Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: /vmm53NKRlmzqzmaE6LH4EIKRpVuApbdbgWhnw9DzpQ=
Subject key identifier: 08:A3:D7:68:C1:D7:12:B6:E4:98:31:66:1C:76:DC:EB:16:02:5C:7B
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01A17E85B6270632BA700E98C2CEAF101106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0A33
Signing time: Tue 27 Oct 2026 18:00:54 +0000
Manifest this update: Tue 27 Oct 2026 18:00:54 +0000
Manifest next update: Wed 28 Oct 2026 18:00:54 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: MUmfOPxUo1ym27iA9yba4cBrRdQ.roa (hash: E3+bxe+6Z8vivRrWSF3M1TLEwkKZ68GGPJwJrdpmg1k=)
3: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: l9QVeX3NYVAIjHZfZq7jXtDbLWtjbAqgFhi3UWA6YrY=)
4: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:b6:27:06:32:ba:70:0e:98:c2:ce:af:10:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Oct 27 18:00:54 2026 GMT
Not After : Oct 28 18:00:54 2026 GMT
Subject: CN=08a3d768c1d712b6e49831661c76dceb16025c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:fb:59:67:7c:01:f4:4a:df:7b:01:2f:b1:
6c:61:c5:46:69:b7:40:cc:3a:a4:a6:d1:91:06:f3:
aa:ed:fe:b9:38:63:0c:b2:bc:4f:9f:18:4b:a4:7e:
f4:65:d0:10:99:0c:4d:c7:e7:a4:88:69:27:fe:38:
cc:0c:57:f7:f0:8a:b0:ad:a8:8e:ec:b3:09:e0:06:
02:a2:3b:a0:39:8d:ef:8f:28:c8:98:a2:7e:2d:29:
12:9e:93:b7:b2:2c:98:36:e4:34:40:19:06:7c:f7:
19:14:fd:cb:29:e0:f8:99:36:9f:3e:75:2f:2a:15:
c6:9a:66:12:fe:fd:37:a0:19:cd:b8:33:32:7a:d3:
6f:a9:a3:f1:86:ae:88:3a:79:d1:31:e7:3e:94:22:
5a:b0:6e:a8:26:ca:84:21:6e:1f:66:7c:3e:d7:ea:
28:42:87:ff:7a:cf:b7:4a:e1:19:cc:05:dd:c5:88:
16:0f:e3:2e:62:0b:06:1b:ea:f2:e7:15:ff:f4:6f:
4e:0a:61:c1:b9:3b:5f:39:b4:9b:bb:a4:78:bf:cd:
45:f4:1b:8d:a9:df:31:e7:65:dd:75:da:41:7a:6f:
aa:d7:1b:13:1d:de:76:96:3a:39:66:79:21:f6:81:
a4:43:8f:ee:22:73:03:9d:5e:95:0f:42:a6:a6:76:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:D7:68:C1:D7:12:B6:E4:98:31:66:1C:76:DC:EB:16:02:5C:7B
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:99:7a:95:33:84:9b:98:d8:39:b4:1f:02:25:cb:0f:f8:
64:69:1a:29:28:cf:b3:2e:4e:dc:db:fa:e3:4b:21:e5:d6:ba:
6f:84:64:53:08:bb:25:ba:23:e7:a9:36:3f:41:dc:9b:8b:4f:
ea:27:ee:88:5c:85:92:42:16:18:1d:78:14:62:4c:bf:49:47:
f9:b2:66:55:38:18:7a:a2:bd:c6:29:11:0d:01:00:a0:a5:8f:
56:37:2b:6c:a8:7c:cc:8d:4d:67:be:5e:75:12:65:0e:b3:1a:
a3:df:45:bf:ce:c3:8a:d5:63:43:8f:7e:10:f8:ef:e5:47:bf:
17:bb:da:5b:8c:c0:62:18:1e:21:28:18:48:55:de:05:57:e7:
65:17:11:bd:93:83:33:20:7c:cd:66:c2:28:37:52:78:49:1d:
cb:3d:2e:03:ba:87:49:c5:a2:ca:5d:bd:a4:b4:f8:41:19:a2:
0a:af:70:90:75:4b:e2:17:31:59:6c:a2:f0:55:d1:e5:30:8d:
c9:b9:da:64:fa:8f:8b:a4:03:85:31:26:ca:1f:b4:9e:3e:73:
2f:9c:57:72:33:23:78:69:7d:8b:a9:4f:3f:7e:9d:ea:48:d6:
4d:fb:fe:86:55:67:43:d2:57:45:d7:4b:e9:53:14:df:f6:e1:
0c:b9:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:56 2026 by rpki-client