Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: 0NmBqNiJiCP8AYtAzfM8zlqmtafaM+t7+b6gY9+/o4Y=
Subject key identifier: 3F:85:DA:B7:8B:45:CE:09:55:89:B1:87:4E:81:95:2F:27:A6:BB:54
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019DA3784E6228F88D59875332FB43E7BFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 0811
Signing time: Sun 19 Apr 2026 02:01:03 +0000
Manifest this update: Sun 19 Apr 2026 02:01:03 +0000
Manifest next update: Mon 20 Apr 2026 02:01:03 +0000
Files and hashes: 1: IcfmTS0CP6rB67CQkMANE7ZvrBE.asa (hash: qUGWiJdx4nnSTLe0cuj2ysRzudqP0tr7YNfjwXyCMjs=)
2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: OA9wLFIKniWfs3Jh9Nuyf8mXN/Te8hSuXp+eyzp9VOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:4e:62:28:f8:8d:59:87:53:32:fb:43:e7:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Apr 19 02:01:03 2026 GMT
Not After : Apr 20 02:01:03 2026 GMT
Subject: CN=3f85dab78b45ce095589b1874e81952f27a6bb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:13:81:df:b3:aa:dd:9c:c2:59:c5:d3:54:
eb:ff:bf:4b:47:2b:f7:79:7b:61:8d:bb:dc:b0:7d:
48:86:49:cc:e5:d6:05:f8:62:06:e0:1c:2e:cc:d5:
58:e3:c0:23:c7:e2:2c:0c:37:7d:7c:3f:6e:aa:03:
25:82:ab:d2:9a:93:b6:1f:d2:95:b2:a5:97:1d:6f:
52:cf:dd:ce:61:07:de:60:41:76:e3:86:c6:22:2b:
2f:55:5f:6c:54:3c:03:8b:41:17:4b:e4:0a:c0:20:
9a:ad:58:04:29:34:25:72:37:9b:10:8a:af:3c:46:
f6:be:b8:c5:af:f7:6f:16:3a:6b:09:fa:6c:e2:9d:
7b:d7:fa:e4:f2:ce:7d:c8:db:ad:a8:7d:bb:ad:79:
51:76:7a:72:d0:5f:de:d9:6c:20:2a:84:9c:e3:f7:
a8:c8:4f:03:ad:00:96:3b:90:cb:71:f0:c1:f3:00:
c3:f2:d5:46:65:76:dd:bd:cd:f0:b0:a9:2e:87:37:
33:f4:55:68:2d:d8:c8:ea:80:f0:b1:ad:46:1e:8e:
a9:42:23:62:01:9b:82:07:94:c6:26:4c:b3:54:35:
b0:dc:bd:96:ba:a2:9f:b6:f1:dc:8d:0d:aa:d0:b8:
22:04:7a:60:2e:32:46:68:91:8a:f7:89:2c:28:5c:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:DA:B7:8B:45:CE:09:55:89:B1:87:4E:81:95:2F:27:A6:BB:54
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:79:fa:af:54:6b:bf:ac:d6:d0:60:65:cf:ce:ac:dd:73:
c1:50:b1:a5:82:ab:e2:02:95:d4:b7:78:a0:25:9c:92:45:0c:
2c:52:a6:18:b3:ab:44:d6:c6:2c:b6:93:73:c2:4c:e5:87:78:
00:05:5e:94:3c:8c:b7:ea:b9:36:bc:b7:42:cc:d6:ad:ac:f1:
e7:24:34:64:4b:70:da:2d:a4:e4:bf:d0:26:2c:07:02:80:7f:
9b:10:ef:07:ee:cc:e8:d7:3d:d9:87:cf:53:29:e9:98:71:d2:
aa:08:50:78:58:0b:98:f2:bb:c0:b8:81:d7:cf:f8:e4:fd:9b:
f2:c3:07:88:79:35:2f:6c:63:5e:10:56:59:0a:d3:60:60:0a:
00:a4:ee:e6:6f:ef:fc:ef:91:cc:94:9c:90:ee:de:57:83:8a:
3d:0d:5c:1d:98:c5:52:3a:60:eb:a9:25:42:d7:ab:c8:cd:9c:
79:34:77:c6:0f:48:7a:6b:c3:cc:2f:72:e2:45:c7:9e:db:33:
5d:97:ba:f3:ee:bf:68:5a:f9:8b:fd:7d:96:bc:a7:4c:22:64:
b3:26:88:68:31:b8:1f:a7:85:30:87:69:33:8c:4f:3a:fe:f5:
15:b5:57:b0:7e:bb:e5:ce:9a:ae:50:f0:7d:b3:b9:63:92:b2:
85:df:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:47 2026 by rpki-client