Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: lVEbvm9VxivQQIu0Ayo585rJ0JVmfb0Cdp8WLnlo1fc=
Subject key identifier: 64:8F:86:9A:C1:E8:B7:EA:C7:5E:5B:4A:A9:2E:10:10:39:5A:2C:6E
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019F92ED52848277A7A8D3565776A4EB4BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0934
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: svFP7bzKcnYwxAHQmukb2Jei0xPN/QV91cYYJOtv7Ik=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:52:84:82:77:a7:a8:d3:56:57:76:a4:eb:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=648f869ac1e8b7eac75e5b4aa92e1010395a2c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:09:48:3a:06:7b:99:f1:49:66:7b:75:17:
09:b3:3d:0b:04:c9:b9:8e:2f:6a:41:1b:64:08:7b:
cc:15:21:5a:04:3b:52:3a:fc:fd:6d:c2:dd:57:57:
7a:1a:17:9e:69:ba:1b:bb:64:2b:bd:8f:b1:25:88:
40:4c:b9:38:76:f2:d7:f1:d7:ae:b5:f5:a3:7a:54:
a6:b5:b7:06:78:cb:0e:cb:cd:57:50:34:32:20:7b:
ec:11:53:1c:a2:78:46:37:e4:58:2c:01:a7:66:5d:
4e:cb:3a:11:99:df:9a:ed:55:00:86:4e:19:d5:e4:
ff:bb:3a:e9:86:e3:41:00:49:ef:79:c0:d7:01:0d:
9d:db:83:1e:cb:aa:90:1a:e8:e5:6e:30:e0:75:a9:
aa:9b:a0:32:39:ec:bb:73:2d:6f:0c:c4:0a:67:dd:
2f:9c:33:ab:47:58:5a:f4:b8:6e:b7:44:b8:fa:89:
61:fc:d9:0e:5e:c8:88:3f:12:e2:ab:f8:c6:cd:11:
92:a5:38:89:78:f0:7b:a9:5b:1c:60:5a:4a:16:5c:
c2:ad:c5:4c:de:91:9c:52:60:52:75:cd:8e:2a:c1:
4a:38:01:06:4e:60:9c:0a:5a:ff:8a:de:99:5e:79:
49:24:78:95:ec:75:81:e6:1a:de:aa:49:93:ba:18:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:86:9A:C1:E8:B7:EA:C7:5E:5B:4A:A9:2E:10:10:39:5A:2C:6E
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:9b:d1:32:62:10:50:d4:11:f3:e6:4d:b6:14:22:2c:c2:
59:57:73:06:e6:7c:8b:6d:56:29:c7:5d:df:1f:4e:1b:32:ec:
09:8d:6b:32:b6:53:f6:4d:34:71:82:94:58:96:94:85:c0:1a:
7d:a5:db:21:51:82:d6:17:3b:98:b1:39:7a:f9:07:e3:74:6b:
b3:30:a0:6a:9f:12:ee:4c:2a:15:af:4f:85:f7:69:0c:8a:f3:
d2:74:e9:5a:d9:81:6a:fa:67:d5:ec:4c:1a:f6:03:91:44:f2:
87:04:dc:d3:b0:69:d1:8c:4a:82:67:53:a0:eb:6e:c9:ae:c1:
2a:4b:ee:e8:da:c4:82:cd:61:b2:62:b8:5d:71:46:18:e6:b9:
07:3c:65:3f:ba:ad:39:62:09:2f:fa:12:01:e5:85:30:1b:6f:
33:b7:2a:09:a3:68:f6:4e:aa:92:54:9c:64:bc:54:39:06:da:
08:11:20:89:89:93:62:69:04:77:06:15:86:4d:95:4f:83:04:
1f:f6:26:18:36:fe:3b:65:42:4c:c2:c6:04:08:90:d4:1b:6f:
f8:fa:4b:31:7d:81:1a:ef:8a:ef:a4:9d:07:29:19:72:d2:73:
33:fe:d2:3c:73:a7:66:7e:ca:33:1a:7f:4f:03:7c:47:06:b1:
86:f2:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:03 2026 by rpki-client