Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: Dk5MANWojWLaZsqRjostNSmR/Fq9ZKHufcLNlQjdf1Y=
Subject key identifier: A7:27:4C:6D:B3:D1:E2:8A:85:89:9E:59:E7:23:A1:7D:7F:53:A6:47
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019E1FB5CBCD756A9B166A9A627C80A0E227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 033A
Signing time: Wed 13 May 2026 05:01:08 +0000
Manifest this update: Wed 13 May 2026 05:01:08 +0000
Manifest next update: Thu 14 May 2026 05:01:08 +0000
Files and hashes: 1: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: DzQ+SnGLC4qDUhb+FI31w5YCBGkjwybgD87VndjVqmQ=)
2: cnEEhfNi0eqLNKuxpPzXptnWI8k.roa (hash: m9SOT0Ao58g7AMmX42Mi3/tMd3Z2BD9HxWvbKa+j8ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:cb:cd:75:6a:9b:16:6a:9a:62:7c:80:a0:e2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: May 13 05:01:08 2026 GMT
Not After : May 14 05:01:08 2026 GMT
Subject: CN=a7274c6db3d1e28a85899e59e723a17d7f53a647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:d0:00:b4:4b:e6:7b:af:31:68:30:11:38:
a5:7e:e2:77:3e:ad:64:b3:bc:26:7c:a7:0e:b9:04:
c2:0b:1c:70:b8:16:4e:68:28:56:59:44:c3:3d:d0:
55:44:fb:7a:0c:de:ac:a5:a9:5d:52:6d:2c:01:7e:
32:fd:f8:a9:a2:5e:f9:4c:bd:38:dc:3e:5b:70:9b:
51:37:22:b7:f6:17:62:32:bf:7b:04:d5:e1:fd:02:
fb:89:29:a5:74:07:89:00:37:36:d2:9d:d0:d8:49:
0c:ab:f9:a3:6e:00:2b:51:da:07:b4:a6:c4:6f:31:
fe:da:d3:37:66:b3:17:69:22:5a:87:d5:8a:6b:05:
6d:d4:55:19:5c:e7:86:32:64:cf:68:03:99:9e:15:
41:85:84:e1:97:aa:6f:ab:9f:01:5a:64:bb:76:b0:
da:b4:d0:45:cd:0f:64:1a:2d:8a:04:15:8a:0e:ea:
9d:80:8e:66:8d:b8:26:3d:62:72:a5:7d:83:de:fc:
e2:19:53:22:83:d5:85:d2:3f:56:f2:00:46:20:36:
8b:b2:49:93:39:c5:d5:e0:b8:0e:fd:36:f0:57:8b:
87:62:7c:fa:5d:f2:10:08:56:07:d4:86:3c:72:69:
f1:ee:a2:d0:26:cf:d1:3f:ce:2a:b2:b9:3f:90:88:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:4C:6D:B3:D1:E2:8A:85:89:9E:59:E7:23:A1:7D:7F:53:A6:47
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:33:6e:0c:5a:30:ba:cb:55:56:f8:21:b9:9d:9b:a6:58:
72:53:ce:57:c8:69:24:f5:a8:d0:20:0c:4e:c9:3a:52:3e:db:
0a:65:2c:1d:93:a4:42:93:bb:10:f8:95:e4:aa:57:29:30:c8:
a2:a1:11:76:56:5e:71:ef:b5:ef:f8:b9:11:32:c1:7d:14:e5:
29:12:81:e6:d8:74:e8:20:56:64:24:fd:5b:21:4b:dc:1c:d4:
e8:61:1b:a7:1a:b4:93:dc:1e:51:0a:0b:db:9e:c3:d3:61:3f:
78:75:82:3b:d1:d5:53:98:cc:7b:61:90:cd:5e:80:09:3c:ed:
88:12:2c:90:28:9f:40:23:47:92:fe:8d:6e:b3:8b:b5:87:91:
38:f8:dd:ba:2d:f7:4b:83:9c:45:28:00:84:4e:89:c8:87:6a:
bc:8c:83:b0:d6:f1:de:7a:7e:46:3b:ee:a1:2a:81:d9:7d:57:
3d:ee:2b:04:a6:90:fb:f4:49:56:b3:2e:c6:1d:7e:d8:bc:60:
f3:42:28:bd:2b:ab:a7:08:3f:32:a2:f4:ee:78:c3:4e:18:29:
8e:c6:f9:36:ef:cf:d4:6e:86:14:63:5a:89:04:3c:ee:07:2a:
80:00:68:15:34:39:46:b4:b1:a4:8a:fa:0b:46:3e:f4:b3:14:
2d:e3:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:36 2026 by rpki-client