Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
File: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json)
Hash identifier: MnYEnZ7KOK/nr31tAZos+12REZrwt3Ydw8icGsNJ9bE=
Subject key identifier: 3D:59:D8:5A:C1:03:0D:90:D8:00:09:CF:7A:4B:0B:95:A0:4F:E3:E8
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Certificate issuer: /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial: 019D397775CD2C0A2EB3623BBCD7CAC60DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
Manifest number: 13AF
Signing time: Sun 29 Mar 2026 12:00:23 +0000
Manifest this update: Sun 29 Mar 2026 12:00:23 +0000
Manifest next update: Mon 30 Mar 2026 12:00:23 +0000
Files and hashes: 1: abItNd0sq-4DEd22eQm74Y9rdRE.roa (hash: 5+BQiEWHO+5vi6bSPzol7YpnZ/xGCGXNwrOi+2aEcqM=)
2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: Fkp6kQRMX3MKJd1iRKDdViNrLS/TSWiH6hBBQb4lpks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:75:cd:2c:0a:2e:b3:62:3b:bc:d7:ca:c6:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65f995603663a569430ccc617287e919df144a0
Validity
Not Before: Mar 29 12:00:23 2026 GMT
Not After : Mar 30 12:00:23 2026 GMT
Subject: CN=3d59d85ac1030d90d80009cf7a4b0b95a04fe3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:c2:e8:fa:13:9e:78:8c:41:be:6a:28:6f:
49:6c:ec:0a:08:81:cb:21:b7:48:03:bd:22:cd:71:
4e:c2:1d:1e:ea:74:b2:b6:1d:8a:16:3d:17:08:0a:
81:cd:2f:1d:48:4d:a4:27:90:b9:05:17:6d:7a:e6:
62:39:fc:67:5c:a1:53:3d:10:7b:8e:40:fd:23:df:
61:0b:ac:0d:fc:bf:f1:f0:c5:7c:c0:76:3b:d0:c1:
88:e4:b9:1d:28:f6:e0:16:67:f4:4e:f0:1d:6c:a5:
20:15:8d:fe:c1:39:5f:e4:ab:40:2c:63:3d:7c:1b:
9c:c3:92:12:51:ed:3d:6f:d1:80:54:04:78:35:86:
39:34:0a:fd:a9:d2:9e:b3:6a:49:b9:0b:e4:41:c2:
18:54:3f:4a:57:0e:9f:09:65:80:a9:5f:4a:d0:b8:
dd:a8:68:14:c5:cf:3d:bc:51:34:79:e0:56:30:68:
81:14:c0:77:90:59:25:b2:35:da:f4:04:ed:ec:cd:
71:25:3a:3b:c0:b3:88:51:40:7f:91:f0:6e:0d:c5:
7a:b1:18:27:3e:67:73:f9:fa:e0:53:90:66:e9:b5:
2a:d9:25:1f:74:29:a4:a6:eb:99:0f:fd:2a:dc:25:
63:21:e2:a4:0a:c8:b0:83:78:0b:78:23:0e:5c:74:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:D8:5A:C1:03:0D:90:D8:00:09:CF:7A:4B:0B:95:A0:4F:E3:E8
X509v3 Authority Key Identifier:
keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:87:e8:b3:0c:90:f3:80:ac:4f:61:e7:bd:60:12:71:b0:
48:0b:6a:0d:10:60:f1:72:7a:1e:b6:48:20:75:c1:0c:d9:d0:
b0:54:ed:7d:7f:af:30:10:b8:0a:ff:fb:6e:a4:4d:3c:54:6a:
6e:43:a8:88:99:e6:d2:72:43:ff:f2:21:d3:8b:8f:f5:59:8b:
a4:32:9e:17:a8:b0:e0:90:2d:bd:92:28:73:3e:b0:73:f0:44:
97:4b:c9:57:17:cf:a1:4a:b2:e6:d5:09:d6:a4:0e:1a:88:47:
37:d2:a3:a9:76:b3:1c:6d:57:77:9d:e7:93:a3:43:19:69:a8:
7e:15:a7:43:c2:05:7b:05:3b:7c:0e:57:a1:69:72:ff:42:ef:
42:39:8e:28:3d:d0:bf:b4:81:29:88:84:77:c5:b2:6b:8e:d5:
26:f5:42:81:ce:d0:c9:72:a2:6c:ab:b7:a3:ad:78:f0:52:a0:
a5:06:35:d3:c6:6c:cf:cb:60:b4:5e:9a:2f:c0:41:bb:9b:0e:
d3:57:d1:31:ae:8b:c9:f9:c8:f0:86:a5:9e:d2:21:5d:69:10:
c5:d5:db:56:b3:01:62:1a:a0:da:c8:1b:be:7f:df:f0:9f:22:
98:3c:00:3f:6d:9d:a9:7e:32:18:3e:b3:79:37:75:f0:28:74:
5c:5f:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:45 2026 by rpki-client