Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: ywsYAwNx9aU87it4XtgKuvmhNCkZ+UnpKnHUBHDIAAU=
Subject key identifier: 76:E4:9C:A5:72:41:28:7A:B5:0E:30:84:34:43:49:8A:EC:80:98:A1
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 01A1800650E4B29B844008E80429A638BA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 1AC5
Signing time: Wed 28 Oct 2026 01:00:59 +0000
Manifest this update: Wed 28 Oct 2026 01:00:59 +0000
Manifest next update: Thu 29 Oct 2026 01:00:59 +0000
Files and hashes: 1: 0k4uhWX2tXs6kn4QDDQyW9bCkYc.roa (hash: 6Eugvm0/9Fesv15b1kgGMNxIPO6CcT7Ckl1hTPHgrgM=)
2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: hhGVzMHueEJTh1JpYyylfk/hzhRIPT/0Mo/7pAnLyJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:50:e4:b2:9b:84:40:08:e8:04:29:a6:38:ba:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Oct 28 01:00:59 2026 GMT
Not After : Oct 29 01:00:59 2026 GMT
Subject: CN=76e49ca57241287ab50e30843443498aec8098a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:f7:19:46:0d:10:33:39:de:a9:86:34:a7:
a8:f5:5e:fa:4c:64:f0:e2:48:76:21:d5:f1:c9:99:
79:6b:9d:6d:63:c7:44:e5:f7:2f:89:82:91:a7:b8:
2e:5a:93:42:9f:9b:13:ef:f0:78:ca:5c:0a:79:5a:
14:a5:70:0a:e6:ba:cb:50:b5:89:7c:19:a8:5b:82:
50:17:3d:45:f6:86:11:cd:8e:c4:be:7a:6e:f5:39:
b2:3a:af:ed:af:1a:18:4d:dc:ad:4e:da:59:04:38:
7c:90:8c:c6:ef:e4:5c:b5:e4:98:fd:87:d8:0c:14:
ec:5a:e2:e7:9c:01:1d:b3:b8:f6:c9:64:c5:36:17:
59:74:2c:92:17:35:29:4c:e8:61:7f:d5:6d:37:33:
ae:7f:ac:5e:13:85:17:df:84:96:d7:97:4f:c5:22:
0a:56:ce:17:32:9f:0d:5a:43:ce:89:ba:f4:09:40:
e4:81:66:71:b8:39:99:b2:d4:dd:1b:39:76:ba:17:
0a:a8:2b:d1:28:71:5d:a5:49:39:6b:50:17:83:ed:
30:86:fb:18:8a:85:08:01:b5:f7:3c:f1:b1:39:ba:
db:9c:79:b0:4c:ac:87:89:b8:6f:7f:67:dc:fd:b0:
cb:73:10:04:a3:5e:09:a3:ba:22:7f:1d:1d:c7:7e:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:9C:A5:72:41:28:7A:B5:0E:30:84:34:43:49:8A:EC:80:98:A1
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:4d:f3:64:6a:fc:53:a7:7a:3c:13:34:a2:a7:8e:d6:68:
91:92:76:fb:96:4b:12:2f:15:aa:f4:a8:73:27:36:b0:09:51:
07:16:d5:9f:88:8b:2d:38:9b:0d:68:3d:fa:05:52:6f:34:76:
ac:aa:01:47:52:9b:e7:67:87:69:87:75:23:41:6f:b4:eb:d3:
53:65:00:ac:3c:26:1a:d2:0d:5b:be:98:78:2a:16:8b:c8:7f:
97:6f:e0:2a:3a:58:22:ff:b0:85:48:d9:67:2e:7e:34:26:64:
ad:8f:52:3c:f2:a1:c7:33:62:45:13:7b:8e:e9:30:21:74:f7:
33:90:c6:1c:be:e3:eb:bd:33:b7:69:d9:8f:7c:9a:2b:e1:04:
9d:2f:04:dc:9b:66:86:ec:ff:f9:af:51:a7:ba:42:44:ff:3e:
9a:ba:b4:3c:69:12:f9:84:f6:b4:4e:73:c4:b5:be:f1:18:45:
45:35:13:97:be:3a:51:5b:5b:67:ee:bb:14:bf:ab:d0:4f:ac:
de:15:35:d9:72:8d:24:7d:b9:60:21:45:98:59:6a:99:57:20:
bb:96:ab:19:80:a5:79:02:f6:30:f6:c9:8a:41:ed:45:d3:1d:
77:e5:ab:bf:a0:90:b7:e3:ed:7a:35:10:a0:25:1a:88:03:03:
ae:e1:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:48 2026 by rpki-client