Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: GH1jNJ7/Aj84wytKzqY67mmpYP2kYYLUkhY8GoR9v3g=
Subject key identifier: 28:01:8C:DA:A2:7E:40:E2:54:CA:3A:AA:D6:6A:7C:CB:84:DE:EF:7D
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019EE39EC0B7589406632655B5BB1465ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0AD6
Signing time: Sat 20 Jun 2026 06:01:32 +0000
Manifest this update: Sat 20 Jun 2026 06:01:32 +0000
Manifest next update: Sun 21 Jun 2026 06:01:32 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: z8eatpZLanppS9QL1a80BsS9Hiv0jj4Q4X0iVG25VWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:c0:b7:58:94:06:63:26:55:b5:bb:14:65:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Jun 20 06:01:32 2026 GMT
Not After : Jun 21 06:01:32 2026 GMT
Subject: CN=28018cdaa27e40e254ca3aaad66a7ccb84deef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:63:da:fb:e5:65:f8:de:bc:09:6c:47:9e:
fe:d3:8e:90:66:24:55:f4:64:88:28:28:ea:f8:cf:
af:66:f4:4d:8a:3c:d0:5d:56:18:74:f7:06:1e:25:
07:aa:f4:f4:1a:dc:9d:9c:01:36:01:db:8d:5f:63:
6b:a7:f1:54:87:02:39:b8:56:77:2f:b4:1c:2e:e2:
fc:3e:13:41:f3:7a:15:1e:09:83:b6:8a:67:1c:29:
a0:73:c2:fa:9c:03:30:08:3d:be:1e:e8:ef:ba:9e:
6e:3d:5a:06:fe:68:61:ca:e2:8a:d6:31:0d:61:1a:
19:b8:b3:4e:13:92:5f:ac:2d:c6:97:77:2a:09:8f:
56:fc:8a:df:5c:16:98:e3:69:9c:64:23:6e:b0:4a:
63:e4:ff:52:0c:5f:22:3c:57:80:c2:33:02:96:7d:
24:5b:9d:84:e0:0c:15:c1:35:1b:25:e9:98:d8:9d:
28:b0:0c:5d:ff:bd:46:51:6e:6e:bb:19:df:77:a7:
8b:fb:c5:7d:6d:9f:02:0d:04:e8:56:d2:d2:85:26:
28:bc:7d:cf:ca:a9:7f:ab:6d:ab:a3:6c:5c:df:fa:
80:75:29:98:a0:93:f2:53:3b:55:b6:16:c4:44:d6:
56:9d:a5:59:d1:e9:69:12:c2:46:fb:93:b4:23:84:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:8C:DA:A2:7E:40:E2:54:CA:3A:AA:D6:6A:7C:CB:84:DE:EF:7D
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:32:73:40:72:a2:85:76:2a:80:a1:ca:ac:32:74:30:d8:
cf:84:b5:46:64:34:0e:94:a4:c8:6e:ca:2c:73:09:24:01:93:
90:9f:a1:65:46:ef:a5:f4:92:05:80:68:6e:2b:84:63:80:3d:
49:37:a4:ff:ae:0a:db:57:59:b6:c1:df:c1:2e:20:c0:f8:08:
e3:26:c1:28:0e:59:40:23:3a:e1:22:05:6b:ac:76:7f:31:ef:
76:d9:32:3f:a9:f2:cd:52:26:75:8a:fa:48:ff:b7:f1:3d:46:
bb:b5:d9:9b:f9:cb:b3:2e:3e:d4:b3:b4:32:94:93:80:e3:76:
6c:b0:ba:56:c4:56:80:b4:2a:66:f5:5e:90:6b:f8:0f:97:93:
22:39:f3:5f:52:b3:8d:77:45:61:86:98:d2:a1:08:96:ac:2b:
08:6c:67:c0:a8:25:27:9e:e4:84:10:17:79:5e:9c:50:c6:69:
8c:ad:3d:fa:74:7a:b5:be:5f:c1:23:4a:8a:7f:75:35:05:da:
4e:a3:ae:e6:1f:90:23:0d:ec:77:55:93:07:8d:9a:42:7f:87:
54:f2:77:84:5c:eb:be:8f:94:4d:e9:13:fa:43:c0:59:7d:d1:
b0:55:a9:5a:97:d2:55:e1:34:69:0c:35:70:72:7f:33:0e:dd:
d6:06:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:40:50 2026 by rpki-client