Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: 3oP9JbLuw0tGmmyeV0Lj2AYEd1FIUenoZyhMvDGQrH0=
Subject key identifier: 5E:02:91:37:97:00:56:7B:D6:1B:1C:6D:E3:85:6A:7E:D5:DA:D7:21
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019DF9F25BD2CA31BC3FA6052820D1E7C79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0A5D
Signing time: Tue 05 May 2026 21:01:42 +0000
Manifest this update: Tue 05 May 2026 21:01:42 +0000
Manifest next update: Wed 06 May 2026 21:01:42 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: J9RqOZ3EKgdb0kKnCHpPCcEA40CxgW5SesdnMRsmYoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f2:5b:d2:ca:31:bc:3f:a6:05:28:20:d1:e7:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: May 5 21:01:42 2026 GMT
Not After : May 6 21:01:42 2026 GMT
Subject: CN=5e0291379700567bd61b1c6de3856a7ed5dad721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:c3:98:8c:9a:28:d6:7c:a2:da:63:63:12:
2b:96:6b:54:eb:d7:c7:d5:0f:72:f9:2e:60:b0:de:
71:74:8e:61:20:19:bd:5e:91:e3:84:e1:dd:79:6e:
59:70:13:2d:ab:34:fd:a7:cb:f4:d1:b9:38:eb:d9:
6b:d6:af:30:70:d4:98:49:cf:b6:d8:86:52:d9:56:
c6:49:47:47:90:26:52:dc:ee:d3:f1:b3:9a:f8:17:
5e:48:2a:e2:ea:08:ea:07:c5:64:34:34:3c:dc:77:
d7:4d:24:2c:b4:a1:2b:65:85:94:7e:f2:18:b4:14:
87:ef:e0:2d:5d:14:18:f2:9f:05:f4:75:9f:a8:bb:
64:91:bf:14:8c:91:db:88:6e:c2:0f:d2:da:ad:a5:
89:38:e3:0c:c2:82:a3:d2:f8:97:a8:e6:84:ef:45:
26:dc:77:24:a3:73:f0:69:4b:00:fa:93:58:84:ba:
6c:4c:ad:9a:fe:71:05:5f:1b:9e:7a:50:c7:e6:ce:
a2:15:3b:bf:32:c7:05:4a:a0:25:13:8c:ea:bc:4a:
83:21:58:20:1e:53:9d:fb:81:05:eb:7e:99:02:83:
2d:e0:43:a5:a8:06:01:ed:04:5c:aa:88:5d:4d:57:
6e:96:6d:08:45:12:48:80:2b:90:50:2d:f2:44:78:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:91:37:97:00:56:7B:D6:1B:1C:6D:E3:85:6A:7E:D5:DA:D7:21
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8b:f6:89:e5:73:44:d3:75:bf:54:94:0c:77:1e:d9:aa:d5:
49:bd:c0:fa:a9:5c:43:64:6a:10:34:af:1c:a3:c1:12:85:b3:
8d:6a:6e:02:8f:3f:46:f8:50:17:2f:78:0f:bc:64:f9:6a:de:
2d:f3:55:a8:7a:32:40:08:62:aa:db:9b:da:bc:90:63:f5:34:
a3:ff:67:16:56:0e:7b:b8:66:6e:da:f7:92:b5:28:2b:aa:c7:
68:fb:2c:40:4b:8e:58:0d:b2:b3:d4:9e:55:b5:c2:1c:84:65:
0e:07:b1:18:ce:69:06:f9:c8:2d:19:fa:77:7e:53:46:60:3a:
5f:0c:56:72:16:fe:a6:5b:3c:e0:ed:1b:9c:fa:b9:d0:fb:94:
17:12:84:27:a4:2d:75:84:e2:97:da:21:b7:bb:c5:ab:40:f7:
67:37:61:8d:9e:cb:81:de:ce:7c:db:4d:63:41:ba:fa:4b:46:
82:4d:0a:53:38:3c:6a:55:e1:b6:14:e4:d9:85:6c:de:6c:c8:
32:a9:41:c2:1a:f2:1b:e3:10:dc:8a:4c:e2:60:8f:f4:29:8e:
63:0f:00:26:0d:ff:67:6d:72:c5:fc:55:79:84:7d:21:69:61:
e0:11:67:c4:ad:99:f3:97:e5:83:31:da:e5:e6:e5:02:94:38:
01:75:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:42 2026 by rpki-client