Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: M5oOcvkRrHcOMLkogY0bQqvUAkLAUGPah5K1IzIgMvQ=
Subject key identifier: 21:0D:11:32:43:DF:75:D0:5D:2A:51:87:9B:6E:C5:C1:BC:7E:06:13
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019D38655C72DAA6D1BDE269D30AD4FA6656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: wsdWqvYfmVb7+/y0gUVOWrAh38cIrzt8EdiWbopafnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5c:72:da:a6:d1:bd:e2:69:d3:0a:d4:fa:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=210d113243df75d05d2a51879b6ec5c1bc7e0613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:1e:86:fb:fa:9f:a4:bc:74:2c:9f:b8:5e:
b5:78:9d:3e:ca:db:91:14:c7:ac:95:19:dd:fe:de:
db:29:d5:20:04:f2:ad:21:9a:fe:1e:42:4d:1e:a0:
98:0c:fc:69:4d:59:d9:2a:a4:2c:26:7f:70:7f:ea:
90:f5:4d:7f:a5:4b:34:c7:87:03:88:92:d1:02:38:
86:30:a1:45:88:0d:c1:92:7e:6e:96:29:5f:03:ad:
6a:fb:11:46:3a:b4:a0:0b:1a:c1:af:f1:04:81:dd:
e1:e7:ce:6f:80:1d:c9:81:43:23:3a:e0:98:30:06:
b3:c8:ed:4b:d7:22:17:5d:5e:e9:7b:ae:f4:4d:87:
af:a7:6b:6d:1c:1c:60:92:6e:00:13:01:46:16:30:
e0:5e:39:e4:6e:49:28:a8:32:13:8f:a8:01:78:f3:
0b:71:b8:d6:15:11:ae:5a:fb:79:3b:a5:57:db:82:
a4:8c:86:5e:f3:89:d0:fe:dc:f7:75:6e:7d:35:61:
cf:4d:99:10:12:0a:08:2b:79:9a:73:f2:80:93:6d:
81:6e:73:ec:1f:17:1d:38:9d:0f:37:e1:8d:8f:6f:
47:24:2a:1f:27:dc:2b:55:51:16:d7:9d:63:a1:cd:
2c:9e:85:0c:9e:b4:41:ff:8e:59:db:c0:74:5a:fa:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0D:11:32:43:DF:75:D0:5D:2A:51:87:9B:6E:C5:C1:BC:7E:06:13
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dd:68:b7:d4:5e:a8:25:a6:69:e0:7d:14:1d:7e:39:c0:5f:
34:51:43:22:b3:ed:5d:26:e8:32:e0:24:7d:23:00:38:ef:1c:
18:6e:32:ce:a1:aa:d2:0c:bf:bd:f9:ee:ff:f3:02:6d:a6:48:
8b:35:18:d7:57:fa:b0:59:8e:8c:17:e1:47:23:9e:c9:f3:12:
78:92:ad:ff:3a:60:31:7b:87:3a:cc:df:8e:83:33:3c:63:50:
0d:0c:1f:bf:66:42:c6:ee:c2:b9:95:f4:14:e0:56:44:f5:4d:
13:6f:4d:5a:17:cb:88:0e:8f:ab:2d:eb:26:52:62:ae:87:2d:
a9:f9:76:c2:1b:20:9d:5c:6b:ef:0d:ae:60:f6:eb:eb:b2:6c:
e4:fe:63:e8:52:67:58:ba:02:84:34:0e:b4:46:4e:40:c2:50:
a8:59:1d:fc:c8:7e:bf:c1:8f:d6:35:30:5b:2b:52:51:7c:3b:
b8:d4:a3:38:75:87:31:ab:39:d9:83:76:d6:d9:1e:c2:d2:94:
37:30:70:3d:46:0a:bf:50:8a:a7:dd:d1:c0:1d:ec:65:f3:b6:
1f:fa:8d:72:c3:25:fb:87:ee:8e:85:1f:45:5d:47:61:9c:23:
30:d1:8b:27:c3:b8:fc:1f:c7:aa:a2:47:6e:81:83:7f:40:f5:
7c:bb:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client