
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: Ax7b+PEsMk9DepCBqcnYkVy5zkcR5NO4r9mXSc++vS0=
Subject key identifier: A1:2C:07:B3:35:F5:F7:CA:6B:5B:7D:DB:6E:E2:17:D4:F3:97:63:DB
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 01A152522808B35098519887E7DE2A00003F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 09FB
Signing time: Mon 19 Oct 2026 04:01:18 +0000
Manifest this update: Mon 19 Oct 2026 04:01:18 +0000
Manifest next update: Tue 20 Oct 2026 04:01:18 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: FopWOQ7RKi8ZmyASXt69sEaZp0l7lzBr9oWE9J65yDM=)
2: YKcDKEWIMlg76GTNhpBhJgfgseg.asa (hash: QXQfDgm1NSd802AZFlLWGYSREWy9tsWnBFqvrA0d4ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:52:28:08:b3:50:98:51:98:87:e7:de:2a:00:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Oct 19 04:01:18 2026 GMT
Not After : Oct 20 04:01:18 2026 GMT
Subject: CN=a12c07b335f5f7ca6b5b7ddb6ee217d4f39763db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:71:da:7a:f5:64:73:1a:84:98:b1:75:8e:
d3:28:5a:2a:aa:b8:67:43:a0:c1:7b:bb:89:6c:4a:
37:68:44:89:cc:0b:ba:77:e6:47:66:07:41:81:58:
1e:40:8a:b1:ec:63:bd:80:f5:ff:e9:03:df:e4:92:
ed:58:48:ec:88:ad:6c:52:e9:ad:63:58:8a:51:0b:
a8:32:c2:d0:38:b0:f0:03:7c:39:44:bf:a1:1b:4e:
55:11:c2:b3:8a:86:89:4b:a5:5b:d4:c6:b8:28:70:
23:64:f6:ef:b6:ab:19:a3:ce:9e:47:d3:90:08:10:
94:22:70:3d:5e:ae:6e:73:8f:ca:83:8c:54:8a:b3:
dc:9f:91:80:bd:24:6d:ae:af:4d:80:fe:7f:38:62:
0f:69:10:60:af:fd:fe:74:91:04:38:ef:c6:52:4a:
3c:c0:49:4a:e8:88:9c:ac:2e:72:f8:a0:44:6a:f2:
08:79:fd:19:f0:3f:8c:3d:7c:29:c4:fa:f4:91:0f:
40:c7:6c:8c:7c:27:c6:dd:bb:c2:37:6f:7f:6d:29:
81:42:5d:a1:c1:97:bb:17:16:ec:fc:29:80:97:85:
53:44:7a:ef:3a:82:ff:8a:93:5d:26:40:66:80:69:
ed:f1:1a:e6:72:5c:3c:68:c4:ba:75:d4:4c:b1:84:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2C:07:B3:35:F5:F7:CA:6B:5B:7D:DB:6E:E2:17:D4:F3:97:63:DB
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:09:f4:56:dc:d4:64:f7:10:ec:d6:5e:98:4e:d4:68:6a:
09:c6:69:d7:b0:4a:91:ef:5f:1b:e5:51:e2:a2:17:a5:47:5a:
5c:45:2e:c5:ca:b7:d8:fc:72:7a:98:31:46:22:aa:46:83:18:
eb:c7:c9:e2:99:df:85:3c:b1:ef:fd:99:27:cd:52:e1:ec:de:
55:bb:84:78:ec:56:45:37:8d:f1:57:06:16:c5:b4:83:ae:34:
6d:0d:21:c5:ac:df:5c:fc:4a:6c:c3:1a:1d:b9:48:5b:cf:6b:
50:76:08:cd:78:82:e3:06:16:31:74:dd:0a:a5:5f:b1:d2:2f:
1a:e2:ab:b7:f7:66:cc:8a:e1:3d:7b:b4:a2:3d:4b:e6:83:20:
06:8c:1d:82:0b:0b:41:6e:0a:28:fc:50:74:d2:37:27:80:99:
92:74:6c:5e:33:29:61:ff:e8:ae:64:44:ac:6f:95:4d:1c:ef:
51:6b:cf:a3:68:5a:f0:de:5c:7a:6d:36:9b:5b:6b:45:ab:4f:
59:0a:8c:74:ff:a9:f8:97:34:a6:46:2e:f9:2e:5b:2b:0e:69:
0b:5e:ed:30:f4:d9:c6:38:87:9a:c0:60:f3:dc:25:5a:07:8b:
16:4e:1f:d3:0b:70:b0:13:bb:c7:c8:61:72:2b:4f:dc:b9:e5:
d8:71:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:51:46 2026 by rpki-client