Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: 6omdmvmmIUTwFsYtRSulQUCSyibC+okMjzHsYTmUEbA=
Subject key identifier: 3C:59:53:6B:C8:56:A3:54:34:AD:6C:CF:96:A1:F7:25:85:FB:89:5A
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019D2771FD8D1C19605D11AE06457AF988A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 09F9
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: Uo2j4AToe+cGoOEuAc9wOADqJTWTZxqUYeIY/8mWGBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fd:8d:1c:19:60:5d:11:ae:06:45:7a:f9:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=3c59536bc856a35434ad6ccf96a1f72585fb895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:13:d5:a7:92:97:03:54:cd:d8:b5:ca:a3:
e9:19:82:ed:2c:14:e4:f8:6d:02:3e:bc:58:08:bc:
10:61:41:43:93:07:19:44:b3:0a:37:78:fb:cc:fc:
16:9b:c5:53:05:c1:2e:3f:c5:17:22:79:83:5b:f6:
2c:b9:99:b5:d1:8d:11:e0:9e:70:9a:68:ea:4e:53:
5b:f1:04:46:b4:57:b7:86:0e:f6:86:10:83:1f:8f:
9f:02:94:5e:9c:34:2a:ac:22:c8:b0:ce:13:99:0f:
49:ad:d7:2f:b1:22:59:74:83:b0:9b:37:ad:b6:38:
6f:6b:9d:53:f3:06:18:bc:25:c9:a0:08:b6:05:6b:
a1:73:78:b7:60:d8:b3:df:2b:0b:f3:d5:7e:a7:d2:
29:2d:ac:6d:28:c3:dc:e5:85:7f:35:7b:33:1a:a6:
35:78:fe:4b:71:53:20:a6:fc:3f:0b:39:0d:be:c8:
37:5b:bb:21:32:b4:37:07:fe:e0:36:4c:09:5d:1d:
da:0b:fe:0e:76:7e:ff:1e:21:68:28:fe:9b:fa:3e:
b7:8b:0c:e4:41:cb:9d:2a:f3:a8:a1:ab:cd:cb:20:
4e:a6:72:8f:80:e1:61:e9:d7:b7:db:8e:b9:04:5b:
12:ab:40:51:17:d5:2f:3c:8a:f7:29:4f:be:dd:5d:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:53:6B:C8:56:A3:54:34:AD:6C:CF:96:A1:F7:25:85:FB:89:5A
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8a:64:40:90:eb:b3:bd:c1:fc:b0:1b:58:c1:97:c8:45:ae:
9f:db:30:bd:b5:7f:90:59:a7:fd:c5:ed:6e:87:67:57:e5:36:
9f:ff:b1:cd:a3:fa:a8:e0:6b:bd:28:14:71:c7:36:3e:6a:73:
28:10:52:6e:0d:24:f9:57:98:69:4e:2a:5f:40:6a:7d:7e:00:
20:f7:6b:28:20:eb:b2:58:e6:52:be:f5:2b:b5:4b:c3:16:03:
6f:54:8d:23:68:06:eb:46:6d:c3:27:69:f7:00:da:a4:7b:3b:
e6:7f:e6:a0:06:48:f6:6e:11:a0:78:be:5f:ef:2d:c6:62:74:
b9:76:72:0b:72:cf:2d:42:2f:0e:d5:37:dc:d7:a6:6a:31:fc:
ab:80:b3:ea:0d:c9:04:51:8b:b9:3a:64:13:f3:64:a8:58:91:
1d:f5:87:bd:fb:56:0c:94:ef:47:c8:76:be:81:31:fe:3c:0c:
53:26:8a:03:e9:15:fc:a0:57:25:7e:fa:57:2f:55:38:3b:b4:
1c:6c:98:0c:40:3c:5c:81:f5:d0:7b:ed:07:1b:21:4e:76:ae:
c3:aa:e3:26:32:89:34:c1:39:14:81:cb:89:0d:00:90:45:2e:
f4:55:c6:43:b4:fe:9e:04:ff:70:74:b3:17:a0:07:ba:9f:34:
bd:e1:cb:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncf2NHBlgXRGuBkV6+YikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2
NDQ2OWEwHhcNMjYwMzI2MDAwMTE1WhcNMjYwMzI3MDAwMTE1WjAzMTEwLwYDVQQD
EygzYzU5NTM2YmM4NTZhMzU0MzRhZDZjY2Y5NmExZjcyNTg1ZmI4OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte4T1aeSlwNUzdi1yqPpGYLtLBTk
+G0CPrxYCLwQYUFDkwcZRLMKN3j7zPwWm8VTBcEuP8UXInmDW/YsuZm10Y0R4J5w
mmjqTlNb8QRGtFe3hg72hhCDH4+fApRenDQqrCLIsM4TmQ9JrdcvsSJZdIOwmzet
tjhva51T8wYYvCXJoAi2BWuhc3i3YNiz3ysL89V+p9IpLaxtKMPc5YV/NXszGqY1
eP5LcVMgpvw/CzkNvsg3W7shMrQ3B/7gNkwJXR3aC/4Odn7/HiFoKP6b+j63iwzk
QcudKvOooavNyyBOpnKPgOFh6de32465BFsSq0BRF9UvPIr3KU++3V2XiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxZU2vIVqNUNK1sz5ah9yWF+4laMB8GA1UdIwQY
MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt
NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi
LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYpkQJDr
s73B/LAbWMGXyEWun9swvbV/kFmn/cXtbodnV+U2n/+xzaP6qOBrvSgUccc2Pmpz
KBBSbg0k+VeYaU4qX0BqfX4AIPdrKCDrsljmUr71K7VLwxYDb1SNI2gG60Ztwydp
9wDapHs75n/moAZI9m4RoHi+X+8txmJ0uXZyC3LPLUIvDtU33NemajH8q4Cz6g3J
BFGLuTpkE/NkqFiRHfWHvftWDJTvR8h2voEx/jwMUyaKA+kV/KBXJX76Vy9VODu0
HGyYDEA8XIH10HvtBxshTnauw6rjJjKJNME5FIHLiQ0AkEUu9FXGQ7T+ngT/cHSz
F6AHup80veHLuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:50:45 2026 by rpki-client