Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: 9fr3gKdHDMttEDRBC0fa/owgRp01x0vZeWl8eseww5A=
Subject key identifier: C4:9D:DE:0F:EC:70:C1:BF:73:20:78:B8:26:17:B2:19:5A:B2:01:3F
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019DCF06E3264EE77B43B7FC07772B033D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 0539
Signing time: Mon 27 Apr 2026 13:00:28 +0000
Manifest this update: Mon 27 Apr 2026 13:00:28 +0000
Manifest next update: Tue 28 Apr 2026 13:00:28 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: j/NXzA1CVDyZEJXzeKuenGRKaBoch9HfJc/iIk0PSEE=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:e3:26:4e:e7:7b:43:b7:fc:07:77:2b:03:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Apr 27 13:00:28 2026 GMT
Not After : Apr 28 13:00:28 2026 GMT
Subject: CN=c49dde0fec70c1bf732078b82617b2195ab2013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:31:1f:a5:83:92:f1:bb:bd:eb:96:fc:a9:
62:70:e8:40:6a:22:dd:08:70:17:a7:21:9c:dd:9e:
5d:e7:33:03:99:7d:2c:3b:74:b4:9a:3e:2f:68:6c:
6a:24:51:17:e4:ea:4f:f2:e6:bd:1e:83:e8:f1:07:
84:50:82:bf:25:ef:07:c3:61:ce:a7:2e:5f:51:29:
3a:43:5c:68:2a:eb:39:19:94:e8:5f:76:03:13:ee:
38:0d:8e:2b:42:13:19:66:37:6f:04:2a:3e:5c:ef:
aa:de:64:a0:0d:82:0b:92:fc:68:32:00:10:6e:8d:
c5:0f:91:58:cd:a0:36:e2:ef:72:0f:e8:31:5a:15:
16:b2:c8:54:d3:ce:2a:4b:63:d6:6a:1f:dc:7b:50:
d8:96:a5:8a:3a:95:a8:4a:1e:da:0b:2e:82:6d:9e:
37:ab:70:ac:79:5b:bf:4f:1c:5a:99:df:cf:6d:5d:
cc:08:c2:83:32:94:ab:fb:6e:e2:d6:64:ae:f5:c2:
6d:b4:9d:70:53:ee:fd:c7:81:cf:a5:36:30:6c:1a:
6c:02:3d:42:a2:92:4f:f1:03:10:ce:4d:59:13:ba:
02:da:ff:01:12:0e:00:45:04:63:bf:83:2d:e8:76:
12:a4:3d:ea:2e:f9:d0:80:cb:ee:ff:9c:36:dd:08:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:DE:0F:EC:70:C1:BF:73:20:78:B8:26:17:B2:19:5A:B2:01:3F
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fd:b7:e0:84:05:1a:53:84:e8:53:e5:6b:06:a1:38:9e:df:
fc:c2:7c:e8:1f:d3:e6:f3:b6:08:b5:28:b0:24:58:7a:24:e7:
ba:d2:d3:0b:a3:a4:2c:8b:fc:af:a4:5c:8c:4b:1f:32:3c:e1:
f7:5e:89:01:91:28:3d:4e:e6:07:a0:98:dc:05:29:d4:a7:ae:
f5:ee:0f:9d:9b:c0:7b:42:f1:39:cf:d1:0a:07:14:8d:52:38:
76:b1:f8:f4:2b:6d:3b:f8:45:03:c4:16:1f:d3:c8:99:b3:cd:
21:49:88:26:83:d9:51:38:b4:0e:0f:29:e7:cf:6b:15:da:1e:
f3:06:d0:9b:c0:bd:b0:39:fe:2c:97:14:86:d0:86:5f:2c:4e:
c9:6f:c2:be:72:fa:09:b5:af:a4:b9:f9:d3:78:94:df:de:e8:
ba:98:67:7a:d7:c9:69:19:66:ea:66:93:1c:7c:23:a8:9c:f2:
3b:67:b8:48:27:92:d0:73:b6:2e:0d:94:f0:72:09:d4:e1:b1:
06:cf:df:33:f2:2d:c8:78:18:c6:6e:9b:29:45:79:7a:91:74:
b5:5b:f7:17:a1:fa:a0:8c:9b:fe:7d:5c:ad:a6:75:95:e8:f4:
a7:d2:09:d1:5e:c4:e3:6e:34:21:14:ac:ba:ed:f2:73:c6:82:
cc:4d:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:28 2026 by rpki-client