Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: CbGmMc4qJVbjw0193cj4ceUlDdnVe68SVWYyit/I7hA=
Subject key identifier: D2:45:81:35:6B:EE:8E:59:03:49:85:2D:E5:7B:57:8B:A3:32:F3:C3
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019CE55B3AF2F05ED95FA74DE79F64D563A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 07D1
Signing time: Fri 13 Mar 2026 04:01:27 +0000
Manifest this update: Fri 13 Mar 2026 04:01:27 +0000
Manifest next update: Sat 14 Mar 2026 04:01:27 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: M/OPbIaZtmtlRqlad2rylc4C21cW1Y3zMu1iBZnQp8s=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:3a:f2:f0:5e:d9:5f:a7:4d:e7:9f:64:d5:63:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Mar 13 04:01:27 2026 GMT
Not After : Mar 14 04:01:27 2026 GMT
Subject: CN=d24581356bee8e590349852de57b578ba332f3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:d4:2d:fa:af:14:8d:67:a2:b5:66:38:75:
0e:b3:5e:7d:30:e6:f9:19:b8:99:0f:d0:61:0e:a0:
4e:c2:24:f9:78:f5:b9:0c:22:a6:3d:f4:7d:4e:20:
32:7b:ec:aa:39:d4:38:36:fe:d0:3b:f2:1e:1a:fb:
06:5f:18:d9:19:51:49:63:58:c3:5c:90:98:54:1f:
46:62:4c:50:87:08:45:6a:45:8b:60:92:8c:ae:ee:
b0:68:84:c6:55:3d:95:e6:b4:85:e7:5b:d7:b7:a4:
b5:30:b5:fe:58:20:c7:f7:a5:37:82:61:59:3d:76:
23:d4:41:da:48:72:93:3d:8d:bb:63:04:e5:ff:8e:
02:96:06:51:49:c2:b0:50:0c:29:b4:03:d0:b6:ce:
0d:66:da:03:5c:63:74:db:ce:2c:aa:2b:6b:af:0c:
4a:57:18:f4:5d:48:50:15:59:cd:49:69:63:56:6b:
f6:de:e1:53:cc:f3:5d:70:0b:b0:02:26:25:e2:ca:
03:ce:e6:2f:0a:42:98:58:83:57:09:88:45:37:86:
aa:5f:ed:fb:70:80:ac:40:8b:3d:44:1b:94:97:46:
25:56:b5:b8:a1:d8:ad:4a:6e:a5:06:ee:7a:c4:1f:
cf:67:06:01:01:48:39:c7:19:02:d6:b8:d0:f7:c4:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:81:35:6B:EE:8E:59:03:49:85:2D:E5:7B:57:8B:A3:32:F3:C3
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:41:35:8b:e6:7b:a9:a5:6e:2d:3d:66:78:98:d8:67:e1:9d:
7d:3c:01:d1:82:17:b1:19:37:d0:a6:00:35:dc:37:83:8a:1d:
d0:3c:9c:dc:ab:35:3b:50:e0:66:ae:15:23:e0:9a:39:0a:86:
88:c2:fb:a2:e1:08:8c:0f:65:68:20:56:fe:83:b0:8e:a3:2c:
de:3a:74:cd:20:34:a9:55:f0:6b:a9:34:7a:fd:07:8c:3a:3a:
ef:65:7c:e9:f0:8c:96:ee:f2:4a:39:de:94:7a:33:63:98:81:
2e:e7:24:64:57:69:00:3a:01:26:9c:ea:1a:7b:09:0c:14:fa:
ef:80:a0:a3:84:53:7f:69:21:62:79:55:e5:f4:5d:cd:e6:a0:
a7:49:d1:66:18:1f:26:a9:38:91:b9:e2:c4:8b:c3:83:67:f6:
6a:63:ef:7b:c0:b3:4b:a8:07:88:97:ae:10:9e:28:26:3b:6d:
a6:1e:89:71:e6:e6:19:34:dc:51:ca:1f:60:35:eb:4e:df:ec:
06:c1:36:6d:95:97:2c:8f:a3:e3:a2:7b:7a:b3:82:b7:3e:7a:
ba:ae:52:08:6b:a1:8f:77:a6:bc:2c:fd:b3:dc:24:73:d7:e3:
28:e4:d3:2d:62:84:a4:64:43:71:07:09:28:13:7f:38:32:02:
76:44:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:01 2026 by rpki-client