Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: M3o3s3r8EergANB0Qb44+4eKW1fdd61REMB7CwMaO3s=
Subject key identifier: 2D:B7:6A:C8:B9:FE:7B:A7:82:E8:DA:5D:D8:B3:7B:AD:5B:84:2B:2F
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 01A0C858BB6A17469DEC3E65D38ECF253427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0BD1
Signing time: Tue 22 Sep 2026 09:00:53 +0000
Manifest this update: Tue 22 Sep 2026 09:00:53 +0000
Manifest next update: Wed 23 Sep 2026 09:00:53 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: smB0cP5OOeoDttV59qOgwCrukwhJ8fs++YC33OHu+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:bb:6a:17:46:9d:ec:3e:65:d3:8e:cf:25:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Sep 22 09:00:53 2026 GMT
Not After : Sep 23 09:00:53 2026 GMT
Subject: CN=2db76ac8b9fe7ba782e8da5dd8b37bad5b842b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:77:22:ce:a5:39:31:38:12:44:71:aa:48:
fd:a1:22:12:76:52:2d:11:f2:6e:42:a6:cb:76:4e:
d9:6d:ee:d1:60:31:08:e7:ea:50:c7:03:c7:8c:0a:
6e:e1:ea:7f:81:b5:ad:d6:70:7a:c5:56:8a:82:6a:
45:ed:64:7e:67:c4:e0:91:4c:c7:41:74:ef:09:b0:
5f:68:cb:af:29:94:c7:33:4a:a7:f9:9d:3f:d0:31:
a5:b5:d9:4a:0e:ba:9b:33:91:69:16:47:00:d4:2e:
af:30:f6:ff:8a:2e:e5:f0:04:96:a8:e0:26:24:fa:
0e:c7:91:28:0e:df:1a:07:eb:1a:d2:de:b2:61:aa:
40:45:c7:89:1e:e7:98:80:c4:69:7f:c5:91:d3:ff:
b3:72:f4:36:c7:6f:db:53:14:20:84:97:07:50:68:
87:a8:3e:90:b5:37:b7:bc:5c:7e:d8:f0:0a:4b:a1:
c1:70:f3:ee:90:2a:55:f0:f4:8a:43:ea:1e:c9:b6:
f8:0a:8b:d0:2b:7e:1c:c8:61:fe:5e:01:7a:8d:46:
1f:c7:03:60:41:18:87:c2:d2:e7:d8:6a:64:18:57:
12:48:4b:e9:5e:5b:0d:f2:d0:b4:67:33:3d:67:38:
36:2d:b0:c7:33:eb:fe:7d:97:93:a2:e1:b0:a7:60:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:6A:C8:B9:FE:7B:A7:82:E8:DA:5D:D8:B3:7B:AD:5B:84:2B:2F
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ec:05:d5:e8:86:ef:f1:6b:09:57:c1:74:e3:72:c0:12:75:
05:89:40:66:74:e8:5b:47:f2:61:d8:c1:20:09:d3:ca:2c:f6:
47:96:cc:c4:38:88:05:87:cb:49:4f:63:63:b5:08:2b:59:ab:
95:81:ca:32:48:e1:02:29:07:b8:8b:52:aa:6f:ba:bd:69:da:
cd:bc:ef:70:2b:ae:d7:d7:e8:ee:3b:5a:52:38:b5:07:e5:82:
94:ea:16:14:ac:cb:c6:19:02:50:54:ce:ea:30:5a:b7:3b:f0:
9d:1c:59:b6:8b:2f:92:d4:aa:61:2b:63:d7:9b:cc:fb:43:99:
4f:81:a6:0b:ce:16:10:29:39:66:c6:48:10:49:08:2a:6f:83:
fc:45:9b:0e:5d:48:68:32:19:f6:5b:d3:c6:3c:51:c1:cb:73:
42:5e:9e:3a:67:74:17:bd:d1:22:d6:65:cb:d2:a6:2b:7a:9d:
dc:66:74:4c:34:e5:b1:67:0e:8f:e4:b2:24:db:05:1d:d0:46:
17:ea:84:93:28:37:c8:8f:23:cf:30:4a:73:9b:fa:b5:0b:92:
9a:81:4c:7d:30:33:d8:c7:13:c7:df:5a:ef:2f:20:d9:7c:c1:
56:96:66:2f:b9:18:2e:89:e1:b7:a1:76:5e:81:25:05:93:92:
15:95:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:15:42 2026 by rpki-client