Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier: 4nM9vzn93EChv0mdJaIEowrE77plfiXSSg+bi0dY2MA=
Subject key identifier: 19:78:63:B2:FA:B8:68:8A:8C:88:6C:4C:A6:77:24:0A:2E:7A:2D:F3
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 019D3977EFF8AAEA4FDEA7254ED3AA001D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number: 12EA
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (hash: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ=)
2: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (hash: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I=)
3: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (hash: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI=)
4: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: VJ6TkL7Jty1lvFk+dlDorwilQ2i1JAaqOjrOTDPl/jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ef:f8:aa:ea:4f:de:a7:25:4e:d3:aa:00:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=197863b2fab8688a8c886c4ca677240a2e7a2df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:ff:1e:bb:9f:70:b4:72:51:20:b4:ef:15:
ed:96:a2:f3:54:df:69:b0:52:8a:c8:70:6c:53:63:
1c:1b:b6:84:51:3f:34:59:f4:d1:6e:2b:a5:bb:38:
15:8b:46:6f:a0:37:2b:2a:ce:11:9e:33:4a:ac:b4:
3f:71:73:f5:1d:4a:a9:4e:2e:65:86:bb:3f:50:1c:
fa:9e:08:c0:94:67:aa:ea:a8:e7:90:65:45:88:ad:
35:0a:e6:3b:87:90:04:3f:5f:08:2b:89:d7:89:ad:
27:f6:c3:d3:9a:e3:f0:34:99:47:74:aa:a9:12:af:
55:23:d8:7f:5f:73:5b:ba:33:6a:1c:ec:3c:e6:40:
eb:bc:75:6e:bf:e1:e1:a5:e6:26:ad:d0:c1:6a:f9:
fa:93:96:10:97:bf:cc:f0:25:66:9d:7f:e8:25:ce:
59:ae:3d:23:6f:da:60:1d:d2:37:ad:9d:a0:8d:44:
ad:1d:fc:d9:ba:ce:51:6b:ca:a4:fc:6b:91:24:05:
ac:ed:00:20:1d:6d:bf:31:a4:b3:f8:12:25:76:74:
ce:d8:b0:9c:43:01:0d:62:eb:3f:80:8a:b9:a2:ac:
36:51:11:75:76:22:82:e3:0f:89:41:f7:d9:14:64:
65:4e:4e:58:8c:d7:88:2a:16:f7:b0:33:58:e0:cd:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:63:B2:FA:B8:68:8A:8C:88:6C:4C:A6:77:24:0A:2E:7A:2D:F3
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:29:e3:0a:df:d7:99:56:27:ac:e1:19:0c:89:0e:28:d8:a8:
c9:5b:51:46:a2:ae:5f:02:b3:95:07:c2:d6:85:66:11:59:42:
72:86:65:e1:6a:03:02:e1:79:07:28:fc:8c:59:2c:d4:45:7b:
e9:be:ad:c2:c4:e8:c6:94:69:c8:48:13:c4:e4:b4:e3:08:2c:
81:73:ff:5e:52:f5:02:39:c8:5f:b0:8e:67:55:ee:1a:01:06:
02:84:13:2e:18:05:74:6a:cc:02:ea:3b:d9:3c:e3:ba:10:3d:
34:6c:b3:c2:c6:5f:9e:54:22:9c:25:e6:2e:9f:d4:2c:6b:e6:
b1:0d:0f:3f:98:d7:42:e6:af:4b:1f:81:aa:d8:be:09:4e:97:
e4:85:a6:71:c0:d9:bd:11:96:b0:dd:e9:54:6c:85:77:68:a2:
d1:d9:ff:60:18:1b:73:c3:3a:ea:6a:55:7b:7b:d0:96:32:72:
37:04:35:0f:eb:a4:6a:a4:de:27:0a:94:6b:06:45:45:e2:93:
64:a4:de:e7:50:b6:36:84:af:1e:92:2d:51:34:0e:6e:fa:a9:
3b:42:7e:d8:f4:ad:55:c9:9e:f4:7e:15:c6:25:97:d2:39:c1:
95:36:f5:a0:72:86:64:03:33:f2:7c:b7:3c:d2:b1:8d:11:9a:
07:a3:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:29 2026 by rpki-client