Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: GSvpzPrmbsHqohpTAtFYcCWCZmqEwKbA5htADgxkCE0=
Subject key identifier: 29:86:58:36:B2:BB:89:E7:74:88:E8:4C:B3:26:2F:D7:A2:87:2E:CA
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019FAA1A52F58007FD7E35DD4F871A26EAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0940
Signing time: Tue 28 Jul 2026 19:01:19 +0000
Manifest this update: Tue 28 Jul 2026 19:01:19 +0000
Manifest next update: Wed 29 Jul 2026 19:01:19 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: qDIcJaefVVWkmslcsdV+TntLztwwN4A+4Co/LcA/5n4=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:52:f5:80:07:fd:7e:35:dd:4f:87:1a:26:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jul 28 19:01:19 2026 GMT
Not After : Jul 29 19:01:19 2026 GMT
Subject: CN=29865836b2bb89e77488e84cb3262fd7a2872eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:3a:af:35:d2:c5:66:d8:9e:9a:51:e3:ec:
c1:63:b7:c4:5d:92:1b:cc:49:1b:6c:20:a8:68:44:
a4:42:fd:dd:9e:5a:45:34:55:4f:63:d0:59:34:d8:
5e:34:87:9d:43:eb:ae:b4:d2:dc:26:3a:3c:7a:a5:
52:a3:61:37:41:42:65:79:31:a1:a4:ad:17:b2:60:
7c:0a:36:eb:e2:81:93:60:a5:ce:cc:a5:b4:e7:3a:
ed:a8:12:de:08:63:25:0c:08:8e:5f:64:a2:45:a2:
aa:24:46:b0:bc:7f:6b:a7:36:86:62:43:0d:23:d2:
56:bd:e9:ad:d3:1d:f8:70:72:2d:8c:57:e1:d1:8b:
44:29:68:9a:cc:6a:63:09:8d:6a:13:98:b8:1d:bc:
84:28:17:69:6c:86:fe:26:14:e4:dd:8a:27:e8:a7:
07:5b:d7:38:6f:ba:b6:38:28:f2:14:3f:5f:69:61:
f9:49:05:5d:a2:25:8a:0d:7b:27:40:72:99:45:dd:
99:f0:78:9f:98:90:6a:91:ee:e0:aa:14:f0:c6:6d:
07:6a:d0:05:13:6a:81:2a:26:52:42:89:39:71:69:
de:d9:67:b9:af:2a:f8:c9:88:93:8c:d0:4f:06:19:
6c:1e:d9:d4:d2:b1:5a:48:49:ce:f3:d4:f2:cc:ae:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:58:36:B2:BB:89:E7:74:88:E8:4C:B3:26:2F:D7:A2:87:2E:CA
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:44:94:4c:26:76:1a:2f:71:50:bb:49:dc:3e:7c:bf:de:1d:
0b:73:95:9c:27:a3:c1:1c:a2:c5:c6:b4:01:fb:00:77:bb:0e:
fe:b4:f5:d6:61:4c:b0:ce:6c:31:8d:31:be:cd:4b:32:ce:b4:
fa:95:01:48:39:aa:f3:e7:e0:8a:dd:0e:ca:b6:da:bf:27:8e:
2b:28:2e:61:0a:3f:37:e3:62:b3:49:c9:4c:49:37:d8:a0:23:
73:17:70:8d:46:69:de:60:f9:0d:b0:93:46:03:08:9c:b7:a5:
f0:1b:71:dd:10:ab:bf:5d:c2:c6:49:45:a8:44:3a:00:45:44:
cf:ed:ff:c7:1d:cf:53:e7:00:84:8e:8a:45:96:01:7d:d8:31:
59:61:f6:f8:aa:07:ef:bd:e1:4b:4b:1e:ff:21:fc:aa:34:69:
0d:06:bc:3e:67:aa:80:97:f0:d1:61:ba:5e:75:d2:ec:8a:2e:
d1:ba:27:ab:f1:a3:e8:32:f9:f6:51:e3:4e:85:a4:51:ec:6a:
b2:84:8e:51:5a:02:86:9b:39:22:2f:3f:cd:76:6e:69:e4:5e:
9c:69:34:76:e0:0d:da:7e:ad:35:94:c4:6b:1d:60:59:21:4d:
30:72:00:48:69:9f:c6:55:d1:5f:22:2c:d7:d6:bc:53:06:8f:
93:01:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:39 2026 by rpki-client