Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: 4NOf5RVPei8NAqaA5TcmJj/6nNPK0Vk/vA8azF/p21o=
Subject key identifier: 0D:3D:0E:16:13:C3:5F:7D:C9:43:3D:36:01:63:E1:5E:FF:9D:AF:18
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019D9962D99ABC92A4DF2BBBEAC8653A1745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0A2B
Signing time: Fri 17 Apr 2026 03:01:24 +0000
Manifest this update: Fri 17 Apr 2026 03:01:24 +0000
Manifest next update: Sat 18 Apr 2026 03:01:24 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: mAu8z4gUWTUSyL6sPYdx6rqPw6d4rQ/FmRwqacLy6Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d9:9a:bc:92:a4:df:2b:bb:ea:c8:65:3a:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Apr 17 03:01:24 2026 GMT
Not After : Apr 18 03:01:24 2026 GMT
Subject: CN=0d3d0e1613c35f7dc9433d360163e15eff9daf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:db:e1:41:83:97:47:3b:2d:29:92:96:34:
82:06:82:89:03:f9:af:28:c5:b5:ac:5f:ae:a5:3e:
12:d7:38:c9:09:67:8f:8d:0f:fa:d9:46:93:de:75:
31:cd:62:4b:2e:47:78:68:01:6d:36:3c:b9:2e:5c:
44:68:60:32:d4:09:30:76:f1:a6:e4:1f:72:50:92:
f3:21:04:97:ca:78:4b:81:7e:79:21:96:05:2c:a5:
3e:64:d1:d3:57:bf:8d:1a:71:fe:5d:23:09:0a:fd:
d3:fa:b4:61:49:5b:9a:75:f7:7c:4d:8a:f0:10:65:
01:4a:df:be:f1:d7:df:32:62:a0:54:3c:3c:6a:e9:
85:39:d9:43:d3:03:80:cb:99:0b:3d:74:c1:61:3f:
33:30:b1:1f:79:bf:42:2a:09:d7:a1:88:7b:45:54:
21:59:7c:f3:7a:58:32:1e:d9:9a:1e:f9:7d:e6:32:
15:58:f7:57:83:ee:92:45:e8:8e:9e:ef:36:f4:b8:
eb:5a:83:58:f5:f8:8b:78:2e:7a:f0:db:92:bc:3a:
3c:ce:2e:0a:16:dd:a6:e1:7e:ec:ec:0d:d6:a3:d4:
0d:23:a7:55:fd:ad:88:d2:be:1a:47:88:e0:13:a1:
68:1e:b7:f9:f9:01:42:ee:39:a2:d8:9c:a5:b2:da:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:0E:16:13:C3:5F:7D:C9:43:3D:36:01:63:E1:5E:FF:9D:AF:18
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:ba:a1:85:af:ab:df:3a:91:fc:99:08:72:c4:bc:11:c3:
42:4a:2f:cf:01:a0:f9:38:d8:33:a5:49:7b:81:6e:ac:7e:d6:
85:a7:86:67:aa:df:b9:91:09:6f:f4:01:3f:7b:79:b0:f8:52:
3e:30:94:9f:c0:c6:76:d9:8f:63:bb:9a:98:63:13:06:49:4f:
03:f7:76:81:f1:36:c7:66:d1:95:6a:3a:c3:f1:c3:4d:0d:ef:
b5:70:16:07:85:d3:d2:99:cf:98:13:96:b3:9a:45:75:77:be:
98:82:8f:88:33:82:2e:32:c2:3f:b4:ff:6f:b7:87:38:49:b2:
ec:46:2a:ca:e0:45:fa:ef:19:26:0f:bd:fb:94:18:8c:3a:3e:
21:60:68:ef:cf:01:6f:7d:0d:bc:0f:ca:9a:dc:32:8f:38:67:
df:72:f3:c3:6b:6a:57:17:41:e0:34:42:28:b1:53:9f:a0:29:
5f:a3:4b:ec:8b:fa:c8:0f:f7:d0:9c:2b:b1:35:1f:58:c6:f4:
d3:f6:35:cd:cb:06:98:3d:2e:d8:09:a4:9d:a1:07:52:55:96:
d9:89:5f:04:e5:70:b8:94:a4:3c:ba:ff:8b:19:a1:eb:0f:ef:
c5:2b:27:e2:92:18:bf:f4:63:9a:fe:63:b2:7b:95:f1:e2:af:
94:46:64:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYtmavJKk3yu76shlOhdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl
YjdiMjQwHhcNMjYwNDE3MDMwMTI0WhcNMjYwNDE4MDMwMTI0WjAzMTEwLwYDVQQD
EygwZDNkMGUxNjEzYzM1ZjdkYzk0MzNkMzYwMTYzZTE1ZWZmOWRhZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTfb4UGDl0c7LSmSljSCBoKJA/mv
KMW1rF+upT4S1zjJCWePjQ/62UaT3nUxzWJLLkd4aAFtNjy5LlxEaGAy1AkwdvGm
5B9yUJLzIQSXynhLgX55IZYFLKU+ZNHTV7+NGnH+XSMJCv3T+rRhSVuadfd8TYrw
EGUBSt++8dffMmKgVDw8aumFOdlD0wOAy5kLPXTBYT8zMLEfeb9CKgnXoYh7RVQh
WXzzelgyHtmaHvl95jIVWPdXg+6SReiOnu829LjrWoNY9fiLeC568NuSvDo8zi4K
Ft2m4X7s7A3Wo9QNI6dV/a2I0r4aR4jgE6FoHrf5+QFC7jmi2Jylstq7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA09DhYTw199yUM9NgFj4V7/na8YMB8GA1UdIwQY
MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt
Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3
LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq+6oYWv
q986kfyZCHLEvBHDQkovzwGg+TjYM6VJe4FurH7WhaeGZ6rfuZEJb/QBP3t5sPhS
PjCUn8DGdtmPY7uamGMTBklPA/d2gfE2x2bRlWo6w/HDTQ3vtXAWB4XT0pnPmBOW
s5pFdXe+mIKPiDOCLjLCP7T/b7eHOEmy7EYqyuBF+u8ZJg+9+5QYjDo+IWBo788B
b30NvA/Kmtwyjzhn33Lzw2tqVxdB4DRCKLFTn6ApX6NL7Iv6yA/30JwrsTUfWMb0
0/Y1zcsGmD0u2AmknaEHUlWW2YlfBOVwuJSkPLr/ixmh6w/vxSsn4pIYv/Rjmv5j
snuV8eKvlEZkzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:41 2026 by rpki-client