Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: VCxuPKGiKlSvcZjLoq6CTuRjNlaFwc2ZEnulqqMjfg8=
Subject key identifier: 0D:19:02:0C:92:ED:A0:C2:2D:80:D2:8B:5F:14:3D:47:40:8F:FB:44
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 019D28BB4AC2E62E4605247A92A37AFD00AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 0C01
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: yPLTZlg58KlHk0xDVg36UpJRswDnC6AWXEG+yCgIfso=)
2: xNLnZO1cDEAZroKMMXGqZNfuwNY.roa (hash: yJpc4aql6Gc3JoFlGTZNEOEdKkmxfLQRUHpE9hH09nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4a:c2:e6:2e:46:05:24:7a:92:a3:7a:fd:00:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=0d19020c92eda0c22d80d28b5f143d47408ffb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:b9:2b:f6:68:a8:c4:a9:e0:fa:6d:66:03:
c3:bc:54:ba:a7:9a:fa:4b:ad:ff:0e:6c:01:e4:8c:
a4:30:fe:0a:93:2c:93:0e:7a:8c:bb:79:49:19:d3:
c1:8b:0e:8e:e4:95:5d:d6:c3:e6:0c:e5:90:15:1d:
a4:76:34:94:32:61:28:1c:39:33:e2:d7:e4:bc:e0:
66:ea:86:d8:38:7c:4c:d7:2c:e7:e7:79:ba:fa:5c:
23:42:26:ad:13:fb:ec:d6:19:3c:81:15:b3:34:bd:
43:70:6b:07:11:90:8d:ac:7b:a0:77:21:e7:d6:be:
2b:0d:4d:57:0c:0a:9f:84:8c:31:1a:6b:d9:5f:68:
3a:ce:fa:be:ef:9d:f8:ea:ae:3b:48:ce:6d:78:43:
e0:4c:6e:3f:29:cd:88:5c:72:44:c1:d3:c8:1f:69:
36:5d:92:b0:2a:75:17:21:61:6f:21:59:aa:3a:25:
23:e1:c5:42:fa:30:b4:72:b3:a3:5e:34:25:18:c3:
44:f8:8c:ba:61:d0:d9:c3:86:51:d9:c8:b6:87:2a:
2d:d4:8f:9b:1f:a2:3f:80:1f:a7:4f:4a:79:0c:7c:
87:12:27:02:5e:96:06:32:a5:a0:06:40:b8:5d:41:
bd:98:c4:4e:84:12:e3:ea:fe:ab:88:08:aa:f9:1c:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:02:0C:92:ED:A0:C2:2D:80:D2:8B:5F:14:3D:47:40:8F:FB:44
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:99:d1:0e:df:2d:e0:fd:4d:9e:09:b5:61:e9:ad:47:07:
27:47:bf:89:69:50:6f:b9:45:93:7c:8a:f2:6c:61:5d:06:f7:
91:25:67:b6:b3:24:db:64:6a:ab:c7:29:35:f4:91:7d:f5:3a:
b5:2c:17:c8:6a:bb:ed:36:d8:8b:97:9d:75:75:9d:8a:45:0f:
dd:db:2f:bb:f6:24:6d:d5:c5:07:17:ff:67:8c:e7:c9:11:61:
41:a8:2d:3e:f9:49:2c:4d:25:08:88:42:ab:76:07:7f:92:95:
45:f3:22:09:b2:21:36:83:94:90:ff:41:a4:8b:99:b1:e7:20:
ed:92:79:7f:d6:29:c1:b9:25:d3:42:96:7f:e4:b9:2b:93:08:
4d:63:3d:29:9a:ce:30:60:95:68:08:23:5a:7a:23:f1:83:f0:
ab:f8:ac:79:5c:3d:1a:d9:19:16:46:49:96:ce:8a:27:6b:58:
93:c5:6f:06:87:4d:c7:e8:9a:5d:00:3a:00:20:45:87:07:9d:
e2:9c:1f:ab:58:c8:da:49:16:ff:a4:a3:ad:c9:d7:88:37:6f:
6c:cd:f3:8f:d7:10:f2:6a:20:de:0f:63:66:a1:cb:99:5e:99:
90:fe:80:d1:61:3b:93:7b:7f:3a:0c:a6:c5:a4:b6:55:3f:14:
a7:92:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:07 2026 by rpki-client