Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: KB4o48EpcV43cFzOG4d268MevQR2yru6dQHw1JgzirI=
Subject key identifier: BD:9E:F6:C8:AF:2D:49:34:3F:AC:A3:56:48:D6:AE:C1:B0:FE:64:05
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019DAE6990C87797561EB377E182965472E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 147F
Signing time: Tue 21 Apr 2026 05:00:47 +0000
Manifest this update: Tue 21 Apr 2026 05:00:47 +0000
Manifest next update: Wed 22 Apr 2026 05:00:47 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: 8JWzSfhpO0I7DOk81e1Nfee8d9X6YqK5Qkzsn1KyTxw=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:69:90:c8:77:97:56:1e:b3:77:e1:82:96:54:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Apr 21 05:00:47 2026 GMT
Not After : Apr 22 05:00:47 2026 GMT
Subject: CN=bd9ef6c8af2d49343faca35648d6aec1b0fe6405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:e5:d9:39:1c:81:86:91:8b:39:e0:9b:32:
0a:8c:4d:d7:d6:1b:87:0a:f3:c7:65:06:e7:14:08:
45:3a:e5:1e:1c:43:35:23:3b:a1:13:c6:db:4f:84:
13:d2:c6:a6:7b:3a:1a:bb:8e:79:84:1a:00:0c:84:
b7:7c:0a:11:be:87:6c:54:a1:c2:d6:6f:ea:84:7d:
29:df:fc:2a:44:d9:a5:a1:cb:21:72:3e:ca:59:66:
1f:ab:3a:b6:9d:d4:1f:b0:19:13:54:01:6b:c2:b8:
ec:e0:71:02:4a:70:4e:e7:2f:1d:55:04:83:22:02:
36:78:29:b2:58:76:7f:9e:7e:f4:7e:23:23:d1:7c:
94:12:79:8a:81:8a:57:ec:e1:d3:cc:f8:27:db:93:
20:af:52:f5:7b:5a:6f:05:c6:07:91:42:ae:78:2b:
73:ac:64:b3:32:38:9d:48:1b:a5:4d:f0:2c:97:44:
16:29:ac:ca:36:22:0d:12:4a:a8:3d:ff:ea:fa:74:
27:86:f1:65:25:16:38:4d:17:8d:4a:09:64:2a:7e:
19:67:c4:cc:66:db:40:01:f1:e6:8b:0b:2e:c7:b0:
d4:14:f1:ab:d3:03:d8:27:0f:92:7e:c0:c5:05:85:
5a:8d:da:64:ad:4c:35:75:09:3e:59:35:14:12:f6:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:F6:C8:AF:2D:49:34:3F:AC:A3:56:48:D6:AE:C1:B0:FE:64:05
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:11:69:99:a6:55:e9:ce:86:e2:9f:de:90:8e:2d:de:73:
7f:38:cc:5e:d4:af:49:00:b8:f3:03:22:3b:26:07:fd:13:23:
ea:17:4b:6d:9d:f0:8b:96:12:ae:c3:1c:ff:4b:f3:b3:cc:ed:
83:5d:4a:68:8e:e5:d8:25:78:0f:f7:f3:28:01:20:cd:72:4c:
c0:07:b0:34:53:86:2b:37:53:ae:4e:56:4b:ec:17:f9:b1:be:
88:33:14:31:0d:1b:22:cc:6e:ce:3d:3b:70:a9:cf:ef:b4:c3:
e7:83:45:04:f2:68:ff:5b:e2:4f:6e:03:67:4c:4e:45:c6:3c:
75:1f:89:96:b0:a0:d4:61:85:c5:12:20:b8:f9:74:99:22:67:
ad:2b:77:38:69:19:25:65:e3:2c:6a:37:ca:09:5a:ac:6a:78:
ad:61:3d:6b:bc:e2:33:11:8e:36:5c:a3:5e:a7:a8:3a:10:04:
47:af:cb:9b:94:97:77:18:7e:de:73:0c:c1:f9:88:ae:c6:ef:
2a:a0:f3:69:03:87:30:b2:ac:1c:10:1c:7c:b7:a1:e7:5f:6f:
16:89:1b:4d:be:55:35:37:ab:e5:eb:d7:bb:f1:89:2d:13:75:
df:f6:d7:81:fe:ca:ea:9a:1c:22:d9:71:85:ec:31:d4:e9:21:
04:51:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:41:49 2026 by rpki-client