Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: QOoUiGpDh3FebKes8tImze8B8lMRso7ojHFjsPUDHa0=
Subject key identifier: 33:3E:D5:9D:B7:90:6E:6A:CE:97:9E:93:FB:20:30:49:74:8C:F6:FF
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 019E1C7D8664AF345D9028379C5F8299E783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0E1D
Signing time: Tue 12 May 2026 14:00:48 +0000
Manifest this update: Tue 12 May 2026 14:00:48 +0000
Manifest next update: Wed 13 May 2026 14:00:48 +0000
Files and hashes: 1: C9VfmyBoyBG--3Zr3s8ERPvb0L4.roa (hash: AyN3qqD/8tiCfn+7UUC8E6XJPPe6XPYGtMnnz4+mJrI=)
2: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: oSNx/+aRuLyQu53TQNZK2MOG6e97JY8Yc9Vk2FmZ6HM=)
3: gnrpn7YumTfm3sZV07Z4M4h7UKE.asa (hash: RP6nKvtvBYTlAn9huMeoEhELwop/otfq7uqLtTZTFxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:86:64:af:34:5d:90:28:37:9c:5f:82:99:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: May 12 14:00:48 2026 GMT
Not After : May 13 14:00:48 2026 GMT
Subject: CN=333ed59db7906e6ace979e93fb203049748cf6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:29:3b:8e:f7:6e:d0:53:63:aa:1c:b2:43:
a1:6f:2a:92:53:23:d3:45:25:c9:7d:4e:84:e5:21:
86:e4:3f:26:0b:b0:5c:9f:7b:0b:b0:a5:03:5b:7f:
0e:3e:27:9f:64:dc:05:b3:53:33:47:28:61:22:6a:
d6:c0:8a:70:b3:77:c1:c9:19:35:ba:48:ed:2c:80:
08:db:c9:47:25:31:da:d7:bc:b4:e7:3a:f3:eb:76:
b3:ad:5a:22:a3:08:d5:4c:79:11:ed:26:08:27:8a:
b1:4e:56:f2:60:41:2d:53:cd:22:54:d4:ff:d7:14:
c9:71:86:47:96:67:e1:5e:ad:f6:90:71:9e:02:fc:
ea:ee:12:d6:5e:e7:98:6e:70:3e:fd:6e:5c:88:ff:
d2:a2:88:d6:3c:57:f5:c9:1b:25:bc:48:9f:b9:73:
ca:36:e0:09:6c:3e:a6:07:03:da:6e:ef:49:cc:87:
81:b0:bd:24:cf:dd:a2:8b:fd:ca:0f:25:f9:0c:4e:
69:d6:4d:4d:b6:0d:f8:7c:4b:ab:30:6c:27:91:6c:
41:d1:53:59:0a:c9:b2:e4:3b:28:04:52:3c:c4:68:
07:8f:db:0c:f3:10:52:5e:b9:c4:da:e7:74:33:54:
e1:6d:cb:8e:25:12:0b:11:3a:2a:4c:44:a7:d4:83:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:D5:9D:B7:90:6E:6A:CE:97:9E:93:FB:20:30:49:74:8C:F6:FF
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:4e:36:29:21:a0:4f:e8:31:45:a9:62:9d:fb:26:99:2d:
88:46:b5:10:d3:3a:3d:11:dc:d3:b7:9b:0b:8d:a7:0e:8e:5f:
26:29:69:a4:af:a3:f8:da:55:d3:ba:ed:0a:c3:c3:12:4e:37:
94:3e:f6:cc:cc:40:eb:fd:57:98:b0:ee:5a:c8:68:69:b2:e7:
61:d9:ac:8d:86:c8:ba:47:a9:3c:8a:63:11:85:be:58:0a:a2:
1f:30:b8:e9:0c:bf:73:4a:81:7a:87:f4:53:ed:25:f0:09:5e:
37:59:b4:e5:ab:b8:1d:1c:63:c6:38:f7:28:dc:8e:a7:7c:67:
35:e6:13:de:cd:e0:88:c4:a0:c2:94:57:1d:52:35:a1:b3:08:
05:5b:b1:06:c0:e3:36:45:21:69:6c:a3:9b:c0:05:e2:c4:57:
f6:8e:d0:c1:eb:84:f9:ae:11:51:81:89:ae:b7:d9:e1:14:4e:
4d:0d:df:df:4e:84:b8:c7:7e:cf:4a:5a:fc:66:6d:3f:e2:ca:
7d:30:fd:f9:f7:24:11:3b:0b:bc:79:23:c3:21:2a:88:57:e2:
fe:79:71:21:8c:97:eb:f2:99:7e:95:e5:c8:ff:d0:54:a1:81:
3a:d3:61:38:a0:4a:77:8a:14:8f:57:5f:bc:42:4b:91:ad:4f:
70:29:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:36 2026 by rpki-client