Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: YHyu8Uflkyo1xedhQEbLev2pqUSYp3lovzGC53DFuik=
Subject key identifier: 21:99:70:23:DB:0C:C8:B7:7D:83:A5:72:21:10:45:CB:0B:45:DF:A2
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019F94DC3DCE6D30F06B91B5682E539325BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0624
Signing time: Fri 24 Jul 2026 16:01:29 +0000
Manifest this update: Fri 24 Jul 2026 16:01:29 +0000
Manifest next update: Sat 25 Jul 2026 16:01:29 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: 7ZHYrESlenl9BpZMU7L/HC0vIdymOFECH1qn7CLJZno=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:3d:ce:6d:30:f0:6b:91:b5:68:2e:53:93:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Jul 24 16:01:29 2026 GMT
Not After : Jul 25 16:01:29 2026 GMT
Subject: CN=21997023db0cc8b77d83a572211045cb0b45dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:07:17:78:4d:7b:7a:7f:00:a6:39:ef:1a:
25:db:90:84:c6:ad:ca:48:86:0f:eb:7e:f4:b2:3f:
4b:cb:01:c7:3f:b3:7e:ba:ef:46:84:d5:24:8a:3d:
91:87:3d:ae:58:a3:22:f1:19:57:a1:77:e8:25:97:
22:85:91:1b:17:51:d3:d2:59:40:cc:96:db:0f:87:
35:f7:82:48:a1:68:2b:03:96:2a:ce:1f:93:48:30:
bc:9f:7b:e5:2f:22:71:39:0e:90:2d:48:7d:81:bb:
aa:63:11:bf:b6:b9:be:b7:68:e5:a9:cb:a6:2e:79:
e2:1d:bf:3c:55:3a:11:8f:de:c4:f3:d2:eb:24:4d:
a9:14:c3:a0:3b:48:22:a3:65:5a:45:1e:41:34:c6:
ee:8b:2a:de:0a:97:fb:f9:a8:fb:d7:21:2c:c6:1e:
f3:f8:a8:93:f8:92:15:bc:17:cc:84:70:47:48:f8:
05:30:d9:56:f4:a0:35:b6:24:c8:62:74:f9:99:2b:
9f:b3:e6:e5:72:19:df:fc:52:7f:e6:db:f4:b9:50:
2d:d6:89:5c:cf:48:88:f1:be:4f:e7:5b:68:e2:0f:
45:80:d1:ce:26:f6:80:56:b1:00:e9:9a:9f:f9:e1:
32:eb:87:33:9e:2c:26:a1:7e:22:16:7d:b9:63:ef:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:70:23:DB:0C:C8:B7:7D:83:A5:72:21:10:45:CB:0B:45:DF:A2
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d5:79:e8:62:46:c3:32:aa:89:38:59:3c:68:c9:c0:06:73:
e5:46:6b:c8:8f:4d:1c:99:bd:b5:4c:b3:d8:f5:ca:7b:e0:0a:
ad:30:88:c4:98:a3:84:ed:40:da:00:6e:d5:81:1d:47:f4:44:
4d:c9:c5:0b:63:15:7d:d7:b9:a1:5f:de:5e:de:4a:ba:33:f0:
c0:8b:44:f5:ac:1b:91:c6:5d:15:9c:9b:f5:9f:b0:19:65:bf:
1c:53:b1:ec:85:29:71:90:79:49:c8:b2:3f:68:70:b3:4c:ea:
20:fc:71:e5:1f:d9:a9:fe:36:b8:25:53:17:81:28:31:16:51:
34:ba:11:27:9d:ae:33:f0:b5:7c:1a:a3:88:b1:f7:63:89:9a:
dd:e4:39:8e:72:40:cd:81:93:a8:00:15:63:3c:11:32:6e:89:
3b:a0:de:60:86:86:be:28:86:8d:20:3f:94:aa:79:4d:f2:01:
e3:3d:8a:d7:ac:e1:6a:08:7c:59:84:4f:55:36:89:7f:a2:73:
59:32:5b:73:68:4f:21:03:13:3c:2a:8d:c1:47:d5:20:57:fa:
66:39:2f:4a:5a:bc:b6:26:f3:17:37:59:46:84:e8:37:29:17:
b9:ba:e0:02:ce:42:61:6c:e8:1c:d4:01:7e:08:b4:3c:d6:0e:
c9:1b:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:20 2026 by rpki-client