Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: y+8SNDQYZtdvGLjE9ybUjv7j/VAOP6zBW//lF9lC8E0=
Subject key identifier: DF:68:1E:71:9F:C6:6E:47:5D:99:41:9D:A8:51:F9:7F:7C:89:C9:D8
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019E2024495FA9B9FE8DB552870E5F9806A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0563
Signing time: Wed 13 May 2026 07:01:49 +0000
Manifest this update: Wed 13 May 2026 07:01:49 +0000
Manifest next update: Thu 14 May 2026 07:01:49 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: +BJw7EMkMWRxI9olGi9NWgDzaiPtriff0uUUxTOBe4U=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:49:5f:a9:b9:fe:8d:b5:52:87:0e:5f:98:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: May 13 07:01:49 2026 GMT
Not After : May 14 07:01:49 2026 GMT
Subject: CN=df681e719fc66e475d99419da851f97f7c89c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:bc:b8:02:6c:81:6d:8a:0c:bf:1d:22:83:
29:64:7f:e7:4a:f9:d7:15:38:3b:7b:5c:aa:6b:87:
c6:4c:ec:c7:ac:c9:66:d1:c9:32:6b:a0:47:96:3b:
29:fd:82:8c:1c:6d:e0:62:bc:a5:4c:6e:fb:be:af:
ce:0a:8d:fe:e4:d0:35:c6:7e:3d:0b:af:d7:f2:68:
ac:9b:46:ab:c0:ef:b5:44:c7:5c:8d:04:f9:56:50:
c7:a7:72:8b:d1:02:e8:e1:b5:f5:a0:ca:43:8d:65:
4b:69:75:30:0a:02:9d:9c:04:2d:d9:e3:77:d6:e7:
54:a0:1a:76:c4:76:04:2f:db:6e:77:71:67:83:32:
b4:35:b1:29:1e:e9:7c:7d:aa:0f:06:41:c4:ab:7d:
3c:26:ad:6e:99:64:64:47:40:d1:2a:4b:c7:5b:45:
e4:5b:f2:0c:de:5f:7b:0c:9a:e5:b0:34:31:50:00:
99:5e:84:05:6e:85:ad:d4:37:6a:40:e6:35:b3:aa:
2b:97:51:b6:4f:e1:77:03:e1:1e:09:f1:23:83:8e:
4c:ac:b4:24:ce:c5:07:7f:f4:8e:c8:a2:0b:77:5e:
04:87:5e:0d:3e:ef:fd:0f:a0:fb:89:0f:50:7f:9b:
79:c5:f0:ef:d9:17:8f:1d:96:69:66:64:0f:eb:35:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:1E:71:9F:C6:6E:47:5D:99:41:9D:A8:51:F9:7F:7C:89:C9:D8
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:7f:49:8a:c1:84:5d:0b:f8:bf:1c:61:54:e9:bb:2f:ed:
a6:37:aa:77:15:a9:02:e7:3c:93:94:02:fc:6e:fa:2a:d7:ec:
62:82:08:16:20:63:61:5c:7d:59:3c:ab:55:6b:71:ef:9c:36:
25:10:27:c4:ba:fe:85:0f:3b:a0:bc:60:37:1e:f4:54:df:77:
e1:30:9c:f9:27:e4:50:f2:9d:bd:80:b7:3c:d7:67:c8:7b:3b:
a4:77:71:17:31:86:e0:ea:81:75:63:85:a4:da:03:cc:f1:7c:
54:8c:4a:56:d4:7e:2a:56:a1:7b:50:84:98:83:d6:e2:1a:6a:
00:b5:13:c1:da:e1:89:d8:df:e3:89:a5:44:73:c4:3e:8a:8c:
33:ce:6f:9e:db:3e:76:24:e8:d1:ba:a2:fe:c0:21:00:b7:9d:
43:f2:a2:ef:46:3f:41:fa:80:3a:83:8f:32:25:74:62:03:fa:
5b:20:d4:34:78:41:57:3b:46:69:db:36:5b:88:7e:03:94:d2:
9b:11:1d:6f:86:d4:69:2c:7f:3b:c7:5c:50:f3:12:3c:61:32:
38:49:61:ce:2b:4a:7b:20:2b:19:2f:1d:b7:7c:90:32:f9:e1:
9e:f6:5a:0a:c9:66:2a:69:2b:35:43:29:47:e5:91:8d:07:6d:
71:ab:ad:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJElfqbn+jbVShw5fmAanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3
NDZhN2IwHhcNMjYwNTEzMDcwMTQ5WhcNMjYwNTE0MDcwMTQ5WjAzMTEwLwYDVQQD
EyhkZjY4MWU3MTlmYzY2ZTQ3NWQ5OTQxOWRhODUxZjk3ZjdjODljOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOu8uAJsgW2KDL8dIoMpZH/nSvnX
FTg7e1yqa4fGTOzHrMlm0ckya6BHljsp/YKMHG3gYrylTG77vq/OCo3+5NA1xn49
C6/X8mism0arwO+1RMdcjQT5VlDHp3KL0QLo4bX1oMpDjWVLaXUwCgKdnAQt2eN3
1udUoBp2xHYEL9tud3FngzK0NbEpHul8faoPBkHEq308Jq1umWRkR0DRKkvHW0Xk
W/IM3l97DJrlsDQxUACZXoQFboWt1DdqQOY1s6orl1G2T+F3A+EeCfEjg45MrLQk
zsUHf/SOyKILd14Eh14NPu/9D6D7iQ9Qf5t5xfDv2RePHZZpZmQP6zUgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9oHnGfxm5HXZlBnahR+X98icnYMB8GA1UdIwQY
MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt
M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz
LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO35/SYrB
hF0L+L8cYVTpuy/tpjeqdxWpAuc8k5QC/G76KtfsYoIIFiBjYVx9WTyrVWtx75w2
JRAnxLr+hQ87oLxgNx70VN934TCc+SfkUPKdvYC3PNdnyHs7pHdxFzGG4OqBdWOF
pNoDzPF8VIxKVtR+Klahe1CEmIPW4hpqALUTwdrhidjf44mlRHPEPoqMM85vnts+
diTo0bqi/sAhALedQ/Ki70Y/QfqAOoOPMiV0YgP6WyDUNHhBVztGads2W4h+A5TS
mxEdb4bUaSx/O8dcUPMSPGEyOElhzitKeyArGS8dt3yQMvnhnvZaCslmKmkrNUMp
R+WRjQdtcautOA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:45:51 2026 by rpki-client