Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier: JY1ZbdRvjZtZB0qOJSEqzXFrVsHl2zes983BPZ6Elpg=
Subject key identifier: 20:70:41:6C:F0:23:EA:D5:0B:7C:60:78:0C:FB:1D:99:C8:A7:D5:B5
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 019CAA901E287DF55A5C7B9B82F63B55B54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number: 12A0
Signing time: Sun 01 Mar 2026 18:01:37 +0000
Manifest this update: Sun 01 Mar 2026 18:01:37 +0000
Manifest next update: Mon 02 Mar 2026 18:01:37 +0000
Files and hashes: 1: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (hash: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ=)
2: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (hash: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I=)
3: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (hash: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI=)
4: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: QRe4PJnrutnryyIx44TeoAXW4e1iliEEcxiWn/YmyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:1e:28:7d:f5:5a:5c:7b:9b:82:f6:3b:55:b5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Mar 1 18:01:37 2026 GMT
Not After : Mar 2 18:01:37 2026 GMT
Subject: CN=2070416cf023ead50b7c60780cfb1d99c8a7d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:01:cd:ae:08:53:e2:9d:d9:7d:29:fe:99:
1c:91:d7:68:f3:e7:ae:f6:0b:77:64:2a:ee:ef:15:
03:21:2e:aa:41:76:d9:d7:49:90:6f:a9:f8:6f:9b:
34:f3:e9:ae:53:5c:37:fa:72:5f:14:b2:73:f1:9d:
9e:6f:6b:0a:7c:45:eb:14:5c:08:69:44:98:d0:4e:
2e:9c:26:4b:cc:d1:8c:3d:84:be:69:40:6b:04:c5:
c1:7e:d0:2d:d7:9a:0e:d0:a8:70:19:9c:d6:13:03:
ff:be:47:8a:e5:25:f8:35:d4:98:f0:d8:36:c2:b2:
8d:dc:10:ae:02:e4:12:fd:92:dc:47:83:59:0d:48:
4b:45:75:7b:b1:f8:0d:d3:03:d8:2a:b8:00:3c:84:
d1:3f:05:13:1c:78:c5:e7:3c:f5:96:64:1e:ea:a4:
12:8f:e0:10:6d:3e:d1:7c:88:8c:26:23:9b:cf:8f:
a6:69:44:f4:e0:f5:6c:da:02:7e:69:aa:15:f2:e4:
c6:df:0e:6c:92:e9:cc:7d:f1:6f:5b:91:e2:70:d7:
a7:52:b6:25:32:30:a8:6f:70:b5:77:a0:8c:8b:d9:
64:76:9d:47:1c:3c:16:21:bf:e7:6b:3a:d5:e1:8a:
a2:a3:80:88:03:6f:30:31:fa:0e:03:86:31:b3:8f:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:41:6C:F0:23:EA:D5:0B:7C:60:78:0C:FB:1D:99:C8:A7:D5:B5
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:02:d2:f7:01:5e:2b:3b:ca:82:45:59:c5:a0:5f:72:e7:
19:a8:30:6a:63:db:f3:9b:63:43:42:8f:d0:cc:37:6b:53:89:
0f:a9:32:fc:af:2d:ea:56:29:9c:87:36:9f:3f:de:80:45:2e:
2c:48:29:d5:11:f5:ad:1b:3f:d4:44:66:7d:0f:85:a5:47:9e:
46:35:2e:fd:32:c7:98:4b:09:3d:5d:dc:56:11:17:45:d5:27:
ae:25:82:9f:d6:1e:28:6c:d8:ed:e9:93:e1:cc:99:10:3c:b1:
2a:de:e0:43:2c:38:c7:91:8b:fd:1d:c2:10:3b:65:42:b2:84:
25:cf:1d:81:16:e3:92:84:4b:5f:6f:a2:ba:17:74:db:6a:40:
50:a1:b6:08:72:ad:cc:30:e0:02:9e:9e:d4:bb:8e:0c:73:f4:
0e:dc:9e:40:db:2e:75:0e:83:8b:bb:a3:49:5d:39:c0:cd:7f:
0f:6f:f2:f2:a2:33:27:60:19:7e:b1:49:7e:c0:93:4d:0f:ad:
bb:09:15:4e:88:42:6d:8e:92:35:a1:c5:81:61:94:d1:79:8b:
b5:85:ff:3a:bc:31:fc:ff:26:42:52:57:24:61:d1:06:5a:0f:
6a:8a:72:bd:8b:7b:55:b8:b7:82:6e:6a:9e:da:37:44:3c:6e:
a6:cf:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:11 2026 by rpki-client