Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: EjU7qUY8DyQqNyWBKtpECr5GqMUB3r0QyeRTGy0dP7o=
Subject key identifier: 94:9A:D3:C0:A1:CA:1B:B1:BF:91:21:78:64:92:0E:3C:20:5B:84:B1
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019E1EA32C706CDAC4476DCB587293E068E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0A70
Signing time: Wed 13 May 2026 00:01:10 +0000
Manifest this update: Wed 13 May 2026 00:01:10 +0000
Manifest next update: Thu 14 May 2026 00:01:10 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: K2BaYTR8KfzwIOuzsqjN+BLX4kMRmkT4EiYwOqtSWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2c:70:6c:da:c4:47:6d:cb:58:72:93:e0:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: May 13 00:01:10 2026 GMT
Not After : May 14 00:01:10 2026 GMT
Subject: CN=949ad3c0a1ca1bb1bf91217864920e3c205b84b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:94:49:b0:8c:63:e1:65:8e:e4:78:16:30:
b5:64:07:bf:66:48:57:89:25:66:67:f4:38:9c:31:
0b:a4:21:56:21:59:8c:42:87:38:07:d8:29:e9:ac:
05:82:5b:2c:3f:ae:7b:4f:ad:f4:f6:ca:6d:00:58:
7f:04:c5:2a:cf:24:8f:d8:b2:1b:fc:dd:33:8d:26:
e1:ba:ed:a7:be:17:0f:89:c3:98:09:50:7c:82:ca:
1d:fd:4b:a1:48:84:33:79:be:36:00:75:35:61:cb:
ec:52:46:61:f6:a8:fa:6c:e5:92:3f:7e:8d:f4:57:
ae:bf:05:d4:f8:cc:01:e2:d4:54:8b:df:a3:a8:fe:
f1:de:8e:98:77:1f:59:a7:d3:d7:e5:aa:57:6b:5e:
59:7d:2a:5e:fe:b4:c9:ce:01:e4:84:58:a8:69:6e:
e8:72:9f:f8:61:32:69:d7:82:64:2e:8e:15:9a:6d:
45:4e:41:0f:e0:ed:df:96:78:50:ae:c2:7a:d5:52:
e5:ca:4e:2c:ff:89:a4:89:1f:67:18:d9:0f:2d:0b:
82:7f:44:de:dd:e1:7e:08:cc:c2:70:a5:f5:53:97:
ea:30:1b:23:bc:1c:6a:21:f2:da:7e:79:8e:de:f6:
af:33:6d:72:c9:da:13:d4:c4:3b:70:60:6c:cb:af:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:D3:C0:A1:CA:1B:B1:BF:91:21:78:64:92:0E:3C:20:5B:84:B1
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7d:b3:37:4d:5e:39:99:90:0a:8b:65:66:bb:e4:0b:67:7d:
23:8f:e8:5d:c3:d3:4b:89:3d:79:7e:36:30:f0:e1:98:bd:21:
24:9e:06:da:90:a3:67:da:ab:25:55:06:82:87:5b:46:46:f3:
4c:ef:41:b3:bc:45:10:76:43:6d:12:f3:81:1f:ed:98:f6:ce:
b4:4d:d8:4b:51:ff:4b:bb:17:27:1a:b6:7e:5c:5d:21:de:e7:
02:94:17:ee:84:33:35:ce:38:b4:71:89:ff:fa:77:08:11:18:
68:46:54:b0:4b:f2:45:95:43:35:f3:9f:15:6c:ef:9f:78:d6:
d8:4c:de:5c:89:c1:d7:39:f6:de:8d:27:59:3a:c9:e8:64:2b:
e1:f2:12:24:2a:a7:f6:d2:64:2e:67:06:d6:fe:16:13:82:32:
6f:10:be:5b:a4:c8:3a:bb:59:3d:f6:48:cb:1c:fc:05:a5:1e:
a8:7b:2d:dc:9f:96:d9:3b:29:8a:e6:61:a6:15:f7:24:8f:f9:
f7:db:b6:69:51:e0:c8:b0:c6:f6:2d:d8:95:7c:6b:8a:ca:90:
bc:6c:4c:fc:d7:8c:bd:84:cb:6c:4e:d6:88:d1:68:da:f2:c0:
18:cb:f7:04:19:d9:2e:c4:9a:cf:e5:89:1f:ba:73:da:d1:15:
e3:02:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:28 2026 by rpki-client