Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: UzPNV37kcHkLgn55xG5ReBnB+Zbxa5Ow1Y3wTLf+rhs=
Subject key identifier: 28:F7:CE:50:DC:91:51:86:01:9C:AD:A6:37:FA:6D:0F:55:02:49:68
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019F897BD34083919076EC262AD655C780AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 1576
Signing time: Wed 22 Jul 2026 11:00:21 +0000
Manifest this update: Wed 22 Jul 2026 11:00:21 +0000
Manifest next update: Thu 23 Jul 2026 11:00:21 +0000
Files and hashes: 1: g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa (hash: ol20StyEmJtz4MmrTLsX4vBN9oBlWbLnJQFdG9RqacU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: 6u0lGGwTviXx6O9/5Itq8SDQf76vVbLJJWmkyvMIXug=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:7b:d3:40:83:91:90:76:ec:26:2a:d6:55:c7:80:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jul 22 11:00:21 2026 GMT
Not After : Jul 23 11:00:21 2026 GMT
Subject: CN=28f7ce50dc915186019cada637fa6d0f55024968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:d7:cd:d5:7f:2b:1c:23:5b:d2:9e:8b:f9:
29:5d:75:a8:4e:4e:84:2f:ab:e6:d9:97:f9:7f:fb:
0b:e3:bf:89:97:dd:fb:d1:9d:85:8d:03:49:bc:cc:
51:b7:33:49:4e:79:8b:ee:75:1f:03:d7:d1:05:0c:
b1:c8:e2:65:c4:07:ee:a8:43:fb:27:24:d2:0f:d9:
d4:50:67:a5:95:4b:b5:14:bd:12:4b:94:0c:f8:29:
6f:89:09:e3:e5:f5:ed:ec:2b:31:b3:8c:1e:95:f0:
e8:c8:f5:93:88:0e:07:28:cc:b0:c1:f3:cf:99:5f:
c8:62:5d:fe:e4:3f:99:b4:f6:a9:22:e9:1f:38:c6:
c0:9e:d7:ae:5b:22:d0:a8:d7:a2:61:e6:d6:d5:81:
13:04:32:ce:d0:d9:f8:41:b5:a1:ab:83:3e:6d:26:
4c:59:14:f7:81:a6:3b:46:4c:e5:1d:a2:0c:c7:71:
02:aa:e2:18:b5:af:8d:a7:68:d4:04:bd:12:c4:54:
6c:9d:98:8e:fa:36:6e:25:2c:01:e0:0d:c1:56:8a:
7b:66:3a:e0:86:eb:78:df:12:76:66:b6:f3:9b:0a:
f6:7d:93:0e:93:19:f0:f1:89:f3:1c:04:5e:a7:98:
20:95:ff:aa:5f:7a:39:9a:51:ee:26:91:4d:7b:83:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:CE:50:DC:91:51:86:01:9C:AD:A6:37:FA:6D:0F:55:02:49:68
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:2c:a3:d7:69:85:39:68:6e:ee:15:db:bc:5e:75:2a:8d:
1b:e6:9f:48:cc:52:4c:e6:fc:ac:43:36:54:b5:7f:a2:af:66:
b8:12:cd:5d:db:ef:37:0d:eb:d5:4c:4e:b6:f5:f5:14:83:53:
e1:4b:8e:37:ae:72:aa:4a:3e:97:3e:01:b0:f6:12:c1:34:91:
2d:03:f8:0a:fa:7a:62:ff:b5:2d:61:4d:b0:7b:85:0b:c9:92:
5f:aa:48:bd:16:97:3c:0e:bb:e9:e7:fb:ce:3f:85:8c:b9:46:
f7:e4:b5:08:98:e0:34:bd:14:2d:51:d9:21:0c:3d:0e:ff:43:
e4:02:e4:da:58:c0:39:87:31:c1:81:f6:7b:7a:1a:33:64:8d:
b1:34:31:8a:ce:ab:83:8c:9c:ee:7e:ff:76:1f:b6:63:36:dd:
fa:4f:3e:9c:1c:b2:54:4f:c8:7d:6a:d7:49:e3:6b:1e:26:4e:
03:13:db:13:81:8a:38:12:43:d9:c4:5a:c5:bd:49:49:d6:a3:
55:e7:07:fd:3c:26:26:99:a4:6b:67:15:52:ac:15:01:5f:74:
89:5b:cb:d8:ad:5c:3f:35:15:66:6b:24:63:68:27:43:03:2b:
46:af:32:c4:ab:b9:b1:55:0c:78:21:a4:e0:a5:33:56:c4:63:
1e:a8:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 20:15:58 2026 by rpki-client