Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: 3cr+7CE7E3mVeU7UAGNNdP64m0HrJmqykWcNjdOyaf4=
Subject key identifier: 3E:D9:A6:7C:38:10:F2:22:FB:47:2E:4E:F3:07:8D:87:8F:3B:71:47
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 019E1F7F13820DEAFD16D1EEA09D651422C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 0670
Signing time: Wed 13 May 2026 04:01:22 +0000
Manifest this update: Wed 13 May 2026 04:01:22 +0000
Manifest next update: Thu 14 May 2026 04:01:22 +0000
Files and hashes: 1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: HEExl1NjD7xFWeJODR1+uC0AGi3GsVFCsuZGf3KLBd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:13:82:0d:ea:fd:16:d1:ee:a0:9d:65:14:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: May 13 04:01:22 2026 GMT
Not After : May 14 04:01:22 2026 GMT
Subject: CN=3ed9a67c3810f222fb472e4ef3078d878f3b7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:bf:61:a9:47:27:d0:47:bc:ba:b5:e0:5e:
b1:94:40:9f:16:7e:3b:d1:8c:64:e6:b2:a6:8c:59:
09:cf:f9:37:23:1a:28:31:60:78:99:b3:79:50:e6:
f4:76:0d:de:72:31:de:52:d0:12:2a:cf:f3:c2:b0:
ae:82:2e:d9:39:48:bf:0d:e9:2c:6e:45:b9:80:43:
1a:a1:6f:f7:db:42:c3:84:84:d1:ec:28:6d:be:1a:
8d:7a:49:60:1d:fc:6b:0f:28:36:43:23:7b:25:f1:
1a:d5:f3:83:1c:b2:7b:fe:b5:17:ea:69:7c:ef:a5:
2f:c3:f5:d9:31:39:e9:83:3b:ad:cd:c3:a4:be:49:
da:2c:d2:00:a7:39:e0:aa:6e:a3:cc:b6:91:33:aa:
5c:e7:44:86:8b:e3:f6:ce:f3:61:61:62:e2:3a:66:
5c:a1:ad:51:90:73:15:57:70:07:d3:12:0b:9e:c7:
3f:eb:b4:d5:f6:d8:5f:60:05:02:78:b0:a2:14:fd:
1f:7c:92:8f:06:8e:65:c4:f1:a6:42:d4:21:29:3f:
73:6b:5a:5d:d4:bb:74:e6:06:16:71:a0:d6:8d:5e:
a2:dd:4f:88:bc:9b:98:da:06:61:22:7a:84:2a:4b:
1c:32:71:6a:08:00:84:1c:74:a4:bc:32:f3:2c:e7:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:A6:7C:38:10:F2:22:FB:47:2E:4E:F3:07:8D:87:8F:3B:71:47
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:00:63:a7:8e:6e:b5:58:0d:63:70:17:ef:d5:eb:c0:3e:51:
57:e1:c3:70:12:58:f5:32:7b:33:b8:a7:08:14:8b:4b:df:f3:
d2:8e:32:ff:3b:aa:a5:73:e4:0a:a9:4f:92:16:83:4d:4e:44:
fa:2a:23:8b:4d:84:4b:eb:55:fd:a4:91:e0:62:9a:9b:87:48:
92:06:48:b9:d2:3f:af:85:e6:98:56:4f:e6:4f:f6:6c:8a:a5:
35:eb:c3:5e:02:89:bf:02:9a:d5:d4:4d:f4:1a:95:17:f6:93:
ae:72:9a:b4:38:40:10:26:e8:75:25:f4:f3:65:65:be:12:ce:
79:6e:c8:c8:d5:2b:61:f0:35:dd:99:e2:41:65:a7:05:bf:1c:
3e:12:79:90:50:2f:58:7c:e5:b0:6d:23:9d:f9:e6:ce:ed:77:
48:4e:56:49:46:25:a6:1a:d4:61:14:19:3b:3d:50:15:11:54:
95:d4:27:ea:17:b6:3b:ff:45:29:82:fd:ec:94:dd:5c:f0:a5:
52:a7:ce:8b:5b:a2:24:61:03:72:a6:e9:e1:82:99:dd:07:39:
11:99:e7:3d:58:24:6b:fe:cf:3c:65:a3:0d:8e:2b:61:13:a0:
80:b4:c8:6e:a8:5f:76:f3:47:44:33:2b:33:2f:05:90:36:33:
1d:77:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:14 2026 by rpki-client