Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: 44oIuwyvl4JYYz7wJVSM/9BQZ2i+OzWbl120PEBLklE=
Subject key identifier: 21:DB:45:00:8B:31:08:EE:E9:2C:DE:9B:39:B6:F6:0E:60:A5:65:A7
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 01A1833E1D573F4E5AC67882BEC97E5C0236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0724
Signing time: Wed 28 Oct 2026 16:00:48 +0000
Manifest this update: Wed 28 Oct 2026 16:00:48 +0000
Manifest next update: Thu 29 Oct 2026 16:00:48 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: SY4iO/HyqlkNkBgBQ4D6VT6e4v+pAiijxq4v0Ylzcow=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:1d:57:3f:4e:5a:c6:78:82:be:c9:7e:5c:02:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Oct 28 16:00:48 2026 GMT
Not After : Oct 29 16:00:48 2026 GMT
Subject: CN=21db45008b3108eee92cde9b39b6f60e60a565a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:be:ce:3f:6c:0f:cf:1e:81:cd:c0:45:7b:
29:35:74:32:b1:eb:d9:87:b4:96:6f:ce:fa:04:99:
e4:5e:3d:31:10:d2:05:58:6b:a0:75:3d:21:d7:13:
a3:9e:fc:46:01:18:52:bb:36:a0:00:70:70:b4:fa:
d5:10:fa:85:93:f5:0f:20:dc:20:8b:0a:75:db:80:
eb:ae:b6:73:3c:1c:22:3c:39:05:9b:15:b6:44:67:
d4:9b:fa:a7:a3:c3:6f:27:49:b2:9c:0b:77:6f:9c:
ed:63:ae:3c:d6:52:b9:89:aa:cb:e5:21:f8:6c:e5:
3c:9d:99:f3:7b:99:33:3e:97:ff:ca:3a:a5:da:b1:
53:17:f6:53:6a:d6:b8:1b:34:a8:09:93:e3:a6:94:
2b:32:b3:58:26:26:a7:57:97:63:ed:8a:7b:b5:07:
7d:0a:1a:be:36:2f:98:a5:be:84:c6:42:af:b7:bb:
40:54:ca:3a:3a:a5:08:15:8a:f2:f0:90:2d:22:2a:
fc:ee:42:c2:ab:38:51:33:f8:51:ee:a9:e5:72:ba:
1b:ca:bf:e9:14:00:f9:43:d0:2c:6b:5a:2d:a8:96:
b0:6c:ca:b9:5e:11:14:7e:ca:dc:76:a4:92:49:9f:
86:ab:3c:55:13:b7:65:23:d2:08:18:05:1a:70:e6:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:45:00:8B:31:08:EE:E9:2C:DE:9B:39:B6:F6:0E:60:A5:65:A7
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:e1:83:4a:4c:30:07:d9:60:99:2b:b8:5e:f3:29:30:d6:
d2:85:0e:ae:75:40:f6:39:29:06:cf:f0:09:f1:30:a0:0b:96:
22:af:cc:bc:7f:90:44:c6:21:d4:e8:f4:e0:0b:09:4b:2e:08:
22:ad:71:ef:f7:51:40:46:11:84:8f:65:6d:7e:a9:df:94:72:
fe:b0:88:f7:c3:cf:23:0d:92:5d:1d:ef:0a:8a:ae:b9:1a:a0:
3a:fd:0b:93:fa:cc:4a:2f:82:3f:ac:41:7e:a7:67:69:20:c7:
00:19:b3:2f:20:fc:88:db:27:01:b7:e6:0a:e6:d4:c3:29:57:
ae:b3:0e:ab:48:65:7b:36:83:27:ad:46:e8:0f:a8:67:c6:53:
cd:3c:8c:94:ce:0e:f7:eb:09:f3:3d:09:04:26:d2:49:8f:18:
8f:61:f9:37:29:82:f4:7a:44:3d:83:08:16:18:c7:df:f1:02:
aa:a9:9d:05:c8:05:b1:c7:1f:12:0f:40:a6:49:94:1d:1c:38:
b4:bd:6e:40:23:a4:72:ef:72:93:a8:50:b6:ae:90:04:4a:2b:
1f:61:69:81:8b:59:4f:82:47:66:b8:ff:3b:b3:22:20:14:30:
27:bf:be:c7:62:e7:65:d6:c9:e4:1f:3a:3a:d2:79:80:39:6d:
2c:5b:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:56 2026 by rpki-client