
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: E1ePyuMmqG9sB7HYalXL7FdqwbvUxce0t1aBaZUfNig=
Subject key identifier: 51:D8:B0:B6:36:76:CC:33:41:5C:80:50:D4:D5:9E:02:7C:C8:D7:AA
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019E1E35D053B1109D18D4AC074828B7654A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0873
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: BMS1RhjYJeEFzvSzl1DyCT7KMCIN5cAYbZ5IyWk1pd4=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d0:53:b1:10:9d:18:d4:ac:07:48:28:b7:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=51d8b0b63676cc33415c8050d4d59e027cc8d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:33:cc:80:77:8e:05:f2:f7:b4:89:e9:28:
d8:98:8b:0f:7f:1f:a4:36:0b:cd:c7:82:b5:dd:c0:
70:00:3c:74:c4:14:71:ed:dc:a4:59:41:9c:99:00:
4b:27:33:03:de:57:27:41:3a:c1:73:49:ab:8d:dd:
3e:2d:00:a9:9a:74:d0:7e:e3:07:fb:ab:da:ba:b4:
53:c0:3a:e1:6e:8d:a6:6d:0f:6f:ff:63:e7:db:d0:
02:ab:d4:60:48:f4:6f:6d:8b:17:1b:8a:95:52:32:
4b:2f:9c:e2:8d:00:c4:37:3a:65:a1:5f:19:c3:f3:
2a:cc:96:40:8e:06:3f:02:ef:5f:93:ef:b7:11:2c:
19:93:7a:bc:6d:b8:9c:88:1f:e6:0b:33:eb:56:fd:
3c:ee:20:ec:b2:c0:78:21:94:b5:f5:9b:19:3d:49:
13:4d:cc:33:a4:f7:13:01:ac:48:e3:90:23:63:39:
d2:64:4b:9f:73:5b:4b:f4:36:5c:26:a9:af:46:58:
12:3f:ec:35:9d:a1:6a:f7:e1:74:c9:92:1c:ff:e4:
ac:f7:15:bd:6d:bd:9b:c4:5d:2d:6c:87:9e:f6:24:
60:e9:1f:fe:36:01:4c:9d:34:ae:03:58:36:94:3c:
0a:71:a6:12:57:42:1b:48:65:5f:6e:07:bd:54:10:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:B0:B6:36:76:CC:33:41:5C:80:50:D4:D5:9E:02:7C:C8:D7:AA
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:be:76:08:94:12:73:2b:dc:5d:7a:bb:a3:d4:70:fa:c0:4b:
a9:d3:e8:c1:fb:18:5d:b7:70:db:04:52:17:e6:9f:19:88:2f:
a5:b2:d0:58:88:51:99:30:55:86:f6:00:ab:35:db:5e:9d:cb:
52:d6:59:7d:70:e9:5c:8c:64:0f:36:21:ad:fc:32:1e:56:10:
f1:53:77:b4:53:c5:ed:61:c4:f7:aa:95:e3:74:e5:e6:94:83:
67:28:1e:29:8b:b9:2c:bc:33:0d:90:a2:6d:fa:75:0c:33:97:
6e:18:06:14:4c:dc:26:58:09:3f:5b:bf:c2:de:2d:a1:b5:64:
7e:5d:2b:1d:43:b4:c9:dc:86:0e:cf:7e:7d:48:7b:ed:cd:64:
8e:a4:42:fa:49:5d:dc:d4:fc:d7:36:6c:1e:5f:0f:1d:8c:ea:
00:d6:93:d3:bb:a8:7b:95:04:0a:a5:12:61:ef:5c:83:20:20:
4c:56:c0:5f:d6:9a:46:0a:45:53:26:3e:fe:d5:1a:a5:ab:ec:
c9:27:75:f8:16:5a:86:b5:cc:df:da:b3:3b:90:80:6a:51:39:
cb:2a:85:86:47:a8:c3:1c:3d:80:d0:81:00:69:f6:fa:3a:3d:
97:a2:e8:66:0b:e1:16:dd:43:46:3b:9c:34:b0:d1:04:0b:1f:
08:5b:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:53 2026 by rpki-client