Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: DXQBxAKxREANorlD6ulVii9l7Hcaxzg6MgVzsZ+xZs8=
Subject key identifier: 27:92:3C:33:34:94:8B:93:8D:1F:28:0D:EE:57:07:04:67:15:5A:8A
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019FA072AABFDA2B79380F8C3324DD86C199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 093B
Signing time: Sun 26 Jul 2026 22:01:37 +0000
Manifest this update: Sun 26 Jul 2026 22:01:37 +0000
Manifest next update: Mon 27 Jul 2026 22:01:37 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: I+xRU4d4EIvwOLgJ41vkUoCKWfcJrmLL8/qLWQzUn0U=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:aa:bf:da:2b:79:38:0f:8c:33:24:dd:86:c1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jul 26 22:01:37 2026 GMT
Not After : Jul 27 22:01:37 2026 GMT
Subject: CN=27923c3334948b938d1f280dee57070467155a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:c7:02:99:73:d9:eb:14:0e:b0:0f:f7:33:
8f:4c:0a:0c:c5:e9:be:a8:4d:09:14:91:b7:24:9e:
f5:bd:cf:9a:b3:d2:f0:89:f4:99:b8:a5:25:cc:1f:
70:f8:9b:27:54:d0:a0:57:39:36:66:44:5b:18:11:
d0:51:a2:25:86:ba:9a:17:99:01:fe:31:ca:a7:85:
5c:57:07:23:94:d0:4c:fb:fe:95:89:7d:3b:4a:22:
39:8d:d9:e2:6f:2e:8c:28:20:91:9a:35:56:09:ec:
7b:65:a8:28:4e:34:b8:cd:b2:97:8f:bd:7b:50:6b:
88:d4:6e:47:47:52:0b:3c:e1:d4:f8:c5:60:39:ba:
09:60:da:fa:65:4e:a0:88:29:ac:3d:1d:3d:3d:7d:
5e:c2:72:4c:ff:26:39:88:59:20:ec:2b:85:e0:a4:
54:4c:f1:cc:5a:0a:16:98:64:e1:5e:c5:d1:41:e8:
ff:b4:95:43:8c:3a:bc:d4:97:5e:24:17:36:27:e2:
0d:02:51:85:a1:15:5a:6f:bd:6a:4d:2a:c7:4b:1f:
b7:0e:3f:19:f5:5d:4b:2c:0a:cb:de:cf:97:bd:ae:
e4:bf:c8:ea:78:87:8c:3a:ab:7a:df:e2:c5:ed:ae:
15:2c:b4:c3:23:9f:28:24:fd:0e:3f:93:89:7e:4a:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:3C:33:34:94:8B:93:8D:1F:28:0D:EE:57:07:04:67:15:5A:8A
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:52:34:cf:c8:2e:bc:75:23:5c:81:eb:ec:33:84:70:3f:
61:ec:0a:ee:f1:bd:72:74:37:5b:10:47:86:1f:d5:12:5f:dd:
f2:83:a2:1c:4b:79:e3:07:58:7c:bb:cd:a5:43:58:b8:ce:ff:
ec:aa:74:c2:af:24:0c:d0:05:9c:04:cb:40:4f:5d:40:f5:b8:
0d:ca:bf:c8:00:f6:9e:f4:53:24:23:4e:bf:4c:a5:34:3f:26:
d6:20:c8:6a:f9:c8:b5:93:37:5b:9b:ac:0b:02:a8:7f:cc:72:
88:ba:8d:03:29:e1:a8:ff:b4:8c:b8:15:ec:05:1a:15:fa:72:
df:ef:7e:d7:58:c1:9e:24:89:4b:9d:d3:eb:42:44:6b:f4:bd:
72:e8:fd:87:eb:fb:91:94:32:66:28:8f:b0:9b:dc:62:e6:a1:
6b:a5:34:2a:4e:69:1a:33:93:d3:f0:78:8c:4d:81:6f:04:23:
8e:fb:3f:dc:ca:42:21:52:3c:2c:41:f0:a1:9b:40:3b:e7:34:
c0:33:44:51:cd:07:d4:d6:d4:ab:d0:46:3a:34:ca:cc:4e:a8:
76:74:f2:68:f7:60:c5:cc:3b:a1:c6:13:04:83:b9:c0:15:16:
2e:72:f6:eb:c6:de:cf:81:35:1e:92:fe:23:76:b4:d4:84:83:
6c:49:67:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcqq/2it5OA+MMyTdhsGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx
ODJhOWMwHhcNMjYwNzI2MjIwMTM3WhcNMjYwNzI3MjIwMTM3WjAzMTEwLwYDVQQD
EygyNzkyM2MzMzM0OTQ4YjkzOGQxZjI4MGRlZTU3MDcwNDY3MTU1YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVrHAplz2esUDrAP9zOPTAoMxem+
qE0JFJG3JJ71vc+as9LwifSZuKUlzB9w+JsnVNCgVzk2ZkRbGBHQUaIlhrqaF5kB
/jHKp4VcVwcjlNBM+/6ViX07SiI5jdniby6MKCCRmjVWCex7ZagoTjS4zbKXj717
UGuI1G5HR1ILPOHU+MVgOboJYNr6ZU6giCmsPR09PX1ewnJM/yY5iFkg7CuF4KRU
TPHMWgoWmGThXsXRQej/tJVDjDq81JdeJBc2J+INAlGFoRVab71qTSrHSx+3Dj8Z
9V1LLArL3s+Xva7kv8jqeIeMOqt63+LF7a4VLLTDI58oJP0OP5OJfkoCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeSPDM0lIuTjR8oDe5XBwRnFVqKMB8GA1UdIwQY
MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt
NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl
LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4ZSNM/I
Lrx1I1yB6+wzhHA/YewK7vG9cnQ3WxBHhh/VEl/d8oOiHEt54wdYfLvNpUNYuM7/
7Kp0wq8kDNAFnATLQE9dQPW4Dcq/yAD2nvRTJCNOv0ylND8m1iDIavnItZM3W5us
CwKof8xyiLqNAynhqP+0jLgV7AUaFfpy3+9+11jBniSJS53T60JEa/S9cuj9h+v7
kZQyZiiPsJvcYuaha6U0Kk5pGjOT0/B4jE2BbwQjjvs/3MpCIVI8LEHwoZtAO+c0
wDNEUc0H1NbUq9BGOjTKzE6odnTyaPdgxcw7ocYTBIO5wBUWLnL268bez4E1HpL+
I3a01ISDbEln5A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:16 2026 by rpki-client