Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: JkUpcmhkY6gMfN5KYFxpmxGd9/70YowXUJqqKUcnkS4=
Subject key identifier: 72:F2:B6:2D:63:13:22:19:AF:9A:7D:C5:C5:0F:1E:4A:54:BB:7E:31
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019D2704AAD642ED3C973A429D6BD335A0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 07F3
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: w1gptHwf+g/npDmwjgJzPjsM1tfeni+DV7zOK/+STsQ=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:aa:d6:42:ed:3c:97:3a:42:9d:6b:d3:35:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=72f2b62d63132219af9a7dc5c50f1e4a54bb7e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:c1:39:de:e5:db:e8:a9:c4:17:fe:69:d0:
11:66:53:cf:ab:75:be:66:ef:65:e4:ff:48:fb:51:
06:c6:60:c0:41:6c:ff:47:b7:f7:f9:b4:b1:37:6c:
37:b6:96:d8:83:c9:3d:7a:71:fe:c2:93:b0:b7:8c:
02:53:55:6b:cf:58:a6:d4:34:e6:36:17:b6:d6:53:
c9:a3:c0:a2:83:13:bd:a7:e7:80:32:59:33:f4:90:
d9:a4:b8:16:2e:6b:10:4f:5f:f6:a8:6b:8f:06:20:
a1:c8:51:dd:2b:87:dd:e2:53:b9:d1:f7:6c:be:0b:
8c:8f:05:96:98:87:19:5c:97:57:75:62:5a:54:d0:
23:1f:c6:53:fc:a3:b7:fe:ee:5b:50:35:39:87:e2:
9d:58:6a:6b:04:8b:f0:67:4f:d2:eb:ac:8b:4b:ed:
c6:d9:de:21:19:6f:61:78:c4:3c:2f:88:c9:93:07:
d9:c8:cc:4a:f0:62:6d:82:40:b2:26:6f:5d:b5:b1:
b3:7e:81:98:1e:80:bc:40:04:0b:2a:ca:b4:d3:b2:
e1:38:af:32:66:6c:6d:8a:1d:0d:75:ef:1f:cf:27:
6d:17:62:ea:4c:29:d8:14:72:97:76:d6:a0:b7:71:
89:4c:d7:48:ec:e5:3b:2d:0e:0e:a0:e8:91:0c:7e:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:B6:2D:63:13:22:19:AF:9A:7D:C5:C5:0F:1E:4A:54:BB:7E:31
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:e3:2f:f5:7a:e0:6a:4c:4d:f9:4f:e9:06:96:3f:01:c6:
2a:20:3f:5b:4c:35:b6:7e:92:3a:e4:b3:78:a2:16:da:c5:c5:
89:07:88:3e:b2:06:13:f5:7d:4c:1b:b5:9c:0e:7a:c1:9e:8b:
63:9f:2f:9f:f6:a0:2e:f8:63:2c:08:0d:67:9a:8b:09:ca:a1:
0e:41:88:e6:6b:4d:20:a2:89:d6:e2:cc:0b:96:aa:6f:92:1f:
53:52:86:d6:c1:18:ae:33:19:c7:df:08:97:f6:ed:c7:55:09:
ce:8f:d9:bd:6a:80:bf:b5:0e:24:7d:31:c6:61:86:7d:2b:6c:
5f:07:a1:96:c8:4b:e7:f7:43:92:88:7d:ba:52:bc:93:cc:0e:
3a:85:51:f6:8f:88:c5:88:16:a0:33:3c:59:c8:61:c5:52:a2:
60:a4:77:1b:f1:8a:31:b5:61:95:05:0d:b1:43:c7:4f:a7:72:
aa:cc:9f:d8:52:9a:37:6a:71:1c:77:33:01:df:5f:81:76:83:
2c:23:24:5c:a2:42:1f:38:07:c3:a0:88:b5:1f:e0:55:cf:8e:
16:0d:2c:31:b5:ce:a0:ae:b7:bc:2f:96:19:4b:07:b4:d4:a0:
33:68:da:6a:b8:aa:d3:88:df:e1:dc:99:38:43:10:1d:10:78:
f6:4c:85:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKrWQu08lzpCnWvTNaD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx
ODJhOWMwHhcNMjYwMzI1MjIwMTUwWhcNMjYwMzI2MjIwMTUwWjAzMTEwLwYDVQQD
Eyg3MmYyYjYyZDYzMTMyMjE5YWY5YTdkYzVjNTBmMWU0YTU0YmI3ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrBOd7l2+ipxBf+adARZlPPq3W+
Zu9l5P9I+1EGxmDAQWz/R7f3+bSxN2w3tpbYg8k9enH+wpOwt4wCU1Vrz1im1DTm
Nhe21lPJo8CigxO9p+eAMlkz9JDZpLgWLmsQT1/2qGuPBiChyFHdK4fd4lO50fds
vguMjwWWmIcZXJdXdWJaVNAjH8ZT/KO3/u5bUDU5h+KdWGprBIvwZ0/S66yLS+3G
2d4hGW9heMQ8L4jJkwfZyMxK8GJtgkCyJm9dtbGzfoGYHoC8QAQLKsq007LhOK8y
Zmxtih0Nde8fzydtF2LqTCnYFHKXdtagt3GJTNdI7OU7LQ4OoOiRDH5GlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLyti1jEyIZr5p9xcUPHkpUu34xMB8GA1UdIwQY
MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt
NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl
LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ13jL/V6
4GpMTflP6QaWPwHGKiA/W0w1tn6SOuSzeKIW2sXFiQeIPrIGE/V9TBu1nA56wZ6L
Y58vn/agLvhjLAgNZ5qLCcqhDkGI5mtNIKKJ1uLMC5aqb5IfU1KG1sEYrjMZx98I
l/btx1UJzo/ZvWqAv7UOJH0xxmGGfStsXwehlshL5/dDkoh9ulK8k8wOOoVR9o+I
xYgWoDM8WchhxVKiYKR3G/GKMbVhlQUNsUPHT6dyqsyf2FKaN2pxHHczAd9fgXaD
LCMkXKJCHzgHw6CItR/gVc+OFg0sMbXOoK63vC+WGUsHtNSgM2jaariq04jf4dyZ
OEMQHRB49kyFoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:58 2026 by rpki-client