Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: g44vNGauYXIq+PRlunkqAdAE+GHDnHoArblsNyIzzRU=
Subject key identifier: EA:53:77:05:6A:00:70:94:B2:C3:91:94:3D:0F:34:4D:D9:C1:7E:9B
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019EB8B3ADF93C4D9A05D5FB05ACF47184DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 08C3
Signing time: Thu 11 Jun 2026 22:00:43 +0000
Manifest this update: Thu 11 Jun 2026 22:00:43 +0000
Manifest next update: Fri 12 Jun 2026 22:00:43 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: rfOgELG18VNRIJOZZRYmZRPH0pvKhHRIKED4Rai0aKo=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:ad:f9:3c:4d:9a:05:d5:fb:05:ac:f4:71:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jun 11 22:00:43 2026 GMT
Not After : Jun 12 22:00:43 2026 GMT
Subject: CN=ea5377056a007094b2c391943d0f344dd9c17e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:39:ae:5a:c1:08:ed:7b:4f:2a:33:03:fc:
0d:55:fb:ab:e5:38:96:06:ec:d3:88:b1:5a:6d:d0:
59:d5:8e:dc:dc:13:f0:e3:78:91:98:67:41:98:24:
b9:c5:15:5d:fa:9f:4d:55:9c:5c:26:87:c8:55:ae:
50:02:ac:7f:c1:ba:c0:e7:bf:f0:b2:8a:6a:19:9a:
04:6c:3f:5b:86:be:86:b4:bd:eb:86:13:28:aa:e2:
72:06:96:22:fe:7a:c6:7e:a4:15:60:85:70:81:fe:
8d:19:6e:1b:1b:06:6e:f5:d8:bc:8b:2d:8a:e6:26:
48:77:9f:6c:99:87:3b:54:bf:ce:2f:91:88:08:36:
16:3a:7d:5f:d5:bc:13:f0:0a:d1:ec:cb:e2:77:6f:
f9:c4:69:40:b8:39:89:b4:8f:09:3d:24:9f:94:f0:
70:78:c3:3a:56:32:47:5f:e3:dc:df:1d:3a:c7:b4:
7d:9c:fa:7d:31:44:1e:27:60:5f:26:66:3e:a0:62:
ce:d4:8d:9f:17:6a:0b:4f:89:7e:75:9b:69:91:92:
a2:a3:4f:a8:86:8a:01:50:22:77:69:6f:16:1b:d9:
a8:bf:b6:6d:a4:9e:96:91:41:cf:22:72:b1:94:61:
b1:1d:cb:81:15:c6:53:a2:94:35:9f:9c:dd:d5:d1:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:77:05:6A:00:70:94:B2:C3:91:94:3D:0F:34:4D:D9:C1:7E:9B
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:2d:0d:a9:b8:00:76:aa:66:88:72:a3:40:af:b9:a1:ed:
77:65:e7:d3:53:6e:c9:ee:36:09:0e:86:64:bd:73:48:f3:f5:
27:19:a5:94:e2:0e:90:41:4d:12:28:f4:f8:12:35:ce:82:35:
4e:ca:ff:ca:18:79:3f:62:a5:c1:7e:c5:52:91:d8:59:f7:eb:
3e:43:a1:f0:1d:04:d4:87:36:58:0e:7e:59:f6:a1:7f:10:72:
d6:d8:17:cf:5e:0d:8c:66:51:bd:87:28:fe:5c:d1:af:69:f8:
5b:7d:94:34:a7:47:57:ec:bf:be:85:cb:45:ae:54:19:55:25:
6c:98:12:d4:82:ee:af:b2:32:e2:71:65:71:8c:7b:46:a3:87:
d5:0b:fa:c7:8b:a0:c3:84:30:90:18:6f:ad:98:ee:a1:c3:61:
77:e0:07:0b:c7:21:3a:7b:f8:d9:ad:ee:27:d2:0f:e8:e3:e2:
5f:81:1c:7d:1b:20:55:d5:74:52:35:25:93:60:95:06:16:87:
ec:66:21:7d:c1:37:d9:42:6a:8d:7a:4f:a1:e0:03:e1:9e:7e:
9d:8c:97:57:60:13:0f:91:5e:e1:27:25:0f:30:02:dc:44:20:
ac:ad:0e:1b:a7:d7:dd:03:96:2c:9f:21:ff:a3:53:e4:cd:ba:
74:bb:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:53 2026 by rpki-client