1b:71:13:45:ed:d9:09:3f:b8:0b:99:d5:f1:cf:
d6:bd:4b:27:47:fe:b1:c5:b4:94:8c:5e:3c:ee:1b:
5f:f2:d8:85:14:17:d6:32:bf:f8:30:85:fd:c1:4e:
3d:1e:66:40:3d:7f:84:1c:d9:73:1e:09:37:0a:c2:
ff:e8:f3:59:bd:b1:61:3a:9e:83:ff:18:2f:d5:e2:
21:a4:e4:03:c2:76:da:f0:89:0b:fc:90:cb:db:de:
87:98:2d:5d:09:5d:b6:8b:70:fe:cc:4a:45:89:36:
95:da:c8:48:f5:f4:41:75:37:54:a7:02:c7:bc:42:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:1B:08:9C:D3:CA:9C:E4:22:82:8B:B5:F9:F3:0E:4F:B6:15:95
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:41:e6:f5:6d:f5:e1:2f:30:94:22:3f:1b:cd:0e:a1:97:43:
70:99:63:c2:d7:84:c1:37:c5:c4:aa:08:63:01:34:ce:3d:f6:
4b:98:92:6e:9a:7d:29:21:29:23:81:0d:44:31:eb:7b:6f:74:
60:5c:54:0e:22:9f:f2:9e:8f:ba:f1:68:c0:5d:13:1b:77:23:
79:c3:01:ba:94:50:3b:b6:82:cd:1c:71:b1:1f:bf:1a:0c:de:
94:ab:69:f8:ff:e1:ff:af:27:40:84:39:a9:8f:cd:1d:62:0e:
4a:2a:e6:1c:c3:9a:c2:db:dd:ef:e8:de:17:52:6f:09:0a:97:
df:32:75:50:ff:a0:24:4f:08:c5:b7:86:e7:5b:1d:73:e4:6f:
c0:8d:a9:52:77:c8:7f:a0:1c:52:e6:7e:a0:0c:5a:21:4b:ca:
60:6a:69:a0:e5:83:b8:2a:83:e9:de:70:aa:c8:39:66:a8:7c:
82:2a:b6:c0:c6:0d:83:65:26:78:17:6a:a7:cb:22:c0:df:ce:
30:cb:4b:e6:d4:0a:2b:82:d6:33:ef:04:59:88:82:d3:db:08:
f5:31:35:13:65:33:58:b5:5c:62:5c:37:d1:c7:34:8b:59:41:
8e:46:e6:7b:0f:4a:3d:b4:b3:14:87:d6:98:03:c7:60:d0:af:
8e:64:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:43 2026 by rpki-client