Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: h6m+ZqDjo+gKfU5Ag2GBSQKEID7ag31VQ6mw5vBhiNI=
Subject key identifier: EA:C6:9D:E8:45:26:45:6C:AF:43:72:CA:E3:33:BC:D7:05:5E:1D:CE
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019D3AC193A6EED851CB568C51F0CECC6A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 0A03
Signing time: Sun 29 Mar 2026 18:00:57 +0000
Manifest this update: Sun 29 Mar 2026 18:00:57 +0000
Manifest next update: Mon 30 Mar 2026 18:00:57 +0000
Files and hashes: 1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: a+EOW/1jDiAFqcQlSMCuq1hYN6lVQD1R397YcI9cwy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:93:a6:ee:d8:51:cb:56:8c:51:f0:ce:cc:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Mar 29 18:00:57 2026 GMT
Not After : Mar 30 18:00:57 2026 GMT
Subject: CN=eac69de84526456caf4372cae333bcd7055e1dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:47:68:10:00:10:27:78:00:22:92:4c:4b:e3:
0b:d6:a9:2e:30:0d:84:bd:36:b5:53:e6:1a:d8:c5:
b8:51:08:15:1e:9b:1b:d2:ca:4a:8f:6c:06:a0:d1:
f3:38:19:bb:ab:b0:da:50:e8:1c:57:f9:2a:96:09:
54:6e:1c:a3:5c:05:be:79:c5:89:71:91:50:da:34:
1e:15:e4:d1:9c:a0:bc:21:53:79:b5:5c:b2:e4:2e:
65:a0:49:2a:a1:eb:b7:93:7d:69:04:90:dc:2c:2c:
63:d5:b0:de:60:7d:7b:6a:60:06:fb:c2:77:61:4b:
14:4e:7c:09:70:3f:93:92:54:3f:4b:74:29:e6:bd:
9e:e0:74:34:d8:28:dd:56:68:7e:7b:bc:cb:51:f8:
db:26:91:17:ed:18:81:8d:fa:4e:64:d4:4e:b7:1f:
bb:6c:49:af:d7:11:5b:c2:6c:2a:e6:28:aa:f9:75:
f2:b7:b5:c2:a5:de:b8:b3:2f:9a:bb:d8:a9:a7:57:
aa:80:83:03:6e:04:c0:a3:34:bb:d5:f6:93:16:7a:
47:f7:45:87:b0:a4:b5:a5:1f:dd:7a:e7:9d:39:98:
02:02:bf:63:08:9b:6c:0a:16:a6:c5:c3:bf:db:a9:
8d:9a:da:05:ee:94:ec:9b:30:1c:cf:70:f8:35:b1:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:9D:E8:45:26:45:6C:AF:43:72:CA:E3:33:BC:D7:05:5E:1D:CE
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:37:ae:3e:55:2d:88:d6:c5:2a:ce:b3:b5:c7:61:7c:8a:
c6:67:b8:a4:cf:c5:c5:88:0c:10:a8:aa:9f:dd:ce:ed:0e:de:
3f:46:69:bc:ad:cf:a2:73:1b:06:9d:34:db:4a:43:5e:1b:ae:
f3:88:86:b5:06:8e:f2:e4:79:f0:c9:23:d8:86:7b:c3:98:af:
65:f8:aa:1a:35:1c:1a:4b:e0:a0:47:a1:17:83:38:d4:78:45:
9f:cd:83:af:a8:b3:fc:b1:7d:61:f1:55:58:15:f3:85:88:cb:
2a:ff:43:3c:2b:bb:b6:36:3a:07:4d:7e:e9:63:81:79:dc:74:
8f:e7:ab:33:09:96:69:ed:9e:1b:db:13:ae:86:8b:89:f4:ba:
ac:9c:fd:72:b4:28:25:e1:30:cc:95:6c:47:cd:81:1a:bb:6f:
06:05:e5:e5:ab:41:d8:4a:c0:24:71:22:48:2f:64:ed:74:d3:
09:97:e4:f6:43:4d:3e:15:72:00:d0:eb:9a:0f:b7:2f:9e:78:
fb:6c:97:94:7e:d2:56:b3:39:e5:7e:0b:70:39:49:60:7d:0f:
6b:19:2f:77:b7:8e:18:c5:7f:06:cf:7b:8a:51:8e:a5:bb:57:
a0:4f:84:92:de:cd:6a:90:ea:71:1b:0b:63:1b:00:f1:70:21:
7b:5e:a2:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wZOm7thRy1aMUfDOzGpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2
NDQ2OWEwHhcNMjYwMzI5MTgwMDU3WhcNMjYwMzMwMTgwMDU3WjAzMTEwLwYDVQQD
EyhlYWM2OWRlODQ1MjY0NTZjYWY0MzcyY2FlMzMzYmNkNzA1NWUxZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UdoEAAQJ3gAIpJMS+ML1qkuMA2E
vTa1U+Ya2MW4UQgVHpsb0spKj2wGoNHzOBm7q7DaUOgcV/kqlglUbhyjXAW+ecWJ
cZFQ2jQeFeTRnKC8IVN5tVyy5C5loEkqoeu3k31pBJDcLCxj1bDeYH17amAG+8J3
YUsUTnwJcD+TklQ/S3Qp5r2e4HQ02CjdVmh+e7zLUfjbJpEX7RiBjfpOZNROtx+7
bEmv1xFbwmwq5iiq+XXyt7XCpd64sy+au9ipp1eqgIMDbgTAozS71faTFnpH90WH
sKS1pR/deuedOZgCAr9jCJtsChamxcO/26mNmtoF7pTsmzAcz3D4NbG0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrGnehFJkVsr0NyyuMzvNcFXh3OMB8GA1UdIwQY
MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt
NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi
LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew43rj5V
LYjWxSrOs7XHYXyKxme4pM/FxYgMEKiqn93O7Q7eP0ZpvK3PonMbBp0020pDXhuu
84iGtQaO8uR58Mkj2IZ7w5ivZfiqGjUcGkvgoEehF4M41HhFn82Dr6iz/LF9YfFV
WBXzhYjLKv9DPCu7tjY6B01+6WOBedx0j+erMwmWae2eG9sTroaLifS6rJz9crQo
JeEwzJVsR82BGrtvBgXl5atB2ErAJHEiSC9k7XTTCZfk9kNNPhVyANDrmg+3L554
+2yXlH7SVrM55X4LcDlJYH0Paxkvd7eOGMV/Bs97ilGOpbtXoE+Ekt7NapDqcRsL
YxsA8XAhe16iaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:07:37 2026 by rpki-client