Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: g6CrfM3EG/K9ff9B/4NldCHdvaFUIu4kadWAmqXhE/E=
Subject key identifier: 5E:B1:85:35:EA:42:CD:2E:E2:A0:1E:D1:1A:67:F9:A3:1F:93:37:4F
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019D38D341CB5FF6D9F6E43860C3C9C2EAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 0A02
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: tsagaKZTChDSkUqN5FjfxoSPXHciAH5xq5Ct/B+YTCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:41:cb:5f:f6:d9:f6:e4:38:60:c3:c9:c2:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=5eb18535ea42cd2ee2a01ed11a67f9a31f93374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:3c:fb:0e:10:af:44:f3:af:b4:c4:52:cb:
ea:e4:ea:62:a1:30:52:bf:28:6f:4c:67:aa:d1:a4:
57:d5:f3:f3:48:bf:d9:6c:3c:99:f3:5d:8e:16:01:
0d:21:a7:44:d8:ce:0e:06:88:0e:b7:bc:d9:bd:7d:
0d:c0:3e:b0:a0:d6:04:9d:a3:0d:f7:38:16:af:f2:
87:ae:9d:78:78:8f:12:a5:65:91:39:28:f0:14:93:
eb:2a:91:e2:a9:79:c9:30:67:48:c2:f3:12:19:57:
03:b7:ce:d2:6e:f0:3d:ea:36:98:a4:64:f7:a8:57:
9f:51:a4:05:99:9b:d7:6e:4a:01:92:89:27:93:53:
0e:64:ce:eb:a3:e6:f0:83:0b:4d:24:37:ee:c9:33:
e4:21:88:33:7a:4d:88:d0:66:a3:87:e2:ae:3e:e6:
10:94:2f:ee:0d:e1:aa:ca:59:65:81:bf:29:ec:2e:
0b:da:66:ef:67:a4:2a:ee:c5:1b:10:3b:93:55:93:
d9:f2:cc:86:90:91:f3:d6:da:ee:af:e8:17:41:9f:
c6:a7:1e:7f:10:d0:5c:72:df:3c:34:12:59:9d:a9:
5f:8c:79:ae:26:94:2b:f1:11:d4:e4:81:9f:59:55:
f7:fd:ef:ab:45:0e:9b:03:4c:e8:a5:1a:e3:85:59:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:85:35:EA:42:CD:2E:E2:A0:1E:D1:1A:67:F9:A3:1F:93:37:4F
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:be:ec:eb:8a:ba:77:95:f7:a6:f2:6c:51:0d:a1:32:00:
91:62:91:f0:1f:95:d3:ee:6a:3d:b1:0f:4a:1e:6d:d4:1d:f1:
a2:50:ff:16:6d:32:45:be:21:ba:8d:92:8e:12:e8:a6:47:61:
ef:bb:26:28:76:e2:19:c8:f0:e1:a3:73:73:6d:6e:30:75:d4:
21:87:04:e4:8b:29:a4:19:12:8d:a5:0b:a0:13:46:00:5a:89:
07:a1:bf:c5:df:1a:90:00:dd:35:2b:35:79:25:5a:f5:2b:d9:
48:a9:33:cd:f8:59:91:a5:62:47:51:1c:12:b6:f8:b3:35:12:
cc:3a:9a:be:1b:ca:0a:5f:d4:76:be:93:67:17:95:a3:69:50:
05:ff:4f:0b:3d:93:1d:fd:70:c9:a6:3a:5d:7b:b5:0a:c8:ac:
f5:cc:68:44:7a:c1:02:80:08:79:fd:5f:80:bc:8d:32:f4:69:
6b:03:73:b4:00:ef:99:6c:9c:c5:7e:c0:d5:ff:14:b1:2b:ff:
21:6a:90:76:ca:c5:15:95:0a:a2:05:e8:66:f4:5c:92:1a:d1:
5f:00:c1:b1:b2:09:df:66:33:fc:0a:7f:36:95:b2:77:e6:a8:
6e:c1:dc:d7:5f:63:96:d5:15:86:d9:5a:f2:a7:4f:c6:31:d4:
35:54:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:25 2026 by rpki-client