Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier: lBng02A8AYR7GBuGdCgZXHG1Hg9CiO4HD+FbPT4L0E4=
Subject key identifier: 5B:00:42:42:FE:1D:C1:EE:98:72:6A:E0:C0:95:D1:C4:00:FB:B3:F2
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 019D3909DD6D44739D7D70090F32FAEAC5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: 0k4uhWX2tXs6kn4QDDQyW9bCkYc.roa (hash: 6Eugvm0/9Fesv15b1kgGMNxIPO6CcT7Ckl1hTPHgrgM=)
2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: 6k7dv7mQvPiN/Y7nDsoDD/U6KjGY9bUgunOEOK/RaxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dd:6d:44:73:9d:7d:70:09:0f:32:fa:ea:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=5b004242fe1dc1ee98726ae0c095d1c400fbb3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:cf:76:44:85:69:5f:7e:3f:6b:ba:ad:de:
9f:c9:c0:a8:af:b9:8f:0c:a1:7d:7e:af:4e:7a:ca:
85:f2:cd:d3:af:fd:04:d3:5b:7f:94:3d:f7:7c:c5:
ad:ab:fd:20:ee:d9:1c:f4:8e:e7:49:8a:d4:4d:9d:
9f:3c:e7:c7:78:aa:07:c2:da:50:bb:50:c8:58:77:
fc:8c:27:18:a1:f5:ca:81:4b:2a:b5:ea:70:6f:39:
3b:d7:25:f1:59:33:ea:50:a4:26:d5:6b:ff:6c:b2:
12:e8:eb:bb:bb:d2:fb:8d:6d:dd:0c:3f:47:77:cf:
46:4f:52:e4:3f:a2:55:a2:25:f4:1f:40:7d:47:23:
20:67:d4:50:c2:91:bc:c0:83:68:50:eb:ea:b9:f7:
13:71:08:03:25:3e:98:1c:cd:bd:1b:94:74:59:bd:
a7:9d:54:92:a1:f9:05:bf:a8:23:ac:2d:9b:ec:9f:
a5:65:cf:7d:75:6c:92:68:3b:9a:a8:a9:41:9d:ca:
f1:68:8b:8e:9d:9c:7a:07:7b:d7:fa:ba:47:ca:29:
72:3c:e7:85:83:14:59:d8:6a:75:d3:aa:41:90:0f:
c7:ae:51:45:20:95:8f:0d:93:fe:83:6b:70:c9:16:
78:07:60:45:3d:c7:e6:30:7e:93:a1:af:2b:d8:4f:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:42:42:FE:1D:C1:EE:98:72:6A:E0:C0:95:D1:C4:00:FB:B3:F2
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:ab:84:e9:a8:ee:74:82:15:c2:7b:9e:85:28:10:53:c5:
2a:78:03:19:2b:d7:70:70:39:9d:b9:37:ec:b1:c1:89:b0:ea:
cc:e9:cd:4f:00:ee:44:c4:40:26:f3:b4:4d:bf:4e:0e:e1:fb:
7c:4c:c3:1d:2d:c1:64:1c:83:47:c6:04:7a:ae:fb:f6:25:9f:
2a:6e:a2:9f:3c:88:9e:a9:fc:e7:48:57:c4:43:80:01:8d:13:
b1:2f:87:c4:5d:1d:82:f9:f9:d1:53:95:f7:0a:11:0c:7c:b2:
43:ec:d3:2e:2d:2f:4d:89:51:b5:83:2c:da:d5:43:35:82:85:
bd:74:43:9e:1a:27:6a:48:fb:41:5a:55:f7:51:b3:02:52:8a:
04:d5:c0:d8:ff:41:8f:c9:ad:30:50:3f:ba:2c:cc:6a:a1:80:
fc:69:52:1d:66:b2:62:2f:4d:e3:74:1a:d3:87:6b:7b:c5:80:
b1:e9:b1:42:fe:5d:89:49:3f:fe:9b:8b:40:1f:15:3b:1c:17:
2f:0a:63:43:3f:5d:b8:9c:74:37:ed:b4:91:9f:44:a7:9b:f5:
e5:90:96:98:66:e8:be:f2:22:b4:13:76:d5:ab:6d:22:09:3c:
ef:23:23:f1:e2:4b:1a:dc:46:c9:9e:d8:43:9c:21:12:a3:cf:
dc:cb:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:15 2026 by rpki-client