Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
File: pl8fmR9O7NN9xruk4_WzXFSPkoM.mft (raw, json)
Hash identifier: 5qJOOvBsd9EpO75hikHlKOtUAYV0ukY8hizbywuqqVw=
Subject key identifier: 21:32:C8:DA:58:56:3C:83:C1:80:16:EF:C4:C8:26:78:F1:EF:6D:3E
Authority key identifier: A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
Certificate issuer: /CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Certificate serial: 01A181BE913A2E8AD7929C96842504B765B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:52 +0000
Manifest this update: Wed 28 Oct 2026 09:01:52 +0000
Manifest next update: Thu 29 Oct 2026 09:01:52 +0000
Files and hashes: 1: BHZgLw94teiGLK7JAQ5jFLZXddI.roa (hash: rJZ+8HW6SrcllJz7BMr8mKkcsE5wJfVB5OD3+D0naIw=)
2: pl8fmR9O7NN9xruk4_WzXFSPkoM.crl (hash: AbG2wW+lATMv9Wq4NatkTs4yw8B+tZUBIGfa7tI48FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:91:3a:2e:8a:d7:92:9c:96:84:25:04:b7:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Validity
Not Before: Oct 28 09:01:52 2026 GMT
Not After : Oct 29 09:01:52 2026 GMT
Subject: CN=2132c8da58563c83c18016efc4c82678f1ef6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:cf:fd:ce:2b:34:b2:58:c9:e9:55:1b:0a:
05:7a:a0:9c:a5:93:f6:77:ac:bc:53:88:fd:70:dc:
e9:fe:34:81:e7:49:19:03:1c:91:ab:c6:4c:91:25:
aa:59:4a:d7:59:52:93:5c:f8:41:bb:ab:0e:e1:72:
86:f3:05:c7:fc:f4:66:43:d0:cd:3d:ff:a2:52:3e:
6d:65:e4:6f:e7:35:37:5c:64:26:30:32:0f:4b:41:
b5:aa:e9:ab:e2:ce:0e:e4:a6:8b:4c:b7:3d:91:d9:
62:49:96:15:0d:3c:89:c0:dc:98:5e:7c:7e:20:81:
ff:a0:60:eb:6c:0c:44:b2:47:a3:7a:7f:9a:a7:13:
61:68:8a:cd:17:02:02:06:1d:ea:24:ff:79:7d:a2:
14:3b:b0:92:b0:3f:70:dc:22:08:1a:36:65:f0:e4:
4c:6d:6e:00:8a:c7:00:a3:4f:c7:79:e3:fe:b0:fc:
c6:5e:78:fd:f8:66:13:98:47:34:26:7d:c5:b4:36:
f3:c5:8b:14:d1:92:f7:01:4d:b0:85:72:33:d5:8d:
bf:e2:95:9f:24:7a:bd:89:29:8d:71:10:24:aa:a3:
31:0c:a3:83:77:79:37:31:f1:3d:d7:9e:1c:c1:25:
f9:98:a1:b7:ed:31:f8:10:15:83:d6:83:06:56:86:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:C8:DA:58:56:3C:83:C1:80:16:EF:C4:C8:26:78:F1:EF:6D:3E
X509v3 Authority Key Identifier:
keyid:A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d6:fc:fe:f8:0d:09:89:e7:c8:f4:f3:b4:2d:99:bf:26:76:
50:b8:6f:41:10:5a:40:55:ed:94:ce:4c:bf:74:bc:b5:94:58:
4a:c2:fb:f0:47:cd:b1:4c:77:e0:f4:d8:a5:2b:50:4e:f8:43:
5c:f1:9a:c3:2c:5e:6c:f8:80:62:c9:32:01:ae:9f:79:1d:65:
93:4c:e5:b8:42:fd:92:b2:29:c7:8a:e3:84:37:56:8f:4e:a5:
ec:17:db:3a:56:cd:64:33:39:e0:16:8a:e8:c6:ff:d4:35:73:
23:a2:5f:64:ef:d6:4b:10:62:84:6e:10:a6:3a:eb:93:58:f9:
d9:f9:4c:bc:c7:3a:e2:bd:8b:e6:e6:4a:55:ca:3d:84:75:13:
80:6f:85:7a:84:3a:c5:75:d9:25:91:1e:57:3d:06:8b:26:80:
d0:0c:82:db:63:95:5b:09:a3:9e:83:19:38:ab:c6:b7:18:77:
38:68:f1:a4:f9:d5:1c:77:90:a2:a1:8c:a0:e8:de:82:a1:53:
d5:69:38:65:0b:aa:60:3a:82:81:49:fb:70:ed:c0:fa:c1:60:
7c:29:f0:89:35:39:dd:03:cb:8e:b2:4b:46:05:3e:b5:5c:54:
f7:0a:df:40:ae:20:b6:53:e3:1f:62:f2:1b:c5:dd:94:df:32:
0c:01:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:03 2026 by rpki-client