Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: K6lVurVZttLXQVKaciLbX0lU0Cc98snzvNvixmvRYs4=
Subject key identifier: C5:78:F7:F3:FA:89:03:8D:14:36:C1:A1:6D:24:83:D2:0D:FD:FF:A1
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019D28F31C34789E86CC7700E6EDED24E7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 07F4
Signing time: Thu 26 Mar 2026 07:01:54 +0000
Manifest this update: Thu 26 Mar 2026 07:01:54 +0000
Manifest next update: Fri 27 Mar 2026 07:01:54 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: fZotxN4j2SKKZBERkeNzP5EL9ZRX97aNVYiw4p5hQHo=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1c:34:78:9e:86:cc:77:00:e6:ed:ed:24:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Mar 26 07:01:54 2026 GMT
Not After : Mar 27 07:01:54 2026 GMT
Subject: CN=c578f7f3fa89038d1436c1a16d2483d20dfdffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:25:b2:29:f0:ff:74:40:fe:d3:bc:56:16:
a1:2d:ba:f3:3d:91:0a:7b:6d:a7:04:cb:19:f1:39:
bc:a2:16:e6:09:0b:29:fb:8d:45:d4:a6:a2:7e:5e:
63:9a:e3:40:4e:33:85:5c:80:64:80:7b:29:96:82:
8f:55:fd:e2:c6:ba:9f:14:3e:e2:32:ed:09:1c:0c:
80:95:53:d5:a0:4a:bb:9e:2e:63:f1:66:cf:1d:d6:
fb:70:a3:2f:29:7a:a8:99:77:1a:b2:8f:42:23:17:
6b:52:e2:0a:80:9e:7b:e1:ae:19:62:1a:75:8f:64:
50:ca:ca:45:f0:3d:29:2f:b5:89:3c:02:ac:5c:1b:
2a:73:a5:7d:17:1c:15:69:af:fd:ef:1c:4b:4f:d8:
53:0e:20:01:10:93:0c:4b:1c:3e:d6:b4:34:5c:5e:
85:3b:9e:f6:b3:ad:ff:a4:b3:f4:f2:e8:95:f1:54:
fe:45:44:b3:19:88:0e:28:ed:76:67:36:96:e4:00:
b6:94:11:09:0a:77:86:80:c2:74:79:c3:ac:ee:b4:
f9:ff:a1:f7:47:c9:43:12:e9:c5:58:43:a8:74:5d:
9e:9b:e0:d8:97:05:11:2b:c0:4b:01:cd:80:42:9e:
c0:24:1c:9b:7f:01:7b:68:a9:ba:06:e9:2e:a0:6c:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:F7:F3:FA:89:03:8D:14:36:C1:A1:6D:24:83:D2:0D:FD:FF:A1
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:bb:73:f8:68:c8:24:6d:6b:b4:14:14:30:82:67:17:02:
a7:21:b2:54:51:4c:cb:f7:e7:a4:8d:e4:dd:9f:4e:1c:8e:3b:
33:9e:be:db:00:05:aa:10:50:4c:8a:8f:c6:07:7e:84:c0:42:
48:67:eb:af:99:84:f1:71:8b:42:4d:6c:96:3b:61:2b:76:10:
eb:5e:c6:1c:a8:33:9e:4c:d5:cd:04:f1:22:6d:de:8a:81:6f:
a6:f1:f4:33:a8:b7:b3:ae:46:83:0e:2e:f4:2f:e4:6a:8b:fd:
a4:81:f5:5c:72:2d:56:31:dd:83:fa:8f:99:32:8b:99:91:26:
a3:f4:c6:24:1e:7d:c2:30:7f:e5:42:9c:78:89:09:06:bf:9d:
3f:91:89:31:bc:5a:f7:95:d2:b3:91:67:b2:28:5f:d7:f1:cd:
c6:82:cc:61:88:c9:2d:86:4b:60:54:3a:50:dd:b3:bd:02:54:
6a:0d:b5:21:c8:76:3d:83:9f:6e:ca:72:7c:ea:ce:7b:55:61:
c7:4d:33:2e:b3:46:cb:5f:10:2f:f5:fc:b7:a7:03:09:67:a7:
cc:e6:c7:ec:a2:f0:69:4b:bd:e0:07:fd:b5:85:17:93:b7:4f:
f6:2c:ad:1a:5c:9f:d5:f2:65:13:fd:92:38:f0:d8:8a:df:aa:
08:41:10:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8xw0eJ6GzHcA5u3tJOfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx
ODJhOWMwHhcNMjYwMzI2MDcwMTU0WhcNMjYwMzI3MDcwMTU0WjAzMTEwLwYDVQQD
EyhjNTc4ZjdmM2ZhODkwMzhkMTQzNmMxYTE2ZDI0ODNkMjBkZmRmZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYlsinw/3RA/tO8VhahLbrzPZEK
e22nBMsZ8Tm8ohbmCQsp+41F1Kaifl5jmuNATjOFXIBkgHsploKPVf3ixrqfFD7i
Mu0JHAyAlVPVoEq7ni5j8WbPHdb7cKMvKXqomXcaso9CIxdrUuIKgJ574a4ZYhp1
j2RQyspF8D0pL7WJPAKsXBsqc6V9FxwVaa/97xxLT9hTDiABEJMMSxw+1rQ0XF6F
O572s63/pLP08uiV8VT+RUSzGYgOKO12ZzaW5AC2lBEJCneGgMJ0ecOs7rT5/6H3
R8lDEunFWEOodF2em+DYlwURK8BLAc2AQp7AJBybfwF7aKm6BukuoGymwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV49/P6iQONFDbBoW0kg9IN/f+hMB8GA1UdIwQY
MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt
NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl
LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev+7c/ho
yCRta7QUFDCCZxcCpyGyVFFMy/fnpI3k3Z9OHI47M56+2wAFqhBQTIqPxgd+hMBC
SGfrr5mE8XGLQk1sljthK3YQ617GHKgznkzVzQTxIm3eioFvpvH0M6i3s65Ggw4u
9C/kaov9pIH1XHItVjHdg/qPmTKLmZEmo/TGJB59wjB/5UKceIkJBr+dP5GJMbxa
95XSs5Fnsihf1/HNxoLMYYjJLYZLYFQ6UN2zvQJUag21Ich2PYOfbspyfOrOe1Vh
x00zLrNGy18QL/X8t6cDCWenzObH7KLwaUu94Af9tYUXk7dP9iytGlyf1fJlE/2S
OPDYit+qCEEQlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:05 2026 by rpki-client