Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: HBCQTINUDuNzPdbBh9o9AHiIPW9b35xn5G95tu58B6U=
Subject key identifier: 77:32:72:AC:50:30:81:82:00:3D:86:B4:31:1C:FF:75:36:C1:F4:18
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019D27722D3F526501E83030A2CE19372268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 09F0
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: KJJ6jcEINX/xUUc8ChTWNcSvRGsKGMvaD9lseOJ/qdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2d:3f:52:65:01:e8:30:30:a2:ce:19:37:22:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=773272ac50308182003d86b4311cff7536c1f418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:0d:9e:d8:70:e3:da:fd:ee:09:17:89:89:
7b:43:9a:04:a8:c3:7d:e1:e6:c0:3f:e5:a6:75:9d:
16:a7:24:a1:27:11:a5:a0:41:4e:3d:4c:76:93:e0:
2d:71:d7:38:2f:51:a3:3b:e5:58:89:88:68:62:87:
75:f0:20:bb:62:c5:58:a4:53:a2:6b:ac:76:4a:ef:
4a:d3:7f:5c:4e:2f:7b:41:90:6a:81:3d:73:87:ea:
2b:83:3c:78:30:59:81:25:0d:f1:3c:6f:a8:02:6c:
f7:d4:dc:28:e7:fe:2e:c4:2f:72:b8:cb:e8:a1:9c:
ec:06:8e:50:b4:05:3a:4a:93:87:bd:6b:d0:52:b8:
7f:5c:c0:94:da:1d:00:d6:3a:a4:85:8e:56:81:47:
b7:58:8b:59:1f:65:1a:71:48:c9:4b:0c:7e:a3:91:
b3:0a:7a:d4:d5:bf:ef:33:91:9d:c1:f4:a2:3c:97:
4b:9c:57:f6:ce:0e:ab:52:17:3f:ba:d1:ba:81:50:
cb:0a:00:64:73:47:fc:d2:61:d8:d3:9b:72:d8:f5:
47:c2:3d:57:f7:3f:35:e5:26:28:46:67:05:19:4e:
dc:cf:43:2b:b7:44:81:c9:df:49:e2:bf:11:af:f6:
f9:48:8a:9f:d7:6e:89:b9:a0:c0:c5:36:71:79:8e:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:72:AC:50:30:81:82:00:3D:86:B4:31:1C:FF:75:36:C1:F4:18
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a2:fd:5f:1c:a1:73:8c:57:6f:62:f4:f5:73:e5:1e:e9:ff:
82:19:0e:e0:b5:80:11:3a:28:b4:be:48:94:eb:94:c6:fb:bb:
4e:1a:7d:0b:27:b0:52:ea:38:2c:78:25:a4:2b:47:02:2a:2f:
fc:cf:c5:7c:67:28:95:91:1f:c7:e3:5a:96:9d:52:bb:38:3a:
86:0e:77:73:4a:27:46:45:4d:39:09:52:99:20:4f:8b:b5:99:
55:f4:5d:7b:1a:9e:2d:89:d9:f3:9f:f6:60:22:ff:35:81:b8:
c5:fc:05:67:33:d8:ef:54:be:ca:18:a0:01:bb:f8:98:82:e6:
56:dc:5c:2b:c1:73:14:98:61:62:71:02:f7:09:64:bb:63:76:
6e:84:6a:d6:6c:7f:8e:08:9b:13:21:a2:15:4e:07:53:9d:6b:
8a:0a:0d:cb:25:ca:53:30:b8:01:c3:14:bb:ac:67:b2:bf:57:
a6:70:4f:22:8d:20:7d:1e:3f:2c:4b:67:e0:89:ac:40:69:85:
6c:40:37:4c:bf:1d:f9:91:5d:99:f0:47:bf:95:92:06:27:df:
ad:e6:4e:17:9d:14:3c:f7:f9:27:30:b7:10:e2:5b:dd:00:d5:
89:d9:1c:3c:d3:2a:fd:12:1a:32:44:2a:e4:5e:f6:41:ca:0e:
c6:d6:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:13 2026 by rpki-client