Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: wVsP8ScjPGVc9spP8IFlmQ1UNMT97LIXS17AYmCJDUA=
Subject key identifier: BB:A3:24:ED:AC:31:6D:5B:AD:58:71:18:0D:67:C8:F3:57:1D:EC:14
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019D28846B6DD170838ABB3F87FA805985F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 02BA
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: qw/p3Vd/dRy7hXEBhmTM/NXheKycORbkFdlixQHFr94=)
2: cnEEhfNi0eqLNKuxpPzXptnWI8k.roa (hash: m9SOT0Ao58g7AMmX42Mi3/tMd3Z2BD9HxWvbKa+j8ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6b:6d:d1:70:83:8a:bb:3f:87:fa:80:59:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=bba324edac316d5bad5871180d67c8f3571dec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:ed:62:66:36:1a:e5:6d:a6:d0:86:ca:cb:
f7:16:6b:fd:13:20:ab:aa:52:1f:de:1e:a8:7e:ef:
31:82:93:a6:ce:67:ed:3d:cf:4d:f9:41:70:ba:f2:
11:66:64:d0:39:21:17:a2:58:05:43:41:27:01:3c:
af:91:87:2d:ed:79:6b:ff:5c:c0:96:4b:a5:9f:f2:
da:82:88:7b:ab:8b:41:83:eb:6a:4b:39:13:4e:32:
43:35:69:1b:eb:d9:d0:1f:a2:7a:05:3d:c6:30:e0:
f7:65:aa:91:da:9f:bb:0e:44:12:2f:13:0f:c8:de:
a7:9a:f6:9a:ff:a0:15:6e:be:36:d2:a0:63:a9:e2:
54:97:67:dd:3c:3f:ff:74:03:93:8e:f2:40:56:ed:
7b:9b:3b:f2:10:17:13:d6:6b:3e:17:84:fc:8b:00:
d6:b5:c6:37:53:3a:a4:a5:bc:8f:1d:81:51:3e:02:
83:01:c7:46:b2:55:08:76:ae:1d:13:0e:5c:a9:45:
4e:0a:86:77:2b:77:9d:31:ef:b6:11:3c:32:72:8b:
83:2e:00:9c:db:17:d3:b3:b3:6d:7b:76:8a:f6:7d:
3c:56:af:b0:73:6c:b2:13:3c:2d:e5:32:51:43:72:
f1:72:bf:2b:2d:f9:28:5e:c4:b0:70:77:94:4f:f6:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:24:ED:AC:31:6D:5B:AD:58:71:18:0D:67:C8:F3:57:1D:EC:14
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:42:05:33:24:d7:76:20:6e:45:e2:76:b8:22:f0:1c:cc:
27:d9:70:a5:11:16:f1:e8:bc:4e:97:9d:a5:f4:68:a1:95:88:
10:3d:8c:0d:30:f4:c5:8a:87:a2:02:27:2b:d4:99:6e:64:ac:
a9:04:08:96:d3:da:31:cc:0f:6a:b6:17:10:9c:02:81:14:c5:
1c:62:fc:e7:3a:e0:d7:d5:7c:00:6f:f2:00:04:28:ba:c6:e3:
60:02:89:5a:ae:74:db:55:84:de:fa:50:1a:6c:e1:87:2e:99:
5c:a8:13:70:df:99:98:17:05:89:0d:10:d3:88:4f:98:65:1a:
0e:ff:66:ba:8a:38:fd:62:55:f3:f5:0e:ec:00:c4:7d:3b:36:
43:8b:11:43:7f:bc:38:93:85:76:55:73:c4:2c:ff:14:c2:b3:
57:0b:15:c2:8d:33:50:fe:bc:71:8f:9b:89:c9:a5:74:6d:65:
d5:83:15:14:04:d8:2a:cf:81:26:86:ce:45:43:e2:3a:be:4e:
85:d3:34:1e:4a:19:3b:58:87:25:39:2a:59:90:a4:a9:d9:d8:
71:4f:66:b5:24:0b:49:1d:2e:74:11:07:0e:b2:4a:73:35:b2:
8c:bc:a9:95:6a:03:56:c6:f5:46:36:65:24:3a:e7:11:0e:a1:
8e:dd:c4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGtt0XCDirs/h/qAWYX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOTk1MzQ0OTNjYmE5Yzg5ZGJkZTI2MmY4N2ExNTg3YTRh
YTk5ZGYwHhcNMjYwMzI2MDUwMTAwWhcNMjYwMzI3MDUwMTAwWjAzMTEwLwYDVQQD
EyhiYmEzMjRlZGFjMzE2ZDViYWQ1ODcxMTgwZDY3YzhmMzU3MWRlYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGPtYmY2GuVtptCGysv3Fmv9EyCr
qlIf3h6ofu8xgpOmzmftPc9N+UFwuvIRZmTQOSEXolgFQ0EnATyvkYct7Xlr/1zA
lkuln/Lagoh7q4tBg+tqSzkTTjJDNWkb69nQH6J6BT3GMOD3ZaqR2p+7DkQSLxMP
yN6nmvaa/6AVbr420qBjqeJUl2fdPD//dAOTjvJAVu17mzvyEBcT1ms+F4T8iwDW
tcY3UzqkpbyPHYFRPgKDAcdGslUIdq4dEw5cqUVOCoZ3K3edMe+2ETwycouDLgCc
2xfTs7Nte3aK9n08Vq+wc2yyEzwt5TJRQ3Lxcr8rLfkoXsSwcHeUT/bn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLujJO2sMW1brVhxGA1nyPNXHewUMB8GA1UdIwQY
MBaAFD6ZU0STy6nInb3iYvh6FYekqpnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODct
NWVkMDc3ZWI4YmUwLzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODctNWVkMDc3ZWI4YmUw
LzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBpCBTMk
13YgbkXidrgi8BzMJ9lwpREW8ei8TpedpfRooZWIED2MDTD0xYqHogInK9SZbmSs
qQQIltPaMcwParYXEJwCgRTFHGL85zrg19V8AG/yAAQousbjYAKJWq5021WE3vpQ
Gmzhhy6ZXKgTcN+ZmBcFiQ0Q04hPmGUaDv9muoo4/WJV8/UO7ADEfTs2Q4sRQ3+8
OJOFdlVzxCz/FMKzVwsVwo0zUP68cY+bicmldG1l1YMVFATYKs+BJobORUPiOr5O
hdM0HkoZO1iHJTkqWZCkqdnYcU9mtSQLSR0udBEHDrJKczWyjLyplWoDVsb1RjZl
JDrnEQ6hjt3Ebw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:09 2026 by rpki-client