Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: DM0oXTSrN0j8sKZiEszs3exwT3+MQ2XAPy9+516Kpb4=
Subject key identifier: 65:B9:0E:24:45:2D:13:C3:FB:33:99:FD:CF:58:B0:6F:94:67:01:6F
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019D98F43990BE511BEC5F23943EC6084857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 082E
Signing time: Fri 17 Apr 2026 01:00:35 +0000
Manifest this update: Fri 17 Apr 2026 01:00:35 +0000
Manifest next update: Sat 18 Apr 2026 01:00:35 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: DEZy3DW3+W6yxXkzY+NVHDjLcIwgOQo6raLjwcHyPJU=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:39:90:be:51:1b:ec:5f:23:94:3e:c6:08:48:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Apr 17 01:00:35 2026 GMT
Not After : Apr 18 01:00:35 2026 GMT
Subject: CN=65b90e24452d13c3fb3399fdcf58b06f9467016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:bc:d1:94:2c:2c:67:9b:0c:48:b4:7d:72:
52:ba:e3:c7:f2:52:ff:32:76:06:1a:86:e6:55:b4:
41:79:c4:a5:07:7f:ab:53:64:e3:a6:f6:fa:06:ac:
f3:e4:10:84:4b:e4:98:eb:9e:7e:1b:f5:4c:51:72:
fe:b6:42:8d:21:b7:47:2b:01:4b:cf:95:ba:eb:45:
1f:99:da:52:d6:e7:69:31:62:a3:ca:95:94:03:ff:
e9:37:ad:e8:81:0d:9b:fe:44:2d:3a:49:51:dd:19:
2e:8b:cf:1d:58:46:4a:ac:4c:45:86:26:88:e5:02:
1e:5b:d4:2e:44:65:98:34:68:ef:86:a2:91:b6:c3:
35:69:17:06:25:f6:af:2d:7e:07:aa:14:91:f3:c1:
60:09:be:fe:db:a1:c2:fa:12:91:80:93:4e:d2:cb:
2c:4c:73:5b:c2:50:39:36:57:d7:a4:33:43:98:f5:
e6:5d:b6:b7:8f:86:ae:04:62:2f:6c:75:3d:21:5e:
32:13:78:4c:ee:1a:7a:c9:b4:4e:23:cc:ab:31:da:
b3:49:2d:1f:2d:30:cd:01:d5:9b:da:56:51:06:5a:
11:44:6e:50:98:fc:a0:1f:e6:0a:e6:d5:83:e5:f0:
bf:e6:c5:10:7a:30:82:a6:25:80:b1:d9:5b:ef:0e:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B9:0E:24:45:2D:13:C3:FB:33:99:FD:CF:58:B0:6F:94:67:01:6F
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:1b:2f:cf:da:80:ca:85:77:03:f4:83:bf:ed:a1:e4:b8:
c7:e1:53:ab:81:b9:54:d5:aa:c1:36:01:ba:51:e8:53:24:72:
73:de:28:d8:a7:9a:92:83:c1:9a:15:17:21:d0:97:28:8d:82:
54:87:13:36:bb:da:3d:d2:49:d7:65:86:23:d5:70:2e:f1:80:
ba:c9:a2:3a:8a:e9:2f:35:4f:a3:15:89:8a:51:4a:be:90:0e:
d3:d0:6e:3a:a1:81:6e:d0:c6:27:96:6b:1c:d7:30:f9:2d:63:
00:b2:bf:1b:fe:39:c6:14:ed:e2:e2:f3:02:a4:fa:f5:33:83:
6d:76:0e:f6:82:50:9b:c9:6c:d2:d3:2e:ec:2a:ed:31:44:b1:
b1:a6:e4:0e:bf:ed:f7:d2:36:e7:cc:c4:e2:88:dd:3c:96:5d:
3b:a8:68:a8:89:15:ba:d9:ad:29:14:18:a0:0f:52:04:14:0c:
10:43:0a:fc:77:aa:4b:ef:8e:7c:c2:e9:e9:04:04:9b:45:d9:
0c:6f:ba:90:d3:2d:59:bf:8b:31:1d:25:05:32:e1:85:68:55:
f2:f6:01:09:cd:cf:12:ea:08:64:84:07:da:e8:39:ca:28:60:
2f:12:58:09:71:98:d2:59:6e:4e:d7:84:ad:91:9d:70:fa:58:
30:6d:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:31 2026 by rpki-client