Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: WuRzEgpjOmwxK0AaEKrJmVKWvT6WSZ1tcaZuvUYPCKw=
Subject key identifier: 44:80:66:11:67:B2:7A:8E:94:AB:98:7B:60:E1:8D:79:AA:32:83:67
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019F9323CB1E7E2C271345BFDE050452723D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 157B
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa (hash: ol20StyEmJtz4MmrTLsX4vBN9oBlWbLnJQFdG9RqacU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: z8Qob32c6SHT5bbmUBXnOxI0EU7ZLPHlBxbXd2lJYSU=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cb:1e:7e:2c:27:13:45:bf:de:05:04:52:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=4480661167b27a8e94ab987b60e18d79aa328367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:0f:a8:38:db:de:c7:ba:6d:3f:e1:a7:7c:
a8:3a:b2:44:1e:22:0b:64:f6:bd:c8:eb:2d:cc:51:
57:b9:1d:09:a5:df:5b:f0:c8:58:58:db:f9:02:77:
c6:49:e3:65:ea:55:fc:44:4c:20:20:db:2e:65:50:
42:19:45:49:54:e4:17:a9:4e:f0:db:e5:85:2a:65:
77:6f:15:bb:7e:8b:23:84:e2:43:c8:e4:18:52:54:
5b:ff:cc:40:2d:01:a4:73:b3:24:f9:7b:7c:d4:3d:
5b:6c:9b:ab:75:41:85:a2:19:55:6e:35:17:6a:da:
f8:ba:af:f0:33:26:b5:5c:d8:0e:74:3e:2f:54:f1:
da:26:dd:c9:89:06:07:b1:d9:82:db:d9:3e:af:11:
5c:8d:71:c5:1a:2f:67:2a:45:99:02:10:0d:fc:12:
dd:4e:65:40:72:a2:4f:3a:09:22:d3:c2:79:f8:76:
31:1e:72:77:c7:e0:be:34:ca:ad:ec:b8:e4:9f:a8:
54:c0:e1:09:2a:82:11:0a:42:aa:f6:51:d0:48:04:
2b:19:9f:f7:17:c8:92:ac:7b:66:a0:1f:a9:01:f8:
95:35:f7:b4:9e:78:2e:0a:e1:c7:41:5f:b9:13:32:
6b:ad:4c:5a:89:0e:c4:25:40:17:09:ee:5d:1a:db:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:66:11:67:B2:7A:8E:94:AB:98:7B:60:E1:8D:79:AA:32:83:67
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:67:30:62:e2:34:82:05:2d:7c:b0:7d:2c:15:77:23:1f:
7c:51:aa:dd:2e:55:8e:1b:08:f3:48:fb:90:82:8f:ed:38:2a:
d1:d3:8f:e9:5b:84:50:40:a1:7e:3f:a6:8a:3a:e7:13:29:99:
2a:ce:09:28:8a:3c:c0:09:63:bf:7c:73:0e:07:cc:a9:fb:03:
11:32:8f:26:b0:bc:bd:43:fc:37:03:93:9b:c8:c5:38:df:6b:
c4:17:23:99:1c:6e:e9:68:02:cc:a7:35:62:36:00:10:03:5c:
33:eb:94:e7:1d:14:9d:91:57:2f:f0:c0:69:b9:51:ad:55:85:
f3:c2:87:53:99:36:50:95:1c:f9:59:c9:2f:d7:8f:3f:a8:83:
20:1f:e7:52:86:1b:d6:8f:03:d5:db:bc:2c:7c:73:34:69:04:
80:ed:c3:d6:ca:92:6b:98:f0:27:9e:07:50:d5:f0:1c:ab:bc:
96:ec:4b:00:20:7a:1b:e9:98:f2:dc:66:4f:db:c2:32:45:09:
bc:d0:55:59:46:e1:99:46:41:66:98:41:41:96:fa:d5:fa:79:
9e:33:14:cc:ae:c2:fd:d7:66:a6:cc:8a:38:6c:c0:8f:23:db:
5a:85:fb:0c:f0:ea:b8:2e:84:99:c6:38:ae:64:e2:8e:73:9b:
6b:e8:ab:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI8sefiwnE0W/3gUEUnI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjYwNzI0MDgwMDI0WhcNMjYwNzI1MDgwMDI0WjAzMTEwLwYDVQQD
Eyg0NDgwNjYxMTY3YjI3YThlOTRhYjk4N2I2MGUxOGQ3OWFhMzI4MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKkPqDjb3se6bT/hp3yoOrJEHiIL
ZPa9yOstzFFXuR0Jpd9b8MhYWNv5AnfGSeNl6lX8REwgINsuZVBCGUVJVOQXqU7w
2+WFKmV3bxW7fosjhOJDyOQYUlRb/8xALQGkc7Mk+Xt81D1bbJurdUGFohlVbjUX
atr4uq/wMya1XNgOdD4vVPHaJt3JiQYHsdmC29k+rxFcjXHFGi9nKkWZAhAN/BLd
TmVAcqJPOgki08J5+HYxHnJ3x+C+NMqt7Ljkn6hUwOEJKoIRCkKq9lHQSAQrGZ/3
F8iSrHtmoB+pAfiVNfe0nnguCuHHQV+5EzJrrUxaiQ7EJUAXCe5dGtunhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESAZhFnsnqOlKuYe2DhjXmqMoNnMB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6BnMGLi
NIIFLXywfSwVdyMffFGq3S5VjhsI80j7kIKP7Tgq0dOP6VuEUEChfj+mijrnEymZ
Ks4JKIo8wAljv3xzDgfMqfsDETKPJrC8vUP8NwOTm8jFON9rxBcjmRxu6WgCzKc1
YjYAEANcM+uU5x0UnZFXL/DAablRrVWF88KHU5k2UJUc+VnJL9ePP6iDIB/nUoYb
1o8D1du8LHxzNGkEgO3D1sqSa5jwJ54HUNXwHKu8luxLACB6G+mY8txmT9vCMkUJ
vNBVWUbhmUZBZphBQZb61fp5njMUzK7C/ddmpsyKOGzAjyPbWoX7DPDquC6EmcY4
rmTijnOba+ir7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:25:46 2026 by rpki-client