Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
File: PluwZCHU7nZU_UO77wgZSWdAONQ.mft (raw, json)
Hash identifier: 15Zy0zt7gfeVT6t0uQ+A9ED9qmAT+yv98/bLhaL3ctw=
Subject key identifier: 16:03:A0:11:CC:06:FC:15:DD:32:29:21:B8:F8:DA:68:8B:79:84:B8
Authority key identifier: 3E:5B:B0:64:21:D4:EE:76:54:FD:43:BB:EF:08:19:49:67:40:38:D4
Certificate issuer: /CN=3e5bb06421d4ee7654fd43bbef081949674038d4
Certificate serial: 019D34BF90E3F52292ABBC2D1CC30B9D8062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
Manifest number: 2B
Signing time: Sat 28 Mar 2026 14:01:02 +0000
Manifest this update: Sat 28 Mar 2026 14:01:02 +0000
Manifest next update: Sun 29 Mar 2026 14:01:02 +0000
Files and hashes: 1: PluwZCHU7nZU_UO77wgZSWdAONQ.crl (hash: SjLkad46vyYS4RMLB/oQH3cVJGba3muURDyeWxEX488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:90:e3:f5:22:92:ab:bc:2d:1c:c3:0b:9d:80:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5bb06421d4ee7654fd43bbef081949674038d4
Validity
Not Before: Mar 28 14:01:02 2026 GMT
Not After : Mar 29 14:01:02 2026 GMT
Subject: CN=1603a011cc06fc15dd322921b8f8da688b7984b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:5f:d2:36:52:82:52:eb:65:67:99:29:6b:
64:7b:1f:4c:86:ee:51:4c:ec:e8:f7:16:92:4e:67:
86:c2:1e:88:7a:c1:2a:ec:cb:e0:a3:98:99:e4:67:
45:69:10:52:e4:4f:75:80:18:12:ad:a9:4e:7e:7d:
80:49:1e:f8:80:94:e2:74:44:41:6a:f4:5b:25:98:
54:8a:59:43:c1:ad:98:2f:07:c2:79:5d:7f:05:81:
53:06:ef:e7:cd:d5:f5:87:f0:34:c5:1e:a5:7f:0b:
84:67:3b:77:77:b4:38:4f:da:c8:ef:b9:df:11:aa:
03:07:13:ec:09:d0:c7:78:09:cd:66:eb:74:c2:db:
4b:24:be:d9:08:71:ed:1f:9c:c9:27:cb:92:b0:bb:
09:4c:10:01:22:b5:0c:a6:14:52:ab:b3:23:39:f5:
3e:48:5f:f0:13:d1:51:92:a9:f3:27:5c:20:19:6f:
05:fb:05:d7:d0:cc:dc:a5:1e:b3:8c:89:28:81:7a:
92:62:b5:3f:46:f5:fd:82:6d:d5:84:3a:25:74:5f:
98:58:86:ea:bf:67:24:fa:70:a2:bb:1f:95:1c:d2:
5d:ff:7f:60:5b:d8:b6:fd:41:75:6e:ac:f7:40:c2:
09:ad:3c:18:83:8d:d9:6c:fd:87:57:8e:25:2e:cc:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:A0:11:CC:06:FC:15:DD:32:29:21:B8:F8:DA:68:8B:79:84:B8
X509v3 Authority Key Identifier:
keyid:3E:5B:B0:64:21:D4:EE:76:54:FD:43:BB:EF:08:19:49:67:40:38:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:a0:a8:4d:8f:b9:c9:9a:52:e8:9e:ef:2e:0b:cf:30:0c:
52:fb:72:0f:65:2d:b9:2f:b6:fc:59:8f:e9:6d:b9:65:75:1e:
94:37:79:d8:5f:6f:2c:15:11:97:55:83:8b:94:cc:1f:72:83:
8e:62:8f:8e:cd:68:d9:32:a5:3a:b3:31:c8:2e:18:54:80:20:
29:f6:ff:5d:31:dc:ef:b5:48:bc:0c:01:53:72:16:61:0b:d3:
ca:44:bf:1b:be:97:69:c1:be:2e:ad:51:9d:19:99:39:12:ae:
cc:ec:79:e9:87:cd:32:79:2e:fb:c9:a6:ea:57:92:f3:c1:50:
83:bb:08:12:60:a6:33:43:62:52:16:a4:c0:2b:84:52:74:f7:
12:aa:04:1b:c8:a0:21:1c:f5:dc:20:f0:aa:66:fc:d8:8d:64:
ba:1a:6d:10:95:79:74:da:a1:bb:ab:9f:13:33:53:2c:d2:9b:
e9:e2:66:1d:3f:3e:6e:e1:82:d6:ad:81:f5:6e:d3:9c:12:2b:
83:22:36:91:3f:ff:76:1a:d9:65:0e:85:a2:76:63:54:0a:2e:
0a:43:62:25:02:47:20:8a:a5:f0:15:55:ff:57:c5:33:7b:e1:
48:e3:1b:71:b8:95:64:ec:fa:9a:f0:52:f8:bf:4a:46:3e:bc:
80:da:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:09 2026 by rpki-client