Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
File: pl8fmR9O7NN9xruk4_WzXFSPkoM.mft (raw, json)
Hash identifier: Iesp/CV5UE5/USfrN1dGPil1dKswf2O4+jSy5TZQ6qM=
Subject key identifier: 23:EF:4F:BD:4E:F9:EA:A6:52:2A:F2:B6:55:B0:27:C2:E2:F6:B3:FF
Authority key identifier: A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
Certificate issuer: /CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Certificate serial: 01A0C47C679DF6E67A7BE9D92ADF546AE98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:22 +0000
Manifest this update: Mon 21 Sep 2026 15:01:22 +0000
Manifest next update: Tue 22 Sep 2026 15:01:22 +0000
Files and hashes: 1: BHZgLw94teiGLK7JAQ5jFLZXddI.roa (hash: rJZ+8HW6SrcllJz7BMr8mKkcsE5wJfVB5OD3+D0naIw=)
2: pl8fmR9O7NN9xruk4_WzXFSPkoM.crl (hash: 4fpmpy7BKAGJsTLY7cHdPXjV06QDqezaJMHzRr1WJBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:67:9d:f6:e6:7a:7b:e9:d9:2a:df:54:6a:e9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Validity
Not Before: Sep 21 15:01:22 2026 GMT
Not After : Sep 22 15:01:22 2026 GMT
Subject: CN=23ef4fbd4ef9eaa6522af2b655b027c2e2f6b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:5d:70:80:e9:f5:8a:ec:9a:08:92:2c:cd:
b8:a1:6a:88:4a:f0:fe:24:37:80:65:c2:bc:d7:3c:
5f:f8:a5:ad:78:15:37:50:2a:13:3e:2c:67:59:55:
03:96:58:c9:a2:e5:0c:88:c6:cb:5a:87:ac:3f:e5:
ca:fa:36:72:bf:22:ed:8d:cc:68:43:c3:41:9c:3b:
77:f9:a4:cd:6e:26:04:ac:e4:98:02:26:6e:1c:8c:
70:d8:14:2d:49:ec:c7:f9:91:a5:75:53:b7:ba:0c:
b4:ef:36:49:0b:6e:1a:9b:51:0f:f8:3b:63:40:a4:
ce:cb:b2:69:20:a2:e3:6c:46:b4:02:ff:6b:c1:ce:
77:47:1c:33:cf:72:46:b6:62:5e:4a:db:7e:99:8a:
5c:8e:a3:a5:a4:17:7c:b1:3b:b7:bd:59:fe:9b:91:
24:c4:69:30:dd:3f:39:92:f8:64:79:36:9c:b0:5a:
ae:48:5f:7e:aa:1b:50:c6:0a:27:d5:80:a5:74:78:
95:75:5a:2a:85:39:a8:66:af:8c:7b:c4:32:34:eb:
fc:c4:39:f6:e3:e4:80:ed:15:47:20:4d:7d:9c:84:
16:97:7c:55:0e:22:a9:c8:d5:1c:73:b3:4f:f9:fb:
b5:bc:b7:b2:f4:22:38:90:e7:fd:d1:bd:ef:1b:a2:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:4F:BD:4E:F9:EA:A6:52:2A:F2:B6:55:B0:27:C2:E2:F6:B3:FF
X509v3 Authority Key Identifier:
keyid:A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:0f:01:9a:c5:a0:3c:e0:34:37:90:f3:ee:05:b0:e6:2c:
00:32:e4:13:51:33:b7:a2:01:50:92:5e:84:70:ca:8d:af:49:
0b:1e:80:83:49:87:86:d9:00:17:da:58:2f:0e:11:a7:f0:56:
3a:d7:2c:bb:5e:2a:5c:84:c7:1b:7a:7e:4a:78:a2:9e:18:48:
b9:00:14:88:91:73:1f:ea:28:d9:53:5c:04:ee:18:82:1c:c0:
d5:07:10:68:45:39:cf:d9:92:0b:59:88:7c:2d:2b:b6:30:90:
8d:c2:83:9e:c2:2f:f9:e1:0e:5a:5a:70:e6:c2:7c:61:23:3b:
35:59:f5:1d:cb:44:b2:9d:08:86:d2:3e:98:79:b4:7f:62:e0:
ac:0f:36:a3:6f:54:05:c7:5a:b8:23:d0:bf:dd:7a:37:85:62:
c4:48:1d:d3:d3:2a:61:28:a8:91:43:32:50:75:15:86:58:d5:
b6:cf:8b:a5:9d:72:6a:49:8a:0d:55:3f:49:42:e4:00:8f:28:
76:07:6f:46:4c:3c:35:04:0d:28:df:5e:f2:1a:ea:b8:ef:d2:
69:e7:0e:1c:bb:73:15:81:a5:ea:74:a4:18:1c:fa:09:1d:60:
db:8c:39:bf:8a:f1:83:5a:bf:e8:c8:03:26:76:ff:88:c2:0b:
68:b2:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:03:49 2026 by rpki-client