Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: f3sIRYjoim6ZmBqwq7lAq7GwBkicFpYjAGcZY/GJ4mU=
Subject key identifier: 18:E2:A5:B5:2D:56:D8:2A:02:A3:2E:5D:41:9D:0B:91:67:9B:FA:D8
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 01A0BD6708D2D4AC3FA66620968BB65A43E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 09CF
Signing time: Sun 20 Sep 2026 06:00:41 +0000
Manifest this update: Sun 20 Sep 2026 06:00:41 +0000
Manifest next update: Mon 21 Sep 2026 06:00:41 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: MUmfOPxUo1ym27iA9yba4cBrRdQ.roa (hash: E3+bxe+6Z8vivRrWSF3M1TLEwkKZ68GGPJwJrdpmg1k=)
3: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: TKYj/xMLsCrKWXO0asOPmb8AmOLVtsemubBF2zm8204=)
4: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:67:08:d2:d4:ac:3f:a6:66:20:96:8b:b6:5a:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Sep 20 06:00:41 2026 GMT
Not After : Sep 21 06:00:41 2026 GMT
Subject: CN=18e2a5b52d56d82a02a32e5d419d0b91679bfad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:76:61:46:fa:31:2c:61:38:15:40:d5:2d:
51:5c:11:34:fb:9e:79:fc:38:47:f5:dc:1e:e3:9a:
dd:73:d1:fd:58:32:41:77:18:da:a2:fe:62:0f:c3:
91:2f:56:e3:5e:dc:6f:60:77:a4:ab:56:a2:ee:be:
db:55:88:8c:b2:9b:3d:6d:51:f1:3f:0f:55:c1:b9:
c9:71:1c:51:20:d5:58:68:b3:3b:00:08:b5:07:b7:
ba:1e:00:be:aa:ce:1c:7c:dd:cc:fa:af:6f:50:06:
fe:f8:17:55:b8:15:3b:03:0d:f9:f7:e7:1f:77:69:
cc:ae:4c:b3:49:f2:17:22:8c:85:24:7b:f7:06:3f:
a0:37:f6:3f:00:d2:2f:0b:25:1c:e4:66:d2:ec:97:
2f:cd:48:31:c8:b3:d8:68:39:6a:2d:5e:46:87:94:
f6:01:a7:fe:81:1d:46:e0:df:4e:e4:9a:dd:5e:c8:
f3:25:58:b0:10:e9:97:09:37:f1:57:5e:a3:8f:9d:
18:e8:47:f8:64:c5:87:2d:99:81:26:c1:a4:03:7e:
f2:19:55:da:1a:86:b5:f5:1c:29:b9:75:14:c5:ad:
d6:36:73:2a:65:db:b2:82:8a:98:c7:25:99:30:56:
a1:ba:f9:2d:94:03:63:26:05:5e:cc:bb:f1:a0:66:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:A5:B5:2D:56:D8:2A:02:A3:2E:5D:41:9D:0B:91:67:9B:FA:D8
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0e:7c:e5:d8:20:d7:b9:4e:8f:53:29:46:bc:98:f8:d0:77:
8c:33:24:8b:3d:74:a7:6a:53:4a:c1:e6:65:5b:6f:50:a0:32:
e7:ce:55:68:01:82:cc:e9:e4:69:d6:80:86:04:74:68:90:85:
b0:d5:77:23:33:dd:ff:18:89:5f:3c:9b:9a:89:fb:b7:c8:6d:
f9:f1:fa:ba:58:fc:2e:73:b4:ad:5f:c2:7b:f6:41:ee:83:ff:
b4:48:8b:e8:d1:26:03:e5:bc:1f:b4:66:6c:50:19:6d:b0:a6:
8d:fa:7b:e4:57:02:24:cb:90:db:d9:1d:d6:9a:21:ac:28:ca:
3d:e1:e5:43:6d:80:26:95:23:f6:de:bc:b6:f5:17:d6:89:0f:
f4:3f:3f:70:7c:e7:38:9f:ff:24:2a:c5:73:ea:1e:6a:18:54:
7f:54:58:d1:fb:52:ad:1d:ba:6f:04:a5:e4:ce:60:02:2d:87:
74:77:fb:ff:48:56:37:a3:48:16:ac:61:9e:20:6b:7f:f6:0e:
87:a2:01:03:43:ad:c9:4d:dc:f3:ba:36:4b:38:57:ca:74:88:
c3:80:2c:d1:fe:cf:87:23:46:82:80:89:62:64:45:28:7e:fd:
b2:ce:0d:d2:82:eb:92:06:e6:e7:8c:2c:f9:bf:54:f7:20:e8:
2b:21:fb:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9ZwjS1Kw/pmYglou2WkPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx
ODJhOWMwHhcNMjYwOTIwMDYwMDQxWhcNMjYwOTIxMDYwMDQxWjAzMTEwLwYDVQQD
EygxOGUyYTViNTJkNTZkODJhMDJhMzJlNWQ0MTlkMGI5MTY3OWJmYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsh2YUb6MSxhOBVA1S1RXBE0+555
/DhH9dwe45rdc9H9WDJBdxjaov5iD8ORL1bjXtxvYHekq1ai7r7bVYiMsps9bVHx
Pw9VwbnJcRxRINVYaLM7AAi1B7e6HgC+qs4cfN3M+q9vUAb++BdVuBU7Aw359+cf
d2nMrkyzSfIXIoyFJHv3Bj+gN/Y/ANIvCyUc5GbS7JcvzUgxyLPYaDlqLV5Gh5T2
Aaf+gR1G4N9O5JrdXsjzJViwEOmXCTfxV16jj50Y6Ef4ZMWHLZmBJsGkA37yGVXa
Goa19RwpuXUUxa3WNnMqZduygoqYxyWZMFahuvktlANjJgVezLvxoGZu8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjipbUtVtgqAqMuXUGdC5Fnm/rYMB8GA1UdIwQY
MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt
NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl
LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw585dgg
17lOj1MpRryY+NB3jDMkiz10p2pTSsHmZVtvUKAy585VaAGCzOnkadaAhgR0aJCF
sNV3IzPd/xiJXzybmon7t8ht+fH6ulj8LnO0rV/Ce/ZB7oP/tEiL6NEmA+W8H7Rm
bFAZbbCmjfp75FcCJMuQ29kd1pohrCjKPeHlQ22AJpUj9t68tvUX1okP9D8/cHzn
OJ//JCrFc+oeahhUf1RY0ftSrR26bwSl5M5gAi2HdHf7/0hWN6NIFqxhniBrf/YO
h6IBA0OtyU3c87o2SzhXynSIw4As0f7PhyNGgoCJYmRFKH79ss4N0oLrkgbm54ws
+b9U9yDoKyH7kw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:47:23 2026 by rpki-client