Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier: 8K1I0LgSqS57UDI9fbU0DQ5nyIBGAaQcU0KHtua78Gg=
Subject key identifier: 11:4A:10:30:6A:D4:79:96:02:CE:0C:5D:AB:0E:E7:CB:C6:51:02:A1
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 019D37F75EE8052863EA6BDBB44E551C0CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: JkxzftXxBP-vXJDMHiEIGkiEedU.roa (hash: okOGWD6NJlFcOrkCnqjaP6NoTcyEZKu0Sq4XrnddyYw=)
2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: RuuiXfQ3IrnWuAZrNUtz2Nkoy9K0nu6+r4Lb0Ko9rcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5e:e8:05:28:63:ea:6b:db:b4:4e:55:1c:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=114a10306ad4799602ce0c5dab0ee7cbc65102a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:9c:42:42:a8:65:96:25:64:60:09:84:c3:
e2:e1:2f:68:ea:54:52:f5:ad:37:74:e4:9e:e3:8b:
a8:ab:4b:d4:38:3f:4d:e8:35:93:83:7c:b8:59:4d:
46:bd:fb:3d:69:52:44:1e:3f:b7:72:5e:f7:ee:c5:
09:fe:f7:b3:d9:3b:15:46:40:79:02:74:ca:d0:d3:
36:b8:57:37:00:2c:49:81:f4:3c:59:a9:f6:4c:ab:
a9:34:13:7a:1f:05:39:a8:0d:f4:56:3b:b6:2d:07:
3b:be:53:0d:e4:ac:d9:f0:a7:0b:6b:05:f6:de:a9:
d0:2f:4f:a2:d4:08:4b:73:d6:0f:12:8c:58:8b:aa:
99:f2:dd:35:04:f4:64:8f:a6:77:c2:23:30:48:20:
a8:f4:13:c6:2e:6d:11:21:48:38:4a:2d:5b:0a:a9:
92:4e:82:33:c9:47:19:01:5f:df:e9:bc:db:e8:94:
da:bf:75:60:6e:a6:d3:2e:0e:ed:39:10:a0:fb:d5:
3f:20:02:c1:d2:b9:64:f9:8c:6a:39:a1:fa:6e:be:
7f:ff:78:19:2b:db:ba:75:f3:9f:a2:f7:d2:ec:38:
9f:95:b0:60:00:ff:e7:82:bf:f1:22:b3:fa:65:60:
8f:8b:4c:8f:ea:a4:7c:72:03:67:0a:47:a4:57:6f:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:10:30:6A:D4:79:96:02:CE:0C:5D:AB:0E:E7:CB:C6:51:02:A1
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:70:24:e6:81:52:12:9c:07:7d:d1:9e:59:43:29:3d:76:d5:
fb:d9:af:fb:bd:3d:73:2e:9c:1c:2d:b5:68:f7:78:0f:17:53:
c5:1f:44:ea:df:eb:b6:5e:eb:9f:22:1d:5d:48:bd:60:a4:8f:
7a:c7:b9:e3:f3:2d:e7:cb:56:90:d8:9a:fe:ac:a0:f4:ad:a7:
01:24:99:11:29:a4:05:8e:3f:78:8f:8f:d2:ab:d5:61:91:65:
ef:09:1d:84:9f:f7:9d:69:d5:74:6e:cf:93:67:45:84:c0:4b:
99:37:51:ae:b2:58:48:32:28:52:27:90:e1:64:59:07:f3:d1:
b6:31:81:0f:c3:f4:a2:b1:65:0e:02:0d:7a:b3:19:d4:57:8f:
e5:24:83:d0:99:c4:b3:a2:bc:2d:6e:da:a9:7d:4c:47:c1:d2:
ea:dc:d8:04:97:d2:3b:0f:f2:5f:f0:34:a1:42:aa:35:ff:f3:
5e:b3:b1:80:f1:c7:67:42:b1:b6:ee:90:40:b3:e8:63:18:a2:
f0:01:1b:98:b0:6f:94:a2:e1:02:00:df:8f:7b:52:2e:94:40:
60:25:dc:ef:59:31:81:8a:15:c9:71:bf:ef:61:fc:89:51:7d:
3b:5e:77:6f:72:ca:59:7c:8b:60:34:eb:5f:b7:cb:52:82:2d:
d7:5e:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:55 2026 by rpki-client