Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: m+6suOUhV2NEoudk6CdZqg/XdowI6TGEdDX7ZJBVJxk=
Subject key identifier: DD:C0:6A:39:E0:6F:A5:19:39:FD:40:1F:97:C3:C2:11:A2:16:12:9D
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019D9AE2C6FC3EC562375A620B9772A73111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:00:46 +0000
Manifest this update: Fri 17 Apr 2026 10:00:46 +0000
Manifest next update: Sat 18 Apr 2026 10:00:46 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: 1QINfJDwf072pBd/CIxXb26rSi4cSDcgO4khkxqXwF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:c6:fc:3e:c5:62:37:5a:62:0b:97:72:a7:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Apr 17 10:00:46 2026 GMT
Not After : Apr 18 10:00:46 2026 GMT
Subject: CN=ddc06a39e06fa51939fd401f97c3c211a216129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:4b:57:dd:09:de:b9:bd:6e:dd:5f:e2:cb:
cc:ae:98:9b:36:61:dc:55:a8:62:e4:5d:93:2d:b3:
ac:1b:54:57:4e:7b:9c:7b:a3:28:9c:19:c1:47:3d:
c4:f7:a1:09:a0:dc:02:bb:d2:c3:9e:36:e0:b9:8c:
f7:9f:af:53:9b:74:3a:3e:f8:78:74:f1:8a:37:bf:
59:0f:8e:20:4f:ea:17:a5:fa:c4:94:8c:43:73:85:
42:fb:0b:36:d7:b0:7d:17:20:10:f4:ec:50:99:fe:
b5:44:1d:b9:15:47:e9:e2:00:0c:61:a8:d0:5b:28:
bc:c9:f4:eb:33:71:8e:86:45:5d:33:e7:39:16:4f:
c5:bc:e8:08:c7:49:64:6d:c4:b6:37:26:80:57:aa:
f2:07:47:24:2e:48:b6:ca:b4:b9:25:45:1c:a3:9b:
9b:b9:0d:b9:13:6c:c8:c7:45:af:a1:37:76:50:7d:
81:9b:61:b7:0c:cc:15:af:c6:f2:e2:be:f5:7a:f9:
08:2a:12:db:e7:e7:64:9a:48:8c:77:58:f5:3e:ac:
bb:9b:2b:21:e6:5f:4a:3c:f4:db:fe:da:15:c1:a8:
0f:5a:b4:8f:ab:59:c8:d7:d2:6a:71:e4:b0:0b:98:
e5:2f:d2:d9:d4:5b:98:5c:dc:0a:ac:14:f7:c6:30:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:6A:39:E0:6F:A5:19:39:FD:40:1F:97:C3:C2:11:A2:16:12:9D
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1d:b3:19:99:31:10:5a:30:54:40:4b:e9:c6:a8:f2:30:18:
c9:a4:19:92:3f:2f:03:0a:bd:bc:91:98:7e:e6:e0:13:af:bd:
f3:85:fb:9b:15:71:4e:8a:22:76:9f:91:f2:52:6f:4a:05:10:
65:ac:c3:e4:b2:7a:c5:a7:bb:46:88:d8:75:98:6d:17:0e:a9:
a4:76:31:04:a3:12:8f:50:3c:a3:0b:fe:de:27:15:b5:61:d9:
05:84:ba:2d:82:44:1d:74:31:f4:a1:06:c3:83:16:f8:fa:05:
25:0e:d7:2f:22:fe:a0:e5:f7:6b:90:8a:5c:fb:6c:84:71:ec:
64:38:e1:c3:23:62:ad:11:b2:40:6a:97:9a:fd:2c:1f:ac:f6:
d8:bd:d2:f5:c2:aa:af:59:6d:f1:e6:27:e1:9f:c7:ff:fd:7a:
90:59:a3:84:a3:fe:da:6e:c2:73:a5:6b:6d:01:f7:06:35:66:
07:bd:8b:29:07:dd:e4:c6:2e:22:7b:48:12:d7:1f:c9:43:34:
02:85:5b:5f:b0:8c:a6:cc:68:f7:e8:31:7a:bd:46:e6:86:a7:
d5:54:ae:46:ef:9b:5b:a0:97:79:04:d3:60:5e:e1:df:51:4f:
c5:ac:5a:ce:f3:d4:5e:1a:8c:6d:b0:9e:34:c7:03:ec:1f:d9:
9b:6b:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:00 2026 by rpki-client