Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: n7fyYTcYMfhL53BN8iwpbu6U8HXatl8jyT5cpn+QKwo=
Subject key identifier: 50:02:DE:8D:C8:5E:86:67:5D:51:03:D5:02:A3:57:B0:D1:84:FD:8E
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019D3752F8D7779072B4CE6955EE3B846435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 07D9
Signing time: Sun 29 Mar 2026 02:01:17 +0000
Manifest this update: Sun 29 Mar 2026 02:01:17 +0000
Manifest next update: Mon 30 Mar 2026 02:01:17 +0000
Files and hashes: 1: IcfmTS0CP6rB67CQkMANE7ZvrBE.asa (hash: qUGWiJdx4nnSTLe0cuj2ysRzudqP0tr7YNfjwXyCMjs=)
2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: 6df7fi2GYT2CyqDJXNAPKdNRmWu1fKXa5/u3JgIqZ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f8:d7:77:90:72:b4:ce:69:55:ee:3b:84:64:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Mar 29 02:01:17 2026 GMT
Not After : Mar 30 02:01:17 2026 GMT
Subject: CN=5002de8dc85e86675d5103d502a357b0d184fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:b4:26:65:6e:08:62:7c:c1:ed:95:d9:e0:
f3:66:ab:69:85:f1:35:99:12:07:ce:0b:09:cf:da:
c9:ed:aa:cf:60:97:9e:75:0b:ab:1e:d2:55:45:95:
f4:03:0d:7c:e3:4a:e8:81:bd:28:60:c5:c0:db:e2:
5c:84:59:ec:8a:56:8f:95:ed:06:7e:d5:9d:3c:a8:
fb:0b:10:34:1a:de:41:bb:05:81:fc:fd:4e:f6:7d:
d1:2b:68:5c:75:e2:1c:28:8d:3b:63:d4:7d:fd:16:
c3:a1:86:d6:4e:8a:66:d5:e4:14:0f:df:f8:8a:a5:
26:22:45:91:71:d4:1a:82:f9:ed:d7:a0:5a:5b:20:
c5:ef:f6:29:61:ce:3e:00:e9:e6:b1:62:b3:2b:af:
b4:65:2d:7a:24:da:ef:9b:6d:ef:7e:31:e6:97:d3:
df:75:d9:55:dd:e1:8b:67:fd:d9:1b:15:04:bd:c7:
77:86:e2:1d:6e:bb:31:01:6b:94:ad:4a:84:6e:f9:
c5:13:52:4b:a3:86:4a:5b:60:69:37:19:97:97:d1:
96:d5:4c:8f:b0:e9:8e:11:9f:da:5c:bc:de:41:36:
5d:e3:32:63:9d:b9:f9:5a:01:ad:47:02:f3:0a:8c:
0a:1a:dd:ba:8f:ff:b8:8b:36:7c:08:8c:23:41:b1:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:DE:8D:C8:5E:86:67:5D:51:03:D5:02:A3:57:B0:D1:84:FD:8E
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:1b:6f:5e:98:a0:51:d4:50:61:ea:ba:7f:69:41:76:c3:
67:df:ec:4a:0c:5a:8e:4a:d7:d4:33:e6:6d:c1:c1:40:08:77:
18:ca:ff:27:ae:ed:33:62:6a:dd:64:a8:2d:f8:5c:cf:b3:6d:
5a:a7:b1:2d:25:d4:d6:83:94:a6:b9:27:89:ad:fe:ba:8b:76:
bb:ea:56:87:e0:b9:75:a1:aa:93:79:fa:de:4d:9c:9e:2a:5a:
be:73:75:c5:7e:4c:93:47:51:39:39:79:4f:25:c7:87:dd:b6:
63:44:bf:0d:3a:38:45:f8:aa:b3:cf:f1:a7:25:7c:ab:db:e8:
46:d3:74:33:5c:bf:25:ec:1c:4a:00:2a:de:83:bc:1f:ed:31:
a3:3c:aa:0c:85:8a:9d:07:f9:b3:ff:01:a7:7b:da:3b:4e:6a:
b1:05:73:e6:9c:27:29:91:94:fc:aa:ef:65:f1:32:a3:e4:1b:
f9:77:fa:14:64:62:5f:18:05:44:10:be:a8:92:74:ab:3a:79:
93:9a:bb:bd:e0:81:fc:e4:10:2f:4a:a6:76:ce:cb:28:7f:e7:
98:7a:32:50:41:6e:78:d1:8a:7c:39:6d:01:a8:1c:5e:8d:ad:
82:47:7e:85:29:c7:3a:fa:af:0c:f4:aa:dd:2e:88:78:17:db:
91:a1:94:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UvjXd5BytM5pVe47hGQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh
NDRiZjcwHhcNMjYwMzI5MDIwMTE3WhcNMjYwMzMwMDIwMTE3WjAzMTEwLwYDVQQD
Eyg1MDAyZGU4ZGM4NWU4NjY3NWQ1MTAzZDUwMmEzNTdiMGQxODRmZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5S0JmVuCGJ8we2V2eDzZqtphfE1
mRIHzgsJz9rJ7arPYJeedQurHtJVRZX0Aw1840rogb0oYMXA2+JchFnsilaPle0G
ftWdPKj7CxA0Gt5BuwWB/P1O9n3RK2hcdeIcKI07Y9R9/RbDoYbWTopm1eQUD9/4
iqUmIkWRcdQagvnt16BaWyDF7/YpYc4+AOnmsWKzK6+0ZS16JNrvm23vfjHml9Pf
ddlV3eGLZ/3ZGxUEvcd3huIdbrsxAWuUrUqEbvnFE1JLo4ZKW2BpNxmXl9GW1UyP
sOmOEZ/aXLzeQTZd4zJjnbn5WgGtRwLzCowKGt26j/+4izZ8CIwjQbEd9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAC3o3IXoZnXVED1QKjV7DRhP2OMB8GA1UdIwQY
MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt
YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj
LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATacbb16Y
oFHUUGHqun9pQXbDZ9/sSgxajkrX1DPmbcHBQAh3GMr/J67tM2Jq3WSoLfhcz7Nt
WqexLSXU1oOUprknia3+uot2u+pWh+C5daGqk3n63k2cnipavnN1xX5Mk0dROTl5
TyXHh922Y0S/DTo4Rfiqs8/xpyV8q9voRtN0M1y/JewcSgAq3oO8H+0xozyqDIWK
nQf5s/8Bp3vaO05qsQVz5pwnKZGU/KrvZfEyo+Qb+Xf6FGRiXxgFRBC+qJJ0qzp5
k5q7veCB/OQQL0qmds7LKH/nmHoyUEFueNGKfDltAagcXo2tgkd+hSnHOvqvDPSq
3S6IeBfbkaGUjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:12 2026 by rpki-client