Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: XincWiDhqyXe5Yf1o8b4AGapImeHAZc1OzpaFkTvdBw=
Subject key identifier: 27:FF:CA:EE:B0:8A:EC:60:83:B0:E7:72:47:C4:FB:93:05:02:0C:C5
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019EC06D18F62BF56089955EFBB00E8780CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 08C7
Signing time: Sat 13 Jun 2026 10:00:35 +0000
Manifest this update: Sat 13 Jun 2026 10:00:35 +0000
Manifest next update: Sun 14 Jun 2026 10:00:35 +0000
Files and hashes: 1: CRM5mSymtN2fmfJMtjz04Gckvzk.roa (hash: TXOd4GzB4/bkLIGxDhlpA2UqGnklr7Sxzjm/MLMkU3M=)
2: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: dPh2GpHaf/r405jOKP4JFds4UuC/UYdRCKlqLkjWVRA=)
3: a9lZbjcMXDtHMCsr10LHf4snEY4.roa (hash: YtYSBqHSCRVYda15fZsSNYbnTjkw5VNklgiFPHhbI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:18:f6:2b:f5:60:89:95:5e:fb:b0:0e:87:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jun 13 10:00:35 2026 GMT
Not After : Jun 14 10:00:35 2026 GMT
Subject: CN=27ffcaeeb08aec6083b0e77247c4fb9305020cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:1f:79:45:d6:9a:0c:e9:7d:74:25:18:47:
7e:04:d5:48:f1:7a:6a:c8:dd:85:cd:7d:70:1f:1e:
0e:08:83:98:22:e3:33:0c:24:ad:53:cd:76:4b:c7:
7e:d6:74:c7:80:05:70:67:4b:bc:2a:be:e3:08:2c:
69:9a:65:cc:71:de:73:ca:1e:09:a2:f1:9e:3e:6c:
31:fa:a1:0f:b1:fd:8f:af:c1:f3:93:9b:c3:1d:26:
cc:d0:2f:f8:0d:1a:5c:5a:17:d6:c0:6d:9c:0c:c4:
ee:13:14:39:8d:ac:8c:00:d5:01:f6:e9:f2:23:cf:
27:d8:15:38:66:dc:66:12:3e:3e:86:ea:aa:e2:4f:
23:53:46:1c:0b:74:9d:74:0d:ba:c9:dd:0a:70:1d:
5d:12:32:62:3f:09:44:20:fc:c2:b1:da:cc:48:c6:
51:b1:76:c4:46:eb:aa:1e:58:26:38:97:b2:35:c6:
84:0d:f4:43:a2:9b:5b:5c:d8:28:ea:d8:ec:84:b3:
3e:0b:23:43:55:12:19:c8:9d:08:3e:8b:8d:fe:4b:
05:2e:09:32:fd:fd:52:25:75:a2:0e:6d:56:71:90:
f6:58:a1:25:5e:19:d7:b8:9c:e4:33:37:5c:a1:42:
3f:71:66:45:9f:ef:63:e4:12:5d:ac:cf:4c:ac:62:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:CA:EE:B0:8A:EC:60:83:B0:E7:72:47:C4:FB:93:05:02:0C:C5
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:79:20:7a:98:f7:8b:3b:9f:c6:1e:82:41:d7:79:71:58:
c7:38:27:ac:a4:66:05:86:d3:4f:a7:c3:38:ee:0b:ca:ee:8b:
3c:62:da:a5:cb:2d:99:69:91:df:e4:12:1d:52:34:41:99:81:
56:9f:70:b7:92:0b:e8:44:97:05:ec:d8:3c:44:bf:c1:c9:db:
f3:82:d1:4a:6b:fc:ce:f8:a8:f1:6a:12:55:4d:59:49:fb:84:
be:b3:95:a1:89:72:45:2c:ee:ed:86:3d:fb:e3:3a:b6:5a:4b:
92:94:4c:f2:4b:71:89:a1:79:8e:08:87:e8:a3:81:92:d7:f8:
cb:be:a1:0b:5d:34:df:9e:10:0d:0f:a5:31:16:6c:15:a0:98:
7e:2b:0a:91:0a:b4:62:bf:01:2c:21:71:81:ca:ac:0e:de:99:
9d:91:9b:e3:0d:e1:08:74:fa:dc:03:69:2a:c3:95:02:33:f6:
38:9e:cb:4a:53:65:d9:04:3e:97:db:8c:46:43:0e:6a:22:b7:
dc:e0:e8:24:72:c1:c3:92:59:0e:51:9b:78:83:07:de:bd:87:
b6:cd:78:e0:2f:a5:72:79:3e:b8:d7:3f:87:0d:1d:51:11:79:
1e:2c:3f:ef:5b:30:d5:0a:da:af:31:e1:37:00:bc:2c:aa:44:
78:d5:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:49 2026 by rpki-client