Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: gna9HjiBa4ANGxVzUveiI2kLeYEkYh0O0lS33+3dOHA=
Subject key identifier: 5F:53:DD:40:F9:CB:5E:4B:28:17:07:F6:DA:1E:B3:7B:BA:11:31:31
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 01A15440C154CDF72EEDC90F467343AE9768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 09FC
Signing time: Mon 19 Oct 2026 13:01:32 +0000
Manifest this update: Mon 19 Oct 2026 13:01:32 +0000
Manifest next update: Tue 20 Oct 2026 13:01:32 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: lJnoCq1m1wzqLcke1M58kSgxonlaZ+fbKl/k+1l4EOU=)
2: YKcDKEWIMlg76GTNhpBhJgfgseg.asa (hash: QXQfDgm1NSd802AZFlLWGYSREWy9tsWnBFqvrA0d4ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:c1:54:cd:f7:2e:ed:c9:0f:46:73:43:ae:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Oct 19 13:01:32 2026 GMT
Not After : Oct 20 13:01:32 2026 GMT
Subject: CN=5f53dd40f9cb5e4b281707f6da1eb37bba113131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:41:70:d5:44:87:ca:6a:23:da:f6:a4:d5:
01:00:47:ce:e2:d5:2d:be:e8:99:1a:14:ca:ad:cd:
0b:4e:35:7c:09:3d:90:2d:ac:7e:52:77:30:67:ba:
b8:7a:22:d7:48:c6:a0:40:2f:62:9b:2e:82:4c:4e:
53:1d:bb:77:af:d2:19:5d:6b:3b:bc:7d:10:2b:ec:
34:3d:8c:a0:8f:f3:47:19:ea:f6:8d:87:e4:ae:b4:
44:9a:59:98:a0:5d:ea:c1:0b:ca:cd:71:99:06:6b:
6e:90:78:04:da:f7:82:47:b2:35:a9:f3:01:d1:0d:
ed:4c:ed:3c:b3:d5:fc:ec:18:37:58:60:ff:34:8b:
15:b0:07:5e:f9:e4:d3:0f:d5:26:58:6a:60:11:64:
4d:34:c1:30:a4:47:b8:5e:77:64:ce:10:e5:8a:1e:
1d:20:f4:3e:1f:0c:c0:d6:fe:82:0a:94:7b:84:8a:
b8:68:5a:96:9e:93:26:b3:b7:12:15:eb:ce:97:0d:
17:0b:a6:09:2a:e1:5c:e9:4d:7b:0d:10:07:5c:42:
e4:7a:dd:8d:95:63:8e:44:02:81:98:4f:df:d5:44:
e4:c6:99:d1:a8:9a:3f:3c:be:48:f9:e1:33:0a:81:
e4:68:a1:0f:03:0c:90:59:c1:df:df:e8:04:af:5d:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:DD:40:F9:CB:5E:4B:28:17:07:F6:DA:1E:B3:7B:BA:11:31:31
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5c:9b:58:9d:21:9b:b7:c9:9f:f3:f9:dc:51:ce:44:10:4b:
fd:34:16:e0:22:50:74:74:45:c4:3d:f1:c4:43:c4:90:d2:1c:
0e:b6:f2:bc:b6:c4:c6:ba:02:20:a0:0b:50:d3:b7:0e:5e:e7:
81:e9:39:ba:6e:31:5f:d4:84:a1:37:27:0d:5e:82:99:91:55:
ea:08:1f:2c:75:02:2c:2c:bf:b3:4e:c9:7d:a5:c9:4a:fc:9f:
45:da:a7:e1:03:26:29:c6:cc:15:8b:88:76:8c:93:d0:86:d3:
98:a3:df:17:d9:fc:49:02:3b:a4:39:46:2a:0b:1f:1c:45:79:
1f:94:99:4a:05:9a:da:4b:33:7c:2b:c5:94:18:50:19:85:2b:
1b:e2:63:7a:52:c9:6a:b4:a0:e8:d4:d7:bf:fb:34:2e:4c:e7:
d2:14:3b:9f:a3:97:a1:4f:ec:3e:5f:89:ac:32:b5:89:fd:c6:
6e:26:2f:89:77:af:bc:7e:2e:45:f2:d2:d2:36:00:52:fd:b9:
cb:1e:26:7f:e9:3e:6d:ac:6e:0e:ef:9f:d3:25:23:63:87:14:
e9:1b:1d:40:5e:d6:e5:45:6e:ef:3a:52:00:75:1f:b0:88:bd:
45:68:c0:37:0e:1d:31:70:c8:c8:2e:cc:3d:08:48:dc:cd:76:
fd:d7:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:30:56 2026 by rpki-client