Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: FmCEzk2OOH6oM0STwD/B8+IljcydTzGwNrhwkYEjFN4=
Subject key identifier: 2C:34:5F:06:B5:78:18:C1:6B:27:18:30:A3:5D:FC:8C:A7:D0:81:75
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019E1D90646A7531455D940314723575C938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 0507
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: o+lybxsg1p6o1I30ykhYm1x7al1mVNMusvnntrgXKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:64:6a:75:31:45:5d:94:03:14:72:35:75:c9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=2c345f06b57818c16b271830a35dfc8ca7d08175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:11:93:c9:00:b8:4d:c9:28:62:fe:46:77:
f9:19:98:d8:fe:77:43:87:f3:84:cb:79:70:48:8e:
ab:83:a6:20:e2:8f:77:52:e8:d7:8f:b0:fb:8c:d5:
60:62:7b:4b:d6:d2:f2:b0:19:56:68:52:17:99:d7:
dc:bc:da:2a:1d:f7:5b:57:a6:3a:0d:ba:75:64:7a:
a4:b7:e9:b2:53:fa:be:61:84:84:c4:d8:aa:c9:94:
b4:23:0c:8a:7c:cb:b4:ae:33:45:6c:da:80:90:b1:
ab:04:15:ae:f7:2d:e6:9a:64:a9:94:8e:6a:04:3b:
9a:cc:5f:cc:e4:35:6f:5c:8a:05:a7:2c:2a:cf:58:
7d:bd:7e:c9:ed:90:df:8a:25:5d:bf:2c:9d:64:34:
6e:57:ce:7c:81:2b:f1:20:19:d0:6d:fc:f4:0a:4e:
be:81:18:a7:40:d2:50:43:29:50:22:98:02:53:5d:
d6:94:ba:c1:3a:3f:4f:7e:8a:36:08:b5:cb:a9:d4:
cf:05:91:21:46:2b:91:74:59:c6:53:b4:fb:14:d0:
bc:ed:6b:35:ae:3a:e3:6a:8d:38:39:96:c2:de:25:
e2:de:ee:d6:a9:e5:20:c4:97:b3:b9:be:b3:71:40:
be:21:a0:ca:d3:74:19:e2:fa:58:f7:23:4b:2a:5f:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:5F:06:B5:78:18:C1:6B:27:18:30:A3:5D:FC:8C:A7:D0:81:75
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ad:90:96:fc:5a:15:0d:0f:7c:3c:03:09:fa:0c:1b:42:b3:
58:80:6c:83:0b:cc:6a:b4:eb:dd:26:33:33:7e:11:86:21:b1:
c5:3d:0d:60:f2:84:13:a0:f1:32:ad:be:af:90:bd:de:91:6f:
1c:94:a0:26:b2:45:0f:39:f3:2f:83:a8:11:62:94:46:e1:45:
b1:b3:2e:7c:70:13:ae:50:93:7f:71:5f:a5:13:8f:3b:90:2f:
d4:37:9b:0d:64:26:97:8a:99:7b:ec:3f:4b:9f:85:5a:25:ff:
86:43:7d:47:30:a2:39:d1:03:72:15:38:1a:87:7e:e7:bc:f9:
04:c4:49:22:8f:1b:de:bd:ac:b7:9d:68:ba:df:57:0b:38:d4:
6e:0c:25:88:99:41:2e:1d:d3:a3:de:f7:6b:a6:ec:8f:86:f1:
cc:3c:0d:a6:8a:bc:ee:c1:4e:1f:b9:72:44:a7:c4:b0:5b:08:
23:f6:a7:a6:f1:7a:a0:64:08:82:ea:35:01:39:79:09:26:db:
e8:b2:9f:f3:ff:2e:59:5c:3e:62:de:89:14:a7:ef:f3:9e:d3:
3e:5d:19:33:d5:c8:a9:05:01:ed:24:85:15:f8:e8:3d:ac:1f:
7e:81:31:54:d6:21:65:23:ab:b9:96:87:83:98:b7:cd:36:6d:
67:79:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:34:55 2026 by rpki-client