Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier: mI+UN2OSXx/6bVFLnGjCSlcjslLnEDDIdii8gyLPsV4=
Subject key identifier: 2B:FE:A1:4E:6B:34:B6:06:B5:40:B5:AD:84:EB:33:38:F4:0F:72:44
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 019D386601AD1A98ACFF64956D06DB99DBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number: 02FA
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: QD6vm42lHxZ6fNbf8iYRJ7kMemqnoZNMBZXxZHlzZVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:01:ad:1a:98:ac:ff:64:95:6d:06:db:99:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=2bfea14e6b34b606b540b5ad84eb3338f40f7244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:9c:f4:58:0a:f6:b8:c7:d9:fe:f9:ba:5f:
3e:b7:a5:35:09:e0:7a:12:1f:ff:ef:b9:63:05:c0:
e8:e5:f5:46:86:de:7a:ad:34:0f:1a:f1:ae:36:d8:
b7:a9:0f:57:04:21:0a:fe:c0:cd:9e:b1:08:30:c5:
6c:de:2b:95:56:10:35:29:f6:d2:aa:25:51:66:52:
57:03:de:48:64:99:e2:ff:70:6d:23:dd:ef:83:d6:
e9:1e:ec:3f:63:54:dd:b2:5f:1a:7b:5f:da:af:a2:
0f:a8:d8:45:5e:2e:ab:9d:22:13:af:5e:b4:94:7e:
21:bf:17:6f:d4:54:50:34:ba:54:df:4f:0c:7f:d9:
b6:c0:3f:b5:43:6e:14:95:76:6c:7c:bc:21:7a:e6:
8a:ae:87:4b:56:98:4d:f7:b2:52:d9:47:17:e5:3c:
f6:bd:0b:41:0e:38:7f:06:c1:10:fd:1e:b7:aa:79:
af:8f:0c:40:f2:b9:cd:b8:b2:69:73:e7:34:e5:c6:
6d:92:63:c0:3c:6a:30:24:dc:56:9d:f1:b8:2b:9b:
38:32:2e:e7:ce:1a:89:75:12:56:a1:91:a8:58:b5:
d4:33:0b:98:70:27:ef:09:e0:45:28:b2:4a:f6:89:
67:6e:ce:e0:b1:8c:ba:49:47:c7:79:e8:a6:2d:12:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:A1:4E:6B:34:B6:06:B5:40:B5:AD:84:EB:33:38:F4:0F:72:44
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:a4:e0:90:20:ae:a6:ce:71:2c:c9:ae:6d:0f:db:f2:46:
f6:d3:34:40:07:ba:f3:38:1f:ee:df:e2:00:3a:96:02:89:8f:
94:b9:52:d9:67:fa:c0:9f:e1:2a:d8:f6:ec:6b:ea:30:2b:34:
e6:bb:a3:2f:ea:c4:9a:2f:bb:19:23:8d:87:21:3b:0f:92:ca:
25:09:48:d4:7c:72:43:8c:57:db:81:96:c0:9e:30:3b:53:b7:
6b:e5:c0:2c:7d:1e:90:09:67:8b:34:14:fd:2e:0f:fc:f7:9c:
d5:37:5a:77:2a:48:e8:f4:a4:d7:2c:07:3d:f0:84:49:8c:50:
34:81:23:80:33:d1:a5:b0:a7:9c:33:3f:00:02:92:12:6e:42:
b9:cc:6d:f1:dc:4b:8a:23:64:6e:6c:cf:d7:35:92:d0:48:40:
d0:57:b1:b7:e5:c3:f0:2b:dc:2a:5a:6b:4a:be:44:30:27:f2:
fd:2e:f2:98:f0:ba:e2:71:9b:da:33:bf:f2:69:df:f4:0f:69:
61:20:28:1b:83:ff:b1:ef:39:f9:c7:dc:c0:5f:68:4c:e9:72:
f1:4b:d1:20:9a:aa:2d:f0:78:7d:0f:6c:71:f6:89:ca:db:57:
dd:90:41:d1:63:20:53:9c:43:c1:79:ce:bc:ee:70:22:73:7c:
22:af:d9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZgGtGpis/2SVbQbbmdu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjliNGYwMzliYzgyODYwMWMzOGUwZWFkNGMxOTVhYmJk
ZmZlNjMwHhcNMjYwMzI5MDcwMTQyWhcNMjYwMzMwMDcwMTQyWjAzMTEwLwYDVQQD
EygyYmZlYTE0ZTZiMzRiNjA2YjU0MGI1YWQ4NGViMzMzOGY0MGY3MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqyc9FgK9rjH2f75ul8+t6U1CeB6
Eh//77ljBcDo5fVGht56rTQPGvGuNti3qQ9XBCEK/sDNnrEIMMVs3iuVVhA1KfbS
qiVRZlJXA95IZJni/3BtI93vg9bpHuw/Y1Tdsl8ae1/ar6IPqNhFXi6rnSITr160
lH4hvxdv1FRQNLpU308Mf9m2wD+1Q24UlXZsfLwheuaKrodLVphN97JS2UcX5Tz2
vQtBDjh/BsEQ/R63qnmvjwxA8rnNuLJpc+c05cZtkmPAPGowJNxWnfG4K5s4Mi7n
zhqJdRJWoZGoWLXUMwuYcCfvCeBFKLJK9olnbs7gsYy6SUfHeeimLRIgmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv+oU5rNLYGtUC1rYTrMzj0D3JEMB8GA1UdIwQY
MBaAFKS5tPA5vIKGAcOODq1MGVq73/5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQt
OGNjNmQxOTIzMzViLzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQtOGNjNmQxOTIzMzVi
LzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNyk4JAg
rqbOcSzJrm0P2/JG9tM0QAe68zgf7t/iADqWAomPlLlS2Wf6wJ/hKtj27GvqMCs0
5rujL+rEmi+7GSONhyE7D5LKJQlI1HxyQ4xX24GWwJ4wO1O3a+XALH0ekAlnizQU
/S4P/Pec1TdadypI6PSk1ywHPfCESYxQNIEjgDPRpbCnnDM/AAKSEm5Cucxt8dxL
iiNkbmzP1zWS0EhA0Fext+XD8CvcKlprSr5EMCfy/S7ymPC64nGb2jO/8mnf9A9p
YSAoG4P/se85+cfcwF9oTOly8UvRIJqqLfB4fQ9scfaJyttX3ZBB0WMgU5xDwXnO
vO5wInN8Iq/Zww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:18 2026 by rpki-client