Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier: iUYjCLsMJH0Evx4qLTZKO7VXnTpoR6/5QIzBNUVadh8=
Subject key identifier: 07:2E:F4:7A:B4:51:F0:18:F1:BA:51:C6:82:06:0F:83:93:D5:93:58
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial: 019CAAC6A26EA98DE3ED00234DDAB5A43152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number: 05AF
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: BS7YcqCwPCdKs5YruAN8tnn+59TmkGU1gvvr5NpjE44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:6e:a9:8d:e3:ed:00:23:4d:da:b5:a4:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=072ef47ab451f018f1ba51c682060f8393d59358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:e4:7e:03:80:e9:ed:55:48:5d:82:e0:ef:
75:d4:fa:6f:f6:3a:d7:53:e8:42:ce:67:08:c0:53:
b3:ba:3b:cf:eb:31:1c:bc:7e:17:e2:5d:39:0a:ad:
b9:70:86:74:f8:9f:13:b8:f8:5d:6c:55:85:0e:56:
f7:76:74:bc:d7:1e:11:56:c7:63:f8:fd:eb:f3:85:
f6:74:b2:3a:0c:6c:51:c1:f5:8d:3c:d9:56:52:61:
70:34:18:ab:db:d6:89:f8:45:ec:74:38:f5:d8:c1:
7b:08:ac:2d:cf:47:23:81:01:e8:a3:bf:ac:7e:32:
2f:96:18:f2:be:a0:56:2e:24:66:83:26:26:61:bd:
4a:2b:c0:01:7b:06:b3:69:ca:ed:c9:67:26:fe:2d:
33:5a:df:be:ac:ea:ad:ce:52:e3:7f:df:6d:74:fe:
1d:9b:5d:33:dd:a3:12:b1:65:00:f0:c8:b7:1b:98:
9f:5b:b4:2c:dc:b7:ea:90:8b:52:0f:ea:01:74:08:
56:31:13:44:a9:c8:d6:fd:87:ed:0a:e1:06:a7:81:
29:03:6a:03:ce:0f:5c:5b:03:17:0d:ff:27:d2:ae:
ce:43:04:f6:0b:e0:87:19:7e:ed:0d:cd:1e:fa:7b:
2c:23:d8:96:e7:70:1a:7c:77:55:66:27:7c:09:94:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:F4:7A:B4:51:F0:18:F1:BA:51:C6:82:06:0F:83:93:D5:93:58
X509v3 Authority Key Identifier:
keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a3:70:9c:d9:e4:39:da:4e:7d:8b:fc:ff:20:db:c4:28:af:
1d:18:59:aa:89:23:37:47:87:0d:56:79:1d:4c:8a:9a:a0:03:
e1:13:2e:bd:83:f8:1e:1e:fe:b9:a2:27:8a:1c:14:f6:71:13:
52:ea:a1:1c:fc:ba:18:29:f6:d0:ed:c3:49:7c:0b:bb:6f:94:
6b:aa:02:a1:6b:16:0f:8b:66:86:23:35:07:ed:4f:0a:f7:dd:
0f:87:97:67:4d:7d:2c:ef:e1:e6:6e:60:2e:9a:51:ef:b5:4a:
fc:03:07:60:bd:8f:06:61:1e:4b:64:d3:62:9a:a5:08:9e:60:
fc:80:60:76:22:31:76:f1:bb:d3:c0:41:06:47:66:a1:a9:68:
3b:62:d3:e0:22:d8:19:0f:89:a5:e8:0c:05:be:25:8b:47:28:
e8:3a:1b:b6:21:9d:29:12:22:02:18:d2:39:b6:87:2e:4c:eb:
95:18:67:18:7b:0e:00:02:48:90:90:2b:e1:f4:a1:2a:2c:0a:
0f:9c:f3:11:44:6d:d6:f5:91:a8:de:dd:60:87:9d:3b:37:3d:
ed:4d:79:23:cf:81:e5:48:6d:45:10:5f:a5:55:9a:c1:ca:03:
ac:48:8c:db:9e:95:11:87:4c:9c:fd:c9:21:9f:14:aa:04:2e:
5d:df:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:23 2026 by rpki-client