Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier: TkrxLvBlcx+LxxEPTDQCeMfaukfVZ6qK2xSY8ioE2QQ=
Subject key identifier: 2E:96:1C:3B:A2:F6:AF:E6:3C:05:8B:5D:0D:82:93:E4:18:87:90:84
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial: 019D37F77E4C3990AE59256F060FB9006359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number: 02C2
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: IycFJZeNr36vIu4yC1apTwgURS6LLvStGhAHbmb6MK0=)
2: cnEEhfNi0eqLNKuxpPzXptnWI8k.roa (hash: m9SOT0Ao58g7AMmX42Mi3/tMd3Z2BD9HxWvbKa+j8ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7e:4c:39:90:ae:59:25:6f:06:0f:b9:00:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=2e961c3ba2f6afe63c058b5d0d8293e418879084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:d3:7a:79:53:7e:0e:c5:25:0f:5f:49:54:
74:3c:1b:42:eb:cb:a3:ad:2b:0f:53:11:53:36:11:
00:7a:73:55:fb:86:1d:47:e3:8d:ca:bd:13:a7:76:
20:90:73:df:d6:38:22:03:f5:db:6e:95:3b:58:28:
65:12:12:db:81:d6:f1:92:f9:d5:09:1c:48:ba:e6:
d4:cf:07:ad:02:69:95:ae:14:6c:68:10:25:78:ad:
c9:f3:91:37:22:c6:e4:9d:cd:ac:87:e4:1b:c8:70:
a1:55:1e:22:f4:e3:56:28:a1:a8:19:eb:b8:5d:dc:
4d:fe:92:b7:d0:2e:c2:55:cb:c7:9b:50:81:42:d8:
f0:d2:17:76:ed:80:22:b2:c9:1d:f4:1c:50:f8:fb:
46:8b:22:3d:11:09:74:85:be:50:dc:7f:52:2a:b1:
a5:e0:27:72:c6:0c:af:79:67:3a:5d:3d:4d:24:01:
01:c2:3a:53:b3:df:e8:69:30:4f:25:10:55:04:03:
14:96:7c:9a:88:f6:50:77:e0:79:2d:5a:82:a1:53:
08:ab:d2:47:d6:2f:ad:a2:6a:99:38:0d:94:84:80:
ba:1a:ff:e3:56:88:0a:0b:cf:e8:15:4f:a3:9a:2a:
15:60:3e:ce:17:f7:db:61:70:16:75:4f:a1:03:7e:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:96:1C:3B:A2:F6:AF:E6:3C:05:8B:5D:0D:82:93:E4:18:87:90:84
X509v3 Authority Key Identifier:
keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5c:18:31:09:5a:a1:71:8b:89:d2:e2:c0:1c:1c:e1:98:f5:
32:af:10:98:84:b9:7a:e9:d4:cb:14:44:3c:ad:3a:dd:75:9d:
11:8f:2e:0a:ab:a3:46:5c:eb:99:70:d5:07:06:44:b4:2c:17:
15:7f:7a:44:f2:6e:31:a2:09:36:a4:cd:4e:8a:cd:df:72:e8:
3c:07:e1:78:a7:46:85:45:2d:90:f6:4c:5c:12:c2:7b:e0:f9:
af:18:c6:ab:57:82:66:c3:40:19:d3:f9:1e:28:67:ea:06:d6:
b0:a1:fc:5f:12:6a:9a:29:cf:04:e0:3a:07:0d:53:d8:ac:c2:
0c:76:74:7c:29:fb:1e:68:5f:22:c1:3c:8f:b9:83:ca:93:74:
b6:4c:92:2b:40:2b:2d:a7:ad:49:ad:e2:c6:4b:7d:0c:bc:d1:
6d:a7:85:33:37:0a:c9:e7:08:1d:b5:0a:5f:d9:74:ed:6d:23:
ba:23:76:0f:56:83:77:45:55:4d:28:e4:bd:fc:4d:34:21:ba:
fd:a7:3b:d8:21:cc:4d:20:0f:db:1f:53:6e:1f:a1:c3:38:1a:
67:57:69:21:e8:27:86:a0:34:5f:7d:78:9d:56:59:9d:ed:ee:
87:cb:1d:79:73:b2:27:ef:0e:ad:e4:91:87:bf:bd:25:cc:c8:
cf:a2:79:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03935MOZCuWSVvBg+5AGNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOTk1MzQ0OTNjYmE5Yzg5ZGJkZTI2MmY4N2ExNTg3YTRh
YTk5ZGYwHhcNMjYwMzI5MDUwMDU5WhcNMjYwMzMwMDUwMDU5WjAzMTEwLwYDVQQD
EygyZTk2MWMzYmEyZjZhZmU2M2MwNThiNWQwZDgyOTNlNDE4ODc5MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3jTenlTfg7FJQ9fSVR0PBtC68uj
rSsPUxFTNhEAenNV+4YdR+ONyr0Tp3YgkHPf1jgiA/XbbpU7WChlEhLbgdbxkvnV
CRxIuubUzwetAmmVrhRsaBAleK3J85E3Isbknc2sh+QbyHChVR4i9ONWKKGoGeu4
XdxN/pK30C7CVcvHm1CBQtjw0hd27YAisskd9BxQ+PtGiyI9EQl0hb5Q3H9SKrGl
4CdyxgyveWc6XT1NJAEBwjpTs9/oaTBPJRBVBAMUlnyaiPZQd+B5LVqCoVMIq9JH
1i+tomqZOA2UhIC6Gv/jVogKC8/oFU+jmioVYD7OF/fbYXAWdU+hA35xmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6WHDui9q/mPAWLXQ2Ck+QYh5CEMB8GA1UdIwQY
MBaAFD6ZU0STy6nInb3iYvh6FYekqpnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODct
NWVkMDc3ZWI4YmUwLzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODctNWVkMDc3ZWI4YmUw
LzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFwYMQla
oXGLidLiwBwc4Zj1Mq8QmIS5eunUyxREPK063XWdEY8uCqujRlzrmXDVBwZEtCwX
FX96RPJuMaIJNqTNTorN33LoPAfheKdGhUUtkPZMXBLCe+D5rxjGq1eCZsNAGdP5
Hihn6gbWsKH8XxJqminPBOA6Bw1T2KzCDHZ0fCn7HmhfIsE8j7mDypN0tkySK0Ar
LaetSa3ixkt9DLzRbaeFMzcKyecIHbUKX9l07W0juiN2D1aDd0VVTSjkvfxNNCG6
/ac72CHMTSAP2x9Tbh+hwzgaZ1dpIegnhqA0X314nVZZne3uh8sdeXOyJ+8OreSR
h7+9JczIz6J5Xg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:17 2026 by rpki-client