Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 7ioxwt0IPUU88aH+vSNNxPoAtCaIWfT/GNyPqtPD/Gc=
Subject key identifier: E7:23:C7:45:F0:7C:E1:DE:9E:4E:C7:7E:74:D1:FB:9D:C6:42:67:D6
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019CC4BCBFF408163E66CB1352DE5C5C2275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 1406
Signing time: Fri 06 Mar 2026 20:00:30 +0000
Manifest this update: Fri 06 Mar 2026 20:00:30 +0000
Manifest next update: Sat 07 Mar 2026 20:00:30 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: lKLUuNjNbDZJ/IYgh/tNiL5W5cXfX4GYxfja7oncfJw=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:bc:bf:f4:08:16:3e:66:cb:13:52:de:5c:5c:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Mar 6 20:00:30 2026 GMT
Not After : Mar 7 20:00:30 2026 GMT
Subject: CN=e723c745f07ce1de9e4ec77e74d1fb9dc64267d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:39:0f:44:10:1a:f7:64:62:37:f9:6b:68:
65:36:e0:43:ed:34:76:42:37:f0:9a:f0:a5:cc:41:
8b:2a:3f:d3:5b:84:24:6d:90:80:78:b6:78:2a:0f:
f4:da:7c:cb:0f:59:fe:c0:0a:59:a8:a7:cd:6d:14:
c6:7f:66:41:5c:75:cb:9b:9a:a5:a4:10:0b:41:fa:
d5:6b:e5:a6:29:5c:ea:f0:17:4a:f8:73:92:80:8a:
06:31:43:97:e9:18:33:e2:72:53:63:3b:67:88:8f:
61:f5:26:e9:e1:b7:80:35:80:a4:de:47:44:b7:c7:
9c:50:df:a3:42:d2:a5:d7:d2:e3:7a:4a:12:6c:4d:
7a:00:58:ce:c0:45:5e:4f:13:c8:a1:5a:5f:33:d0:
fa:87:ae:98:ab:9f:bf:74:5a:3a:7e:e0:38:46:1f:
d6:68:a3:a7:c8:2b:1e:f4:4b:2f:b6:33:f9:4d:92:
e0:38:f0:7a:85:1b:d4:1f:34:a9:3f:f5:85:08:be:
ea:ed:3b:3c:b2:32:7a:c2:cb:35:8a:35:f5:6f:8b:
47:dc:f4:f0:e1:5e:e4:28:eb:a8:1f:9e:fb:d6:89:
0e:a3:fa:aa:13:9b:27:e2:d4:eb:e2:c7:fb:41:b4:
b6:9c:bc:fb:a2:e4:4f:db:9f:5a:17:67:18:ed:e3:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:C7:45:F0:7C:E1:DE:9E:4E:C7:7E:74:D1:FB:9D:C6:42:67:D6
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:aa:ab:fe:db:4f:5b:6d:42:80:fb:41:0d:4c:34:ff:a9:
ab:53:ea:d3:d2:f6:b7:ae:a8:98:fb:9a:ad:af:de:e5:51:f7:
a9:15:68:c5:f3:2d:eb:07:61:74:03:de:31:a2:02:5e:42:70:
c4:57:1f:b7:44:68:9c:db:1e:16:1c:e5:90:9f:69:b6:f8:5b:
84:32:01:d5:4b:05:f2:35:38:d3:92:22:d2:42:69:5d:94:1c:
6c:3b:96:4c:93:27:00:e5:1e:06:af:88:7e:3d:53:4a:b6:2e:
5a:f3:c2:47:55:c9:cc:3c:99:9e:a4:7e:95:8c:d8:02:9d:80:
ca:7d:15:2c:54:04:f6:15:d9:41:a8:a6:f1:6d:47:f9:d2:32:
4f:dc:26:f2:58:b4:32:53:bd:8a:88:e4:04:fa:0e:07:2c:a8:
c8:7c:1a:03:c3:ad:7c:35:dd:96:d1:05:a3:7f:97:fa:fc:7b:
59:ab:8a:d6:67:2b:33:36:ff:87:fb:7d:a4:34:9e:0c:55:46:
b7:ed:89:db:a1:6e:74:5a:59:4e:fa:71:8d:32:81:4b:56:74:
fb:55:9b:e7:36:34:83:4c:20:e2:6a:4e:1c:41:ee:e7:98:dc:
b9:bf:eb:ec:b7:57:73:aa:24:9c:40:6a:8e:39:be:21:11:08:
eb:eb:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 05:32:33 2026 by rpki-client