Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
File: Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json)
Hash identifier: s6ohCLlF6eAVKWqF5oKZd7G+yoUX8cxvLte/1awgFXg=
Subject key identifier: 5C:16:DC:88:19:61:78:4D:2F:6F:E6:31:15:09:F7:F0:75:EC:AE:EC
Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
Certificate issuer: /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Certificate serial: 019D3A1C3EB33946A32B3B78D0F9BEAC5C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
Manifest number: 0237
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: dSeyA6KcCLz0s9/IbUrnQofL/wwGwWqoBV4tqfY4h34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3e:b3:39:46:a3:2b:3b:78:d0:f9:be:ac:5c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=5c16dc881961784d2f6fe6311509f7f075ecaeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:80:f0:c6:c9:ee:94:74:96:75:bc:51:8e:
96:8e:18:9b:4b:bd:bf:27:f7:96:b2:c3:71:f3:9e:
37:aa:55:d2:a2:8a:85:d3:34:f1:6b:a3:24:37:92:
f6:60:dc:69:b6:0b:38:b9:80:a7:2d:20:2b:3c:b7:
50:b2:96:13:54:f7:4c:9f:0d:62:9e:7b:62:c6:bd:
40:2f:be:19:85:cc:5a:b8:52:0c:68:cc:ac:00:1d:
cf:ac:6a:a7:66:d4:19:04:e4:6e:2b:b5:58:98:3d:
7a:ea:b4:70:c2:ad:40:17:49:89:96:1d:e9:3f:e4:
1c:86:aa:18:f5:09:90:21:c0:48:fc:c7:1d:6f:a1:
4e:e1:c8:86:30:f8:4a:ad:03:dc:84:9c:b8:98:94:
5c:fe:3a:d4:0e:c2:f9:70:f5:19:3e:ac:0f:cd:84:
fd:9e:ff:e9:9d:25:3e:67:f4:f2:57:a8:6d:80:16:
0f:48:2a:88:c3:ca:36:8f:b1:40:ca:cf:a0:39:48:
29:8f:40:7b:b8:fb:cd:08:68:0b:6b:b9:94:cf:84:
be:f7:58:59:44:c9:11:9a:ad:9d:c8:d1:ea:a7:ea:
1f:29:5e:0d:94:d1:86:3f:d6:b2:2d:71:7f:e3:d9:
f8:55:36:d3:15:02:b3:e9:69:bd:dd:e5:cf:ba:72:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:DC:88:19:61:78:4D:2F:6F:E6:31:15:09:F7:F0:75:EC:AE:EC
X509v3 Authority Key Identifier:
keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:bb:ba:3a:7d:88:74:95:65:3d:c9:d6:81:86:37:89:1f:
d0:bc:b3:27:25:f6:15:c4:8f:0d:02:e2:95:6f:8d:72:2a:f7:
05:29:4d:b9:44:1a:21:44:34:1b:09:95:98:1a:8f:84:e7:c6:
21:f1:e9:a7:da:61:f6:7d:8a:50:93:a6:a5:b8:41:53:59:6c:
47:29:af:77:4d:70:f2:70:e4:29:ae:69:be:0d:d3:33:63:47:
cf:91:91:da:3c:fe:c2:08:11:d6:25:50:69:d5:cd:5c:7a:59:
48:bc:52:31:79:cb:8c:37:9f:5d:36:ed:9d:15:ac:fc:53:e5:
1a:dc:35:89:b1:3f:92:6e:84:aa:9f:d1:11:8c:2b:37:01:a7:
da:cf:d4:d0:36:5c:56:bf:37:0e:f1:df:bc:bb:f3:78:b1:97:
2b:da:32:7f:45:d6:6e:dc:13:73:b5:db:50:3e:7c:74:29:2c:
18:cb:38:5f:ee:67:ae:0b:e0:c9:14:71:b6:84:03:65:7f:62:
55:a0:cc:9b:bd:d2:2e:28:a4:10:6f:97:be:af:9e:7b:ce:5a:
a9:54:7b:35:3f:1e:34:0d:98:13:96:8b:3d:11:d0:df:91:e1:
68:64:d9:72:5f:0d:5f:b9:5d:1f:36:d8:f7:2d:a8:45:99:9f:
c1:42:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:02 2026 by rpki-client