Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: Ps1P+EP62DXOah5DYBIjCZoOksb5y87yn5YaTXlkg80=
Subject key identifier: B5:ED:24:CB:73:19:A6:85:5B:AE:D0:5D:5E:9F:F5:6C:C0:84:A8:65
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 019D3865EF459FC5F5ABDE007B8C6B2F1D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0D66
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: 82dt5yLPU3sCnO2659vYzgRBis0fcrU9IgSenqxgdiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ef:45:9f:c5:f5:ab:de:00:7b:8c:6b:2f:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=b5ed24cb7319a6855baed05d5e9ff56cc084a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:1b:3c:f1:fd:ef:14:e6:31:1f:ea:7d:00:
70:ff:aa:76:98:b5:db:0d:67:38:06:73:50:f3:8e:
7f:f4:9b:8b:6f:f4:21:d3:4c:35:91:64:15:53:13:
45:03:83:7d:e6:5f:76:47:2f:1e:b2:ec:12:13:ad:
59:51:b9:38:79:06:4d:27:da:60:b8:e9:97:bb:d9:
dc:d9:cb:5b:a1:b8:9b:c8:78:57:a2:77:0a:80:69:
62:9a:86:5e:ec:24:7c:32:3f:8a:46:b1:87:ae:38:
03:b6:19:65:d0:78:ab:f0:d2:b1:e4:18:c1:9d:6d:
8f:f3:c5:35:aa:ec:cb:54:55:01:8f:3e:f3:50:8c:
9a:9d:c6:74:95:0b:e9:89:c6:d8:36:e5:8d:f9:21:
c3:d6:c2:53:1d:55:c6:f7:6b:e6:32:d7:bc:2a:20:
04:cc:f3:8f:ec:98:0c:64:b0:29:80:85:32:63:bd:
56:65:b7:6d:89:a3:01:b0:e3:4c:d7:8e:74:b8:fb:
dd:47:9d:f5:f2:3a:6a:f1:55:88:b2:f6:91:d5:2c:
b3:07:5a:ec:43:76:ea:e3:9d:96:46:00:12:15:7e:
d6:74:c3:cd:b3:74:1f:ae:40:b6:fb:a6:df:8a:e5:
7d:61:25:68:b1:ca:2b:10:9a:75:53:f0:a5:7e:df:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:24:CB:73:19:A6:85:5B:AE:D0:5D:5E:9F:F5:6C:C0:84:A8:65
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0b:17:fa:a4:8f:6e:5d:09:38:7b:93:6d:2d:4a:40:f9:36:
a5:1f:2b:a9:67:a5:56:77:8d:bd:64:10:7a:36:32:ff:cf:27:
27:00:4d:e4:06:22:52:a9:f2:f0:a9:be:19:08:ed:dd:c8:c1:
a0:06:43:44:f2:f2:58:04:03:f9:0a:a6:63:79:48:c5:58:a3:
2f:a5:da:7a:ce:11:b6:1c:b0:45:e5:84:22:f7:e4:f7:8a:f1:
c4:06:96:45:84:95:d9:3a:d8:5e:54:2c:17:4c:e7:ef:67:9a:
3e:e4:18:be:7f:10:9a:29:a6:41:bd:f5:32:e2:ef:38:74:8f:
b7:4f:a8:e0:84:b4:d5:b4:f6:b2:46:43:51:ac:7f:15:7e:f6:
d9:52:e7:23:1f:1a:1c:82:04:0f:56:82:ae:3b:bb:cb:5b:22:
88:d6:81:c3:3b:2a:e1:cd:c9:cd:74:11:22:54:eb:07:3f:82:
5d:b9:9b:e4:c1:a7:fb:be:df:73:2c:6b:5e:40:30:c3:27:c0:
38:0d:50:29:7f:e4:eb:10:81:1a:6d:76:94:87:77:c7:23:37:
c3:0d:1f:17:4f:34:41:b8:1e:59:46:71:53:a3:df:9d:1b:13:
cf:68:10:d2:42:cd:55:4a:d6:0c:8a:05:0e:ab:7d:ad:79:3b:
30:28:f0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ze9Fn8X1q94Ae4xrLx0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl
MWRjY2MwHhcNMjYwMzI5MDcwMTM3WhcNMjYwMzMwMDcwMTM3WjAzMTEwLwYDVQQD
EyhiNWVkMjRjYjczMTlhNjg1NWJhZWQwNWQ1ZTlmZjU2Y2MwODRhODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tsbPPH97xTmMR/qfQBw/6p2mLXb
DWc4BnNQ845/9JuLb/Qh00w1kWQVUxNFA4N95l92Ry8esuwSE61ZUbk4eQZNJ9pg
uOmXu9nc2ctbobibyHhXoncKgGlimoZe7CR8Mj+KRrGHrjgDthll0Hir8NKx5BjB
nW2P88U1quzLVFUBjz7zUIyancZ0lQvpicbYNuWN+SHD1sJTHVXG92vmMte8KiAE
zPOP7JgMZLApgIUyY71WZbdtiaMBsONM1450uPvdR5318jpq8VWIsvaR1SyzB1rs
Q3bq452WRgASFX7WdMPNs3QfrkC2+6bfiuV9YSVoscorEJp1U/Clft/hwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXtJMtzGaaFW67QXV6f9WzAhKhlMB8GA1UdIwQY
MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt
NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy
LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewsX+qSP
bl0JOHuTbS1KQPk2pR8rqWelVneNvWQQejYy/88nJwBN5AYiUqny8Km+GQjt3cjB
oAZDRPLyWAQD+QqmY3lIxVijL6Xaes4RthywReWEIvfk94rxxAaWRYSV2TrYXlQs
F0zn72eaPuQYvn8QmimmQb31MuLvOHSPt0+o4IS01bT2skZDUax/FX722VLnIx8a
HIIED1aCrju7y1siiNaBwzsq4c3JzXQRIlTrBz+CXbmb5MGn+77fcyxrXkAwwyfA
OA1QKX/k6xCBGm12lId3xyM3ww0fF080QbgeWUZxU6PfnRsTz2gQ0kLNVUrWDIoF
Dqt9rXk7MCjwLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:38 2026 by rpki-client