Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: k5wMbwNz4N/BKSzg2EPBRKduruaPz9X9QjO5dzf4Jns=
Subject key identifier: 71:5A:A3:9C:0C:12:4D:3D:D1:D9:E3:75:84:4F:B1:E3:8C:28:5E:78
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019F935B780978D960BF4C0FCBA3A1010D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0B31
Signing time: Fri 24 Jul 2026 09:01:12 +0000
Manifest this update: Fri 24 Jul 2026 09:01:12 +0000
Manifest next update: Sat 25 Jul 2026 09:01:12 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: DcnwjHtp0Ibwkg56fuOzRC4QlIECjlZIein+5nkqBr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:78:09:78:d9:60:bf:4c:0f:cb:a3:a1:01:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Jul 24 09:01:12 2026 GMT
Not After : Jul 25 09:01:12 2026 GMT
Subject: CN=715aa39c0c124d3dd1d9e375844fb1e38c285e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:78:7b:f8:18:8b:98:4d:01:ab:fc:7b:f4:
41:03:b7:d9:a3:1e:21:27:dd:db:03:c2:61:5a:e2:
ef:f6:bb:dc:d0:f4:2f:be:42:28:6d:a8:4a:1c:0e:
42:70:6f:52:01:9a:52:2a:df:c2:5a:a0:07:86:32:
a2:57:6e:18:65:d4:44:8b:9c:b5:88:d4:7c:98:ba:
6f:85:42:ba:9f:8a:92:35:2e:5a:3c:ea:e0:16:ff:
c4:48:fe:3e:ad:7f:b1:ea:3b:24:41:ec:29:ce:43:
4f:a6:cb:49:6e:b0:f2:d7:c9:ec:57:04:f1:eb:26:
e1:bf:cc:ad:f6:01:cd:55:eb:a3:16:7b:d1:c3:c0:
d5:86:f4:5c:89:73:89:92:2f:88:0b:81:09:89:e3:
9d:dd:81:eb:f5:21:a0:86:05:45:74:c0:7d:68:9a:
e9:76:d3:e5:b9:96:36:56:31:92:0f:ff:c5:b8:bd:
d1:a5:28:4f:c6:2b:93:b8:a0:c7:d9:c8:31:c0:08:
df:57:43:41:23:72:4a:c7:ee:82:18:c7:62:14:d0:
f9:48:49:9a:4d:f7:b0:0c:ea:87:04:1f:6a:05:81:
9d:44:6a:7c:69:be:9b:7e:7e:c9:6f:f5:0a:57:4d:
9f:ba:6b:2a:4f:02:ac:b2:45:5f:14:42:55:73:40:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:A3:9C:0C:12:4D:3D:D1:D9:E3:75:84:4F:B1:E3:8C:28:5E:78
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:37:dd:89:51:4e:8b:d6:f2:9d:52:e5:22:1f:13:65:e0:1c:
3b:49:54:7f:01:43:82:1d:ab:d3:16:10:8a:9e:22:f1:cf:61:
ca:85:0f:dd:09:f3:90:f8:1d:08:fc:ba:23:c3:0e:df:d0:a7:
d9:45:90:5d:a7:00:59:ba:18:57:3e:cd:76:18:a6:2f:6b:76:
e2:0c:9b:e4:06:04:76:e4:58:19:7d:4e:df:f6:3c:2d:ef:03:
ab:b8:4c:86:e0:51:25:90:b5:ee:35:70:14:4f:11:14:06:30:
50:13:5e:52:39:7c:04:89:f6:e7:72:41:a3:a4:94:88:cd:d4:
99:78:c3:15:15:91:07:ab:e2:fc:d1:28:ed:3d:8d:e3:34:0c:
80:9c:0b:c1:09:68:da:3c:75:c2:d0:69:ac:ec:41:40:10:62:
d1:11:dc:76:53:f6:60:66:81:05:e8:21:7b:64:29:9e:6c:6d:
90:92:ae:35:3a:1e:c9:e0:92:89:82:53:d3:51:bf:d0:2e:44:
12:80:a1:0d:1b:52:6c:58:bf:0e:49:c8:22:aa:79:cf:59:28:
25:cd:fe:b1:7a:8f:f4:d8:1d:15:1c:28:14:6b:34:56:31:13:
9e:38:b8:f4:7e:de:43:08:12:47:2d:0f:7b:b5:3f:0d:8c:77:
68:b3:ae:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW3gJeNlgv0wPy6OhAQ0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl
YjdiMjQwHhcNMjYwNzI0MDkwMTEyWhcNMjYwNzI1MDkwMTEyWjAzMTEwLwYDVQQD
Eyg3MTVhYTM5YzBjMTI0ZDNkZDFkOWUzNzU4NDRmYjFlMzhjMjg1ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZ4e/gYi5hNAav8e/RBA7fZox4h
J93bA8JhWuLv9rvc0PQvvkIobahKHA5CcG9SAZpSKt/CWqAHhjKiV24YZdREi5y1
iNR8mLpvhUK6n4qSNS5aPOrgFv/ESP4+rX+x6jskQewpzkNPpstJbrDy18nsVwTx
6ybhv8yt9gHNVeujFnvRw8DVhvRciXOJki+IC4EJieOd3YHr9SGghgVFdMB9aJrp
dtPluZY2VjGSD//FuL3RpShPxiuTuKDH2cgxwAjfV0NBI3JKx+6CGMdiFND5SEma
TfewDOqHBB9qBYGdRGp8ab6bfn7Jb/UKV02fumsqTwKsskVfFEJVc0DjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFao5wMEk090dnjdYRPseOMKF54MB8GA1UdIwQY
MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt
Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3
LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDfdiVFO
i9bynVLlIh8TZeAcO0lUfwFDgh2r0xYQip4i8c9hyoUP3QnzkPgdCPy6I8MO39Cn
2UWQXacAWboYVz7NdhimL2t24gyb5AYEduRYGX1O3/Y8Le8Dq7hMhuBRJZC17jVw
FE8RFAYwUBNeUjl8BIn253JBo6SUiM3UmXjDFRWRB6vi/NEo7T2N4zQMgJwLwQlo
2jx1wtBprOxBQBBi0RHcdlP2YGaBBeghe2QpnmxtkJKuNToeyeCSiYJT01G/0C5E
EoChDRtSbFi/DknIIqp5z1koJc3+sXqP9NgdFRwoFGs0VjETnji49H7eQwgSRy0P
e7U/DYx3aLOucQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:47 2026 by rpki-client