Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: G+d2sgemKwga9drrJ9uRxROPk8+XWod92NcQRgav6ko=
Subject key identifier: 0B:2B:1C:F7:B6:CB:A2:51:C2:65:73:9F:CB:8E:37:09:9A:DC:A4:61
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01A0D4942021C062D98C04126B1237382C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 09DB
Signing time: Thu 24 Sep 2026 18:01:12 +0000
Manifest this update: Thu 24 Sep 2026 18:01:12 +0000
Manifest next update: Fri 25 Sep 2026 18:01:12 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: MUmfOPxUo1ym27iA9yba4cBrRdQ.roa (hash: E3+bxe+6Z8vivRrWSF3M1TLEwkKZ68GGPJwJrdpmg1k=)
3: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: W5F7v4z2AsV+9rYLMfs4gK+iPhi0kQZBjOg/Cz7t9QM=)
4: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:20:21:c0:62:d9:8c:04:12:6b:12:37:38:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Sep 24 18:01:12 2026 GMT
Not After : Sep 25 18:01:12 2026 GMT
Subject: CN=0b2b1cf7b6cba251c265739fcb8e37099adca461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:3a:b5:b3:30:fa:0a:d1:07:65:6f:c3:58:
63:67:08:16:7b:e6:8e:4f:7b:2a:a1:a3:a2:e3:7e:
d4:55:98:23:a7:61:8b:9e:55:56:ad:07:8c:5b:9c:
4e:bf:88:1f:01:b5:9f:05:cb:9a:73:81:a2:59:6b:
0f:95:3b:de:2a:26:ca:3a:6e:1f:fc:14:03:fc:c1:
f5:15:36:3c:6f:de:5b:e6:a1:f4:88:6f:49:8f:e0:
2d:0c:26:0c:f6:fb:84:42:9c:16:d5:aa:a9:ee:16:
e0:3d:ea:b2:6d:90:1f:c1:9c:7c:57:52:5b:15:12:
3a:ce:28:38:58:ce:e8:33:f2:7b:da:74:17:66:9e:
41:a0:d7:09:c3:54:d8:0f:3f:ce:0f:4b:2e:91:1d:
85:4c:84:a9:54:ef:1a:6a:47:86:1c:ae:19:5b:a6:
22:dd:22:a8:48:74:3b:99:7e:60:72:46:4f:f6:51:
75:a5:0e:93:57:c8:b4:d6:b2:20:1a:01:10:fd:27:
8d:13:ec:da:fa:8b:12:71:b1:8a:1a:01:2d:7c:60:
33:bd:38:d7:35:a1:48:95:30:74:bc:b1:4c:d9:f2:
71:4f:61:d1:0b:28:73:1f:e4:ef:61:27:23:84:53:
7c:4a:cc:87:c3:0d:0a:b3:9d:57:23:6f:45:32:0e:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:1C:F7:B6:CB:A2:51:C2:65:73:9F:CB:8E:37:09:9A:DC:A4:61
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:ff:f7:65:4c:26:6f:5b:ee:c6:f9:58:ab:d0:eb:20:ab:
50:8e:bc:d1:50:d5:82:37:0b:5d:5b:e1:60:a4:a2:f9:50:34:
01:50:8c:54:1a:fc:23:46:0c:ef:f2:32:62:4e:06:e8:eb:2a:
9c:a6:8a:47:cc:2b:7a:ef:b8:4a:12:49:81:a0:a2:ee:57:51:
41:9b:46:ad:3a:91:76:d3:dc:cb:8f:c2:46:28:c7:bb:56:cc:
09:b1:a3:72:0f:28:77:f5:44:fe:59:18:1a:e5:2e:dd:44:85:
54:01:96:57:de:4a:85:ca:71:d5:33:d9:6c:e1:d3:e2:c9:04:
f9:78:a3:d5:7a:80:6b:f8:30:62:2e:19:f5:c7:f7:9d:21:11:
bf:2f:72:24:33:2c:0d:11:8a:de:8c:d3:cc:98:ba:02:c5:41:
e7:0f:ef:29:a8:52:2d:24:7c:d5:6e:2f:f2:d7:c7:05:32:7d:
b8:65:4a:ca:7a:b5:e3:b6:b8:03:86:78:0c:03:c6:db:e0:8a:
ed:05:5e:a8:9f:37:0b:4c:ae:00:11:d2:72:a7:dd:57:ea:16:
f1:63:21:44:91:f3:ce:5c:8f:80:b5:f6:2f:f5:d3:4b:df:f1:
1c:fe:80:31:8e:66:93:c8:8d:64:93:1b:a0:6a:bc:ff:ee:9c:
e4:dc:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:46:39 2026 by rpki-client