Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: yWYJCemX1ThR09F5rukBkPzkDtjzGY1BaICYsyxEqNY=
Subject key identifier: F3:20:CC:44:A6:2E:DF:AF:60:3B:44:3A:DA:E8:BE:31:0C:A7:73:22
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019D29292493320FBF90588E26AFDA053DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 143A
Signing time: Thu 26 Mar 2026 08:00:55 +0000
Manifest this update: Thu 26 Mar 2026 08:00:55 +0000
Manifest next update: Fri 27 Mar 2026 08:00:55 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: sZEUuisAA2N01vz46GaK3lgGBrrfeEAmQJkRPL3S1gI=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:24:93:32:0f:bf:90:58:8e:26:af:da:05:3d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Mar 26 08:00:55 2026 GMT
Not After : Mar 27 08:00:55 2026 GMT
Subject: CN=f320cc44a62edfaf603b443adae8be310ca77322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:f2:16:a8:c5:fb:7f:e8:fc:20:84:8c:27:
42:cc:dd:5b:77:f4:e0:f5:fd:6d:c4:b3:e6:63:e8:
e5:c1:29:da:b7:bd:77:9d:69:8e:24:b9:2a:2a:83:
08:0c:c5:26:1e:45:a8:fb:19:14:b7:c9:85:38:40:
c1:86:79:6d:b0:9d:a8:48:b6:d9:c8:5e:0b:8c:a4:
5d:b0:cb:75:a7:bc:3b:88:30:a2:5c:0b:33:38:d7:
b7:52:1d:c7:05:22:a0:cb:70:6f:f4:62:d1:24:8c:
c0:db:3f:f4:3a:dc:74:21:c1:b1:88:c5:83:21:58:
99:6c:81:fc:5d:13:cc:69:9b:19:a4:9e:4a:23:ec:
c6:a4:d2:e7:86:b3:35:6e:4e:6f:2d:03:8f:92:be:
89:11:6b:1c:e4:99:50:68:28:7b:bf:db:5e:88:08:
06:a1:51:6b:c1:0a:9d:db:08:6f:70:3c:2b:79:ce:
71:0e:30:59:2a:38:67:45:37:76:27:c0:5b:3a:d8:
bc:f1:b2:c1:29:d5:53:d1:8c:b9:30:1d:7a:b4:a5:
fd:43:b2:1e:91:fc:66:c5:42:f2:ab:8a:33:23:15:
44:a4:6c:8c:b3:f3:68:8f:8e:a6:3f:b1:f0:d0:6a:
0c:13:ee:cc:80:a7:ba:93:7f:ff:ab:87:de:ee:db:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:CC:44:A6:2E:DF:AF:60:3B:44:3A:DA:E8:BE:31:0C:A7:73:22
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:8e:f7:d0:16:21:77:7d:b4:73:05:21:8a:ae:37:fe:07:
1c:2b:7d:fd:b8:49:5b:74:cf:a6:e7:af:cb:2c:35:85:8f:6b:
e2:f9:8d:2c:3c:ba:a5:9f:f5:a5:8f:35:71:ec:48:73:90:a5:
34:e6:ee:3c:da:f3:48:8f:db:39:d6:a1:0d:bf:10:5b:50:6a:
58:e0:57:0d:cd:c6:c7:e3:d8:70:47:b1:b0:fe:eb:de:58:cd:
0b:de:d9:5b:91:2a:b5:27:8f:57:8e:4f:0d:ca:93:b8:a4:d5:
e1:4c:d5:91:d4:90:fd:83:25:e4:e2:17:15:4b:2b:7f:d5:c1:
02:45:c4:2a:94:2a:1d:fa:51:fe:0b:4f:32:e9:a1:92:1b:5f:
b7:35:78:89:0b:c2:ed:f2:de:d5:9e:c9:be:95:9d:58:a1:27:
d0:42:af:0e:77:61:8e:28:1f:b0:cb:b0:7c:13:94:99:4e:af:
f8:15:13:6b:d5:31:82:e7:1f:93:90:84:6f:50:8c:8a:b9:63:
a1:7a:9c:35:36:34:43:9d:6d:4f:3d:54:e5:f5:63:66:a5:68:
dc:9d:30:61:a0:d2:f3:6c:60:d9:51:cd:fe:a4:57:21:38:f3:
e5:0a:c3:52:55:53:13:b7:63:4e:c0:00:60:33:18:6f:56:55:
0f:a9:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:37:10 2026 by rpki-client