Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: pYbw4A8mjuCY3JZiYicBRlf7QVoVMTcLAPDig5TxZfE=
Subject key identifier: 73:CD:BA:EA:B5:89:4D:B1:39:AB:AD:41:37:06:98:B1:35:58:1B:0A
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019E205A275E2E5434129DA0DEB708779429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 14BA
Signing time: Wed 13 May 2026 08:00:39 +0000
Manifest this update: Wed 13 May 2026 08:00:39 +0000
Manifest next update: Thu 14 May 2026 08:00:39 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: nWa2nwviTQo8IPv0lTh+P1gb/Jn1nu/ziARKcrw/j0k=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:27:5e:2e:54:34:12:9d:a0:de:b7:08:77:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: May 13 08:00:39 2026 GMT
Not After : May 14 08:00:39 2026 GMT
Subject: CN=73cdbaeab5894db139abad41370698b135581b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:2c:45:47:e4:f2:de:14:96:27:6f:1b:9c:
60:b4:03:ef:44:3b:ce:97:6b:a6:1c:e5:91:32:f0:
c0:43:27:e7:28:b4:77:fb:7f:bd:98:3f:6b:49:c1:
b6:69:cb:71:92:0e:59:4b:a4:90:3c:a1:13:d0:ca:
85:98:20:71:50:1f:53:dd:d6:ee:ad:8f:b7:25:6d:
96:60:a3:78:ce:05:38:4d:79:4b:ae:ca:6e:c4:eb:
ef:dc:e1:97:10:7f:a0:30:ef:32:c8:47:c0:fd:f0:
6b:ec:84:98:d6:78:03:57:ac:4f:fc:9e:b3:42:97:
39:ba:26:86:8c:a8:e8:0d:50:08:94:06:b7:7f:34:
43:7a:5b:da:f1:84:06:9d:77:fb:3a:83:0d:9f:49:
e8:36:95:d2:ea:dd:53:a7:86:4c:a7:9e:18:d3:5e:
26:31:d2:2d:f1:52:67:fc:de:83:18:fa:b1:53:fa:
ab:b5:44:af:f1:b5:d3:ce:ad:49:dc:2c:f0:83:f8:
b7:c8:4e:dd:ae:4f:c2:1f:45:49:bd:0d:e3:0c:0a:
f7:c7:37:60:ed:4f:24:1a:d3:6e:f3:b8:80:6a:6f:
0f:a8:42:40:80:6d:60:1c:2e:b6:11:e1:ee:cb:5d:
19:0a:af:45:5d:1f:e3:da:db:b3:e5:1d:78:83:d3:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:BA:EA:B5:89:4D:B1:39:AB:AD:41:37:06:98:B1:35:58:1B:0A
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:57:40:3b:f4:ea:4a:4c:9a:a0:7d:05:29:cf:27:9c:fc:43:
90:11:de:4f:22:56:48:4c:10:8f:29:e4:6f:75:24:69:da:ff:
9a:b6:8b:40:d6:46:60:1a:e6:44:56:81:ad:3e:b4:06:15:6b:
39:ea:2c:5e:0b:41:d6:cc:5c:33:a4:b7:6a:fa:5f:75:78:43:
cb:5a:8d:44:59:5a:9f:4b:2a:b6:3b:6e:71:36:f6:49:e7:5c:
a7:aa:0e:4e:c4:94:b2:c1:a4:69:d6:bf:c4:e6:5c:92:45:b4:
6b:ba:83:a0:b4:d1:45:70:f3:26:c9:d6:c4:02:00:11:07:79:
f7:90:be:0c:d4:94:85:2c:c5:66:79:66:32:ce:c2:6d:7d:ee:
1f:06:1b:ff:c4:05:f5:0d:da:2c:8f:30:aa:df:84:ca:56:15:
88:19:f9:b7:58:aa:c2:f4:fc:66:2f:17:11:e6:f2:79:b1:67:
c0:1b:ef:f4:97:60:a8:d3:f7:d5:4f:eb:a1:ce:82:5f:dc:ee:
3a:9e:ff:a6:31:f9:aa:c9:be:d9:98:b1:7e:d0:f7:6a:29:9a:
fc:7e:0c:aa:3a:59:1d:bd:bb:ba:a0:0a:c0:d0:37:17:45:c9:
ba:0f:dc:9c:db:f0:b3:21:07:64:a2:43:1d:22:5c:cb:7d:c5:
f5:19:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:13:07 2026 by rpki-client