Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: jvy1ikwXU33pdsXhUZCfmHBbzhnI5Py7zrGAXV+VH2k=
Subject key identifier: E3:10:C8:1E:B4:67:39:81:84:92:9C:1D:69:FF:05:B8:96:D2:4A:C0
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019CADC81BE712738BA1D8D14179952D1D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 09B1
Signing time: Mon 02 Mar 2026 09:01:38 +0000
Manifest this update: Mon 02 Mar 2026 09:01:38 +0000
Manifest next update: Tue 03 Mar 2026 09:01:38 +0000
Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: VwTfERE7R5sP/pAuKp2Ce3IpQH1E0KNetCHzk9QMDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1b:e7:12:73:8b:a1:d8:d1:41:79:95:2d:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Mar 2 09:01:38 2026 GMT
Not After : Mar 3 09:01:38 2026 GMT
Subject: CN=e310c81eb467398184929c1d69ff05b896d24ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:7b:b8:19:f0:7d:06:61:5f:95:ee:fa:c7:
f9:a6:49:22:78:b6:d6:9b:36:48:4e:6b:89:d5:a8:
0b:da:13:66:e4:4c:13:9b:b8:31:9d:05:9e:0f:c1:
80:de:1a:42:4e:8f:31:74:62:0c:dd:47:9d:db:8c:
73:56:a0:70:e1:7c:c3:0e:4f:7c:db:fb:3f:92:d4:
1d:10:d0:57:3b:29:7b:f9:9c:b2:33:18:f4:be:c6:
f6:e9:2a:72:e2:d5:9f:75:68:3c:15:96:4c:79:13:
4f:7b:0a:2c:70:87:e2:24:24:ea:eb:93:cf:d8:dc:
95:61:1b:e0:3f:f9:99:52:1c:0c:b9:34:7a:78:3e:
82:a0:84:bf:5b:80:e2:98:ac:98:ff:9f:16:6f:df:
33:3d:ec:7a:7a:b4:5e:70:d5:0d:a4:72:10:57:e9:
36:1a:da:8f:0a:3b:ee:26:e4:67:f9:a0:78:81:2b:
41:90:e2:21:e3:13:4c:8d:40:6e:f4:de:29:c0:9a:
dd:f1:6a:eb:72:f0:a4:df:36:25:b5:66:ec:3a:64:
95:78:d2:99:0f:1a:90:92:11:92:b3:45:ce:4b:40:
0f:d6:dd:0c:af:5b:a2:79:7f:5f:be:e2:40:b2:00:
d9:be:66:1d:e7:d2:57:a9:18:d3:91:20:9f:75:94:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:C8:1E:B4:67:39:81:84:92:9C:1D:69:FF:05:B8:96:D2:4A:C0
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:34:53:1e:15:21:b7:a2:08:6d:83:5a:54:c0:d4:c3:2f:34:
a3:a3:dc:92:e9:8c:be:c9:4d:5f:bd:62:1b:e3:fb:fe:99:25:
19:58:80:1c:9f:6d:f1:a8:79:82:2e:08:ad:f2:fa:c6:52:9a:
98:3e:6d:62:fe:5f:26:3c:d0:63:8d:3f:95:64:89:83:69:2b:
44:fe:dd:99:39:2e:5c:0d:53:32:bf:9c:21:c7:a6:92:d2:9a:
e2:fb:63:cb:fb:9c:85:fd:d2:89:05:4f:04:a9:f1:d0:1f:3a:
af:9f:1a:3b:cd:e2:54:46:2f:17:1d:f9:e2:46:18:87:79:f0:
9e:04:78:b2:49:79:f8:2a:ba:a1:c9:1d:22:35:4f:43:72:77:
66:84:3e:15:06:91:1c:a4:43:83:b6:a9:70:46:c9:1a:46:d8:
de:ef:42:f4:ca:48:c0:1d:49:b4:41:eb:c0:4b:2d:fb:5f:4b:
5f:bd:ce:ce:f4:b8:b8:ad:37:6b:63:06:7b:20:48:13:96:1e:
e2:b3:df:df:68:76:32:ae:83:ce:7d:ad:b0:d2:57:4b:f2:e2:
20:bc:0e:b8:5a:b6:a8:fd:28:dd:48:99:4a:9a:78:b5:72:25:
3e:31:59:1f:9f:9d:f3:b9:83:4b:70:4a:4b:87:cf:f6:ba:76:
d7:11:ae:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyBvnEnOLodjRQXmVLR0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl
YjdiMjQwHhcNMjYwMzAyMDkwMTM4WhcNMjYwMzAzMDkwMTM4WjAzMTEwLwYDVQQD
EyhlMzEwYzgxZWI0NjczOTgxODQ5MjljMWQ2OWZmMDViODk2ZDI0YWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D97uBnwfQZhX5Xu+sf5pkkieLbW
mzZITmuJ1agL2hNm5EwTm7gxnQWeD8GA3hpCTo8xdGIM3Ued24xzVqBw4XzDDk98
2/s/ktQdENBXOyl7+ZyyMxj0vsb26Spy4tWfdWg8FZZMeRNPewoscIfiJCTq65PP
2NyVYRvgP/mZUhwMuTR6eD6CoIS/W4DimKyY/58Wb98zPex6erRecNUNpHIQV+k2
GtqPCjvuJuRn+aB4gStBkOIh4xNMjUBu9N4pwJrd8WrrcvCk3zYltWbsOmSVeNKZ
DxqQkhGSs0XOS0AP1t0Mr1uieX9fvuJAsgDZvmYd59JXqRjTkSCfdZQ1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMQyB60ZzmBhJKcHWn/BbiW0krAMB8GA1UdIwQY
MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt
Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3
LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTRTHhUh
t6IIbYNaVMDUwy80o6PckumMvslNX71iG+P7/pklGViAHJ9t8ah5gi4IrfL6xlKa
mD5tYv5fJjzQY40/lWSJg2krRP7dmTkuXA1TMr+cIcemktKa4vtjy/uchf3SiQVP
BKnx0B86r58aO83iVEYvFx354kYYh3nwngR4skl5+Cq6ockdIjVPQ3J3ZoQ+FQaR
HKRDg7apcEbJGkbY3u9C9MpIwB1JtEHrwEst+19LX73OzvS4uK03a2MGeyBIE5Ye
4rPf32h2Mq6Dzn2tsNJXS/LiILwOuFq2qP0o3UiZSpp4tXIlPjFZH5+d87mDS3BK
S4fP9rp21xGuIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:50:01 2026 by rpki-client