Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: mRFgAtC8bWCxYXp55eaHoh62F24LWQ7GvdEbFU1tN5U=
Subject key identifier: 37:02:3A:27:4A:CC:1E:6D:CB:FD:14:0A:F6:53:32:96:96:EA:B8:9C
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019D27DF89EA4E381E0D0C809E6E770E0459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 07D1
Signing time: Thu 26 Mar 2026 02:00:54 +0000
Manifest this update: Thu 26 Mar 2026 02:00:54 +0000
Manifest next update: Fri 27 Mar 2026 02:00:54 +0000
Files and hashes: 1: IcfmTS0CP6rB67CQkMANE7ZvrBE.asa (hash: qUGWiJdx4nnSTLe0cuj2ysRzudqP0tr7YNfjwXyCMjs=)
2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: c0Ck3eDxKzKDXV5CUQsJX2yiKmLtoa3IJ0L9eujpg5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:89:ea:4e:38:1e:0d:0c:80:9e:6e:77:0e:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Mar 26 02:00:54 2026 GMT
Not After : Mar 27 02:00:54 2026 GMT
Subject: CN=37023a274acc1e6dcbfd140af653329696eab89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:96:80:b6:ff:9a:db:ec:09:a7:b0:fd:9d:
d7:5c:0b:54:6b:04:69:33:28:3c:e4:92:4b:84:2f:
f6:38:44:16:7a:6d:ef:42:e0:57:a9:32:8a:c5:39:
da:df:1a:0b:17:70:ed:2d:1b:47:e4:28:eb:98:64:
d3:a7:9a:9e:2c:d2:c1:7a:3a:d6:e4:b0:02:12:21:
bc:bf:04:9e:33:12:9a:4d:76:c2:7e:6e:fb:6c:e0:
68:ef:b3:cf:14:fe:8d:c5:70:71:a9:5f:d0:0f:c4:
d3:1a:5e:91:7b:21:c5:2e:9d:a3:42:cb:de:8d:14:
bc:7c:17:f2:dd:f5:92:32:73:a3:06:c4:a4:27:ad:
c3:f0:8b:e9:c1:4a:a8:de:d0:fc:9f:50:d0:f0:78:
81:5c:42:17:cf:2d:00:ad:3e:d2:bc:c1:db:48:7d:
0b:8d:b2:64:34:e0:6d:c9:b1:6b:53:22:42:72:20:
c9:8c:a3:07:72:b4:6a:79:cf:ee:9c:39:bd:66:1c:
13:22:a6:2a:ee:ac:89:9e:7a:86:6c:9f:6a:5a:46:
27:dc:b9:a2:3f:cf:b4:b4:f9:4d:8f:76:1f:5c:3d:
9d:6a:19:2a:a5:f4:5a:26:5b:c6:eb:48:6e:6e:7b:
8b:42:f9:50:62:bb:11:34:95:f2:27:36:07:4d:8c:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:3A:27:4A:CC:1E:6D:CB:FD:14:0A:F6:53:32:96:96:EA:B8:9C
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:14:63:18:7b:b9:0a:de:77:4b:b6:70:bb:9d:4c:a2:6a:8d:
bf:9d:e1:56:ad:a5:27:9a:4c:f1:ec:09:90:d2:e0:a9:a4:78:
2c:ee:d6:4a:99:ae:41:01:20:50:54:d9:52:af:47:2a:d3:b3:
dc:9c:94:57:3e:c7:1f:c0:f8:ab:07:8e:13:c0:b7:e1:43:89:
bb:ba:c1:22:c2:05:f8:a1:fe:c7:f7:34:a8:95:0f:f3:e4:2a:
9a:3b:e4:36:50:e7:8e:39:86:19:a4:27:c9:4d:47:b3:dc:9d:
fc:36:69:51:4a:1d:72:0f:23:70:e7:e4:af:d9:22:9c:fd:57:
0b:d6:fe:04:23:99:86:fa:7e:ca:45:32:30:5e:21:45:d9:53:
bf:87:8e:61:df:6c:6c:5b:67:d2:80:e0:5b:e8:d7:a0:9d:bd:
10:7f:94:ae:cd:50:ea:1f:67:2e:91:db:14:53:95:cf:75:bc:
88:3f:0e:ca:91:61:0d:4b:15:42:a3:e0:15:25:bc:3b:75:9a:
e5:d0:df:23:d2:bc:e4:b7:84:a8:3c:1f:d9:5e:db:d2:1d:1b:
8c:77:ce:cc:a2:47:3b:0a:80:4f:0c:53:95:39:a6:20:79:66:
f9:bc:d1:d9:43:4a:60:28:13:47:33:80:43:df:ec:d6:a8:47:
8a:97:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:33 2026 by rpki-client