Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: QpgQirMUUC8ZexDe3nAWAyfxtqFbckD5pBTA1kRBwJY=
Subject key identifier: EC:A5:A3:DF:70:12:67:FB:01:01:42:A5:86:5B:02:A2:5C:E4:6F:B6
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 01A0B6F7EB2E01A0BD59C5FCD0DD66BD4C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0BC8
Signing time: Sat 19 Sep 2026 00:01:35 +0000
Manifest this update: Sat 19 Sep 2026 00:01:35 +0000
Manifest next update: Sun 20 Sep 2026 00:01:35 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: dAo5izpBVhs5V/m4fZnRWPUlZeoX7FtgUKjrZ+xQ0QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:eb:2e:01:a0:bd:59:c5:fc:d0:dd:66:bd:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Sep 19 00:01:35 2026 GMT
Not After : Sep 20 00:01:35 2026 GMT
Subject: CN=eca5a3df701267fb010142a5865b02a25ce46fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:9d:9a:bf:2c:08:f5:27:18:d3:69:1a:45:
3c:4b:32:ad:d6:85:dc:22:84:58:9c:b8:51:f4:b8:
00:c4:c9:eb:9b:fb:82:f9:09:1c:0a:dd:39:35:13:
8e:35:56:3d:3e:54:2c:00:b1:b2:ae:97:21:bb:fb:
6c:19:7d:a7:77:8a:40:9b:d0:37:ca:4e:42:49:f0:
d5:75:3a:85:5d:8d:8f:5a:f7:bb:45:57:9f:c7:ac:
30:9c:b1:de:1f:bb:42:50:b7:74:3d:8a:cd:e3:03:
f6:da:c7:16:c2:86:bf:46:43:0c:da:08:f9:f4:cc:
74:76:64:9e:4f:96:a1:b7:37:7c:5a:94:10:71:0a:
e4:2c:ae:b5:dd:87:a8:2d:6a:b4:56:9d:90:70:a1:
e0:12:47:35:38:fd:a9:f2:ea:0c:9d:a7:f5:7b:a5:
8f:ca:21:73:b2:17:35:cf:42:fd:96:91:70:3e:50:
b8:17:9b:43:1d:ee:a0:e5:cb:f0:3e:23:6d:e6:13:
6a:38:4d:85:89:16:6a:57:a9:a1:8c:45:e6:89:24:
52:40:4e:82:61:87:75:7e:95:20:7a:3f:83:18:d6:
b4:68:d1:6c:db:fc:a2:4c:7a:88:44:7f:9e:86:79:
27:3c:e2:87:dd:f9:8a:dd:4c:97:a7:af:ea:2a:3a:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:A3:DF:70:12:67:FB:01:01:42:A5:86:5B:02:A2:5C:E4:6F:B6
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:8e:58:ee:77:cb:cd:ee:f9:47:76:56:e3:93:f8:6a:8b:
2b:0a:b9:b3:b9:ef:c6:7c:4c:d5:46:83:3a:e2:e9:6f:87:4e:
99:28:2a:b5:ce:2b:8e:29:a7:5f:ce:f1:2e:54:c6:e5:9c:fd:
cc:e9:fb:2f:d2:80:aa:ea:12:cd:22:9d:ed:9d:89:0e:74:44:
4d:e8:31:da:5b:b7:39:50:20:a1:a1:18:e4:09:8b:7c:91:0d:
e5:e2:b3:d2:42:4f:51:17:cc:a6:ff:78:b0:de:ac:77:2e:10:
e0:d1:43:12:0d:fd:2d:0d:49:35:b4:26:1e:f7:d3:97:42:31:
0f:ee:49:1f:f2:1d:2e:eb:eb:9b:8d:e7:50:20:64:d9:56:f4:
f7:3a:1a:35:bf:5d:2a:5c:fc:69:aa:62:7f:fd:6c:ad:68:7d:
8c:bb:3d:f8:ee:b1:e4:25:26:80:95:5c:ab:56:b5:f7:ef:10:
73:56:f2:f0:1f:8f:77:bf:95:34:83:68:33:6b:b3:f4:cc:ff:
4b:9c:5b:e7:1d:bf:5b:d9:1f:b2:68:62:b4:a5:79:2a:aa:a4:
9d:c8:42:d7:d5:dc:02:eb:95:b0:29:22:15:89:57:15:e8:03:
e1:da:9c:12:94:d3:24:13:13:21:72:a3:d9:bc:06:ba:1a:e5:
61:27:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:43:04 2026 by rpki-client