
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 6W8nNWviaHDYedBZQIVnVruzzvL41zxygtH9WedH+14=
Subject key identifier: EA:DC:B0:4C:DB:0F:95:CE:BB:6B:4C:AE:6F:35:61:8B:A4:60:3B:1C
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 01A18450C40C9A6BC35146DE5A8F68FB27F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 167D
Signing time: Wed 28 Oct 2026 21:00:47 +0000
Manifest this update: Wed 28 Oct 2026 21:00:47 +0000
Manifest next update: Thu 29 Oct 2026 21:00:47 +0000
Files and hashes: 1: 6VaHOeY6AcBLw-YDB_VDzRdCFec.roa (hash: EDZ8ZDlRf0UI+t71ebVA+hoZLE/+Ioh5PJyv02H05wY=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: HppssWfUTTEuYy8ih3T0y0sLZl7hGDUKes2P4wE576U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:c4:0c:9a:6b:c3:51:46:de:5a:8f:68:fb:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Oct 28 21:00:47 2026 GMT
Not After : Oct 29 21:00:47 2026 GMT
Subject: CN=eadcb04cdb0f95cebb6b4cae6f35618ba4603b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:b5:92:04:46:9f:00:04:d7:7f:13:4a:dc:
bf:5a:51:82:db:a8:cb:9c:d6:d0:9f:ba:64:0d:5c:
b5:ec:93:f4:40:a1:9d:86:a9:04:f8:7d:af:6d:9b:
bd:97:c1:1c:59:0b:3b:ee:18:5c:2a:09:80:68:ed:
d5:23:14:88:11:be:01:91:e6:ad:ef:95:7d:62:a9:
53:5b:c3:fa:21:63:5a:4a:89:50:7d:14:bc:2e:b0:
26:35:09:94:fa:3c:03:a5:8f:8c:2d:53:c3:eb:b7:
01:bd:6d:a7:29:f4:37:f8:4c:66:39:4c:03:86:f4:
01:7b:3c:0e:be:8d:3a:ec:57:13:14:63:b1:f9:24:
dc:3b:35:2e:82:cf:7e:1a:8b:c8:27:d3:69:3c:0e:
05:c1:e6:c2:4e:11:9a:98:d3:39:73:4c:08:68:44:
1f:10:9e:54:07:d5:58:f4:d1:49:03:01:9d:b0:b7:
f3:54:24:9b:57:ed:66:32:d2:a0:18:4e:91:b5:c2:
1c:6b:b7:8b:e2:2b:2a:28:43:08:1a:63:85:b3:19:
f0:af:8d:99:88:2f:61:94:8c:31:89:f0:8e:f2:0a:
55:7b:0e:c6:1e:21:44:11:f6:09:a5:65:68:bb:9f:
da:1d:c0:f5:3d:2b:19:f0:8a:ec:71:c4:15:57:34:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:B0:4C:DB:0F:95:CE:BB:6B:4C:AE:6F:35:61:8B:A4:60:3B:1C
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6f:bd:dc:d8:c8:3a:d5:9a:2e:85:12:72:91:75:99:04:9b:
76:97:8c:bf:ec:d3:29:1f:ae:16:8a:29:61:11:23:15:9b:76:
0a:5e:63:d5:1c:95:fa:d4:7d:7b:13:61:64:af:0c:cc:d8:ac:
61:30:b3:12:ec:90:e7:9c:db:80:90:9b:69:b5:52:a0:d6:ee:
7e:d9:af:30:2e:00:64:c1:01:60:b9:1a:c4:74:74:8c:9e:6a:
14:15:59:58:ba:52:a0:d7:6d:ec:be:5a:27:da:ab:44:c2:ac:
8f:d8:9e:27:06:fb:9b:93:00:b9:e1:d3:fa:ae:78:40:fb:4d:
16:86:d1:95:1f:5c:8a:83:0e:ab:c0:1d:1c:80:3f:1b:e8:18:
32:83:67:36:01:2e:c3:8a:6e:0d:b7:bd:a7:bf:53:85:e4:30:
ad:68:88:09:ea:c0:96:8d:f8:a0:b9:77:3e:74:7e:7c:d2:c1:
7e:1d:a8:43:ad:23:f7:4f:11:eb:f0:42:82:77:6b:32:5e:37:
d9:3a:2d:ab:e6:f8:6e:a7:d3:16:23:f7:08:7e:88:ea:46:61:
05:f0:a3:ad:7a:ed:70:db:c8:92:1d:85:c7:02:3f:e5:d8:24:
72:78:0e:3f:26:34:37:ad:59:84:b3:5b:ea:99:e7:c7:76:85:
d2:ba:97:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEUMQMmmvDUUbeWo9o+yfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjYxMDI4MjEwMDQ3WhcNMjYxMDI5MjEwMDQ3WjAzMTEwLwYDVQQD
EyhlYWRjYjA0Y2RiMGY5NWNlYmI2YjRjYWU2ZjM1NjE4YmE0NjAzYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOC1kgRGnwAE138TSty/WlGC26jL
nNbQn7pkDVy17JP0QKGdhqkE+H2vbZu9l8EcWQs77hhcKgmAaO3VIxSIEb4Bkeat
75V9YqlTW8P6IWNaSolQfRS8LrAmNQmU+jwDpY+MLVPD67cBvW2nKfQ3+ExmOUwD
hvQBezwOvo067FcTFGOx+STcOzUugs9+GovIJ9NpPA4FwebCThGamNM5c0wIaEQf
EJ5UB9VY9NFJAwGdsLfzVCSbV+1mMtKgGE6RtcIca7eL4isqKEMIGmOFsxnwr42Z
iC9hlIwxifCO8gpVew7GHiFEEfYJpWVou5/aHcD1PSsZ8IrsccQVVzQnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrcsEzbD5XOu2tMrm81YYukYDscMB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG+93NjI
OtWaLoUScpF1mQSbdpeMv+zTKR+uFoopYREjFZt2Cl5j1RyV+tR9exNhZK8MzNis
YTCzEuyQ55zbgJCbabVSoNbuftmvMC4AZMEBYLkaxHR0jJ5qFBVZWLpSoNdt7L5a
J9qrRMKsj9ieJwb7m5MAueHT+q54QPtNFobRlR9cioMOq8AdHIA/G+gYMoNnNgEu
w4puDbe9p79TheQwrWiICerAlo34oLl3PnR+fNLBfh2oQ60j908R6/BCgndrMl43
2Totq+b4bqfTFiP3CH6I6kZhBfCjrXrtcNvIkh2FxwI/5dgkcngOPyY0N61ZhLNb
6pnnx3aF0rqXag==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:49:37 2026 by rpki-client