Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier: vATMtGSKjq8sd90ltCG/ZQ1mW0wRV/tA2VqKjE8uW+o=
Subject key identifier: 11:32:DF:65:BE:E7:61:CA:9A:AC:46:66:F3:D9:AC:EA:29:36:92:89
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial: 019CAB6B89F2F45DA9C32B38690760A357E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number: 0D1D
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: g2c2nr51LtgXm0RCz9EENDaJIRqAo4JpZjy50sz16qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:89:f2:f4:5d:a9:c3:2b:38:69:07:60:a3:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=1132df65bee761ca9aac4666f3d9acea29369289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:1f:41:16:ca:8c:f1:c7:2f:15:5c:2f:cf:
18:38:c8:c9:8f:b6:0f:6c:b5:be:02:60:cf:88:59:
5d:c1:ac:e7:59:9d:d1:80:10:ad:62:5e:e2:e1:b3:
f5:96:ec:64:73:37:46:fb:e4:35:ed:d1:18:68:0a:
81:02:c0:d4:50:13:16:2f:e7:34:33:60:69:8d:6e:
58:29:f9:60:70:36:6b:81:df:88:03:8d:60:65:af:
46:33:a3:4d:85:06:00:8b:2e:a3:72:a6:07:c7:71:
5e:78:14:5a:0a:61:53:41:1e:01:4a:f7:0d:6b:1d:
22:91:06:8a:38:88:d7:38:30:74:5e:5f:ee:9f:a8:
26:99:ba:ac:70:ce:c5:31:13:0d:34:f3:13:8b:8f:
8c:75:5b:09:72:3c:93:3f:25:71:c9:1b:4a:73:df:
1a:34:6d:ef:21:79:ea:d3:d6:a0:33:4f:65:cf:5f:
4b:f0:00:95:5d:fa:ef:3c:83:fe:10:53:77:17:e5:
53:00:21:ef:c3:36:1d:12:49:c3:45:a8:7c:73:2c:
d0:de:e6:d4:e5:75:d4:83:5d:03:d5:61:3f:b8:cc:
03:b0:cf:ee:e9:46:57:a5:ba:b7:08:26:32:7e:9f:
d6:3e:c8:01:41:eb:1a:ac:7f:a2:53:b8:e9:d9:d7:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:DF:65:BE:E7:61:CA:9A:AC:46:66:F3:D9:AC:EA:29:36:92:89
X509v3 Authority Key Identifier:
keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3a:f6:19:bf:d2:55:70:29:4d:c5:eb:43:d1:55:17:ec:89:
ac:4d:96:2d:6b:e7:35:93:22:0a:f4:b3:6d:67:df:9f:b8:e3:
d5:00:ef:b7:c2:f5:82:43:5f:95:ad:92:cb:94:6d:47:24:72:
ed:97:8e:22:79:b1:e1:6d:4a:35:39:76:8a:f1:3a:1f:25:63:
64:27:af:99:30:c1:4d:bf:fe:cd:1d:6a:39:59:aa:63:ab:8d:
b0:8c:da:fb:57:db:bd:8c:68:1f:87:49:12:4b:9e:2c:54:bd:
e4:7b:5d:aa:c4:e4:89:36:27:58:c6:d4:de:e4:e5:65:a2:35:
e3:09:bb:09:b6:ab:f8:ec:ad:52:48:55:9c:e4:e7:ae:8e:ae:
85:9d:de:79:69:84:ea:1a:58:4f:2f:85:c3:14:bd:d3:7a:27:
1d:38:42:70:20:dc:73:b6:c5:cc:c5:cd:9b:99:de:d5:6e:03:
0b:d1:40:38:ec:20:86:af:1c:1c:1b:1d:20:1a:52:6a:e5:10:
58:a0:d3:39:cd:9f:91:ff:bc:a9:89:3a:ad:90:b0:68:74:c0:
f9:87:83:0b:d6:fa:f4:75:19:15:37:49:be:c4:ee:ce:88:e4:
87:3b:73:45:f6:de:dc:30:84:b2:ad:01:6a:9e:c1:3f:09:e2:
3f:d7:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:14 2026 by rpki-client