Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: CwQ0rCfdZfFmBfinIYqSMtKYMLBvChKgc0ZBTcE3CH8=
Subject key identifier: AC:82:A1:91:D2:E6:46:07:46:39:61:60:6E:C9:D6:54:B7:B6:B6:BC
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019CAD59993B823EDD7E6B9352547067014C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 04A3
Signing time: Mon 02 Mar 2026 07:00:55 +0000
Manifest this update: Mon 02 Mar 2026 07:00:55 +0000
Manifest next update: Tue 03 Mar 2026 07:00:55 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: 9sZ/6ycmBYxBOYd6h4a+TfC1U+2E8nSid6JPmsqCCY8=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:99:3b:82:3e:dd:7e:6b:93:52:54:70:67:01:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Mar 2 07:00:55 2026 GMT
Not After : Mar 3 07:00:55 2026 GMT
Subject: CN=ac82a191d2e64607463961606ec9d654b7b6b6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:b5:75:1b:b7:5d:79:8f:11:ab:4b:b6:ff:
9a:12:38:3a:b9:b2:8c:56:ac:2c:99:f0:33:3b:a4:
17:98:db:0e:e9:00:5f:8f:a8:c6:fa:25:0a:bb:84:
b3:d6:6d:c9:82:0d:a2:83:67:6e:62:b5:9a:72:66:
aa:78:fb:f9:e6:b4:01:86:f3:1a:e9:82:56:b0:4c:
dc:c2:f5:d3:1d:ef:66:16:f9:8b:f6:d4:a1:ec:66:
fa:86:2a:08:86:ad:f5:ac:cd:92:32:25:43:fe:f8:
31:1b:7e:33:96:4b:1f:77:46:dd:15:00:c7:31:f2:
de:7b:cd:30:44:59:da:e5:8e:42:3f:ac:2b:67:2a:
80:b9:e4:ab:fe:ba:e1:ca:56:b2:a7:6a:f2:15:a8:
91:36:bb:40:b3:f0:70:84:59:74:31:eb:d8:2a:c4:
2a:ec:9f:b3:fa:0d:df:0b:d0:fc:f8:96:59:a3:e1:
d6:37:48:2e:e1:10:34:06:2d:0a:dc:12:30:eb:b3:
a6:52:e0:02:02:3c:85:6c:22:fc:4c:f8:63:30:f8:
95:8f:33:24:12:7a:a2:fc:88:6a:f2:c2:dd:35:e7:
ea:79:d2:bf:c1:7a:e2:c6:e0:36:69:08:0e:e0:8f:
11:20:c8:90:77:df:18:ce:9a:9a:fe:5d:85:1a:24:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:A1:91:D2:E6:46:07:46:39:61:60:6E:C9:D6:54:B7:B6:B6:BC
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3a:13:7d:00:e4:e1:e1:7a:87:a3:37:90:78:62:88:6a:7e:
0e:5a:75:8c:5d:de:30:dd:08:53:0a:e4:77:18:1d:1d:63:94:
f3:53:7f:db:ed:a0:10:37:b1:ff:0f:0a:9a:d9:1c:e6:0f:66:
b6:41:1d:8b:bc:d8:7b:53:f4:21:5c:8c:ca:bd:40:c9:a8:3d:
bd:45:37:47:bb:5c:42:c1:9c:ca:5c:fd:84:90:ce:81:65:fd:
9d:b8:b4:f4:db:14:4e:37:b4:9c:38:fb:83:a5:70:b6:51:a2:
5f:44:c7:16:09:05:d2:5d:2c:fe:ca:a8:3a:7f:ca:63:24:db:
c0:ca:93:33:0a:0b:9e:73:23:de:f1:8d:e1:6a:76:20:7c:7c:
52:16:67:e8:c2:c0:8c:2e:be:8a:95:0d:e8:86:58:66:53:b1:
d1:bd:39:dc:6e:85:6f:96:06:9a:d5:4d:1b:6c:27:a6:d4:b9:
c2:6c:37:bd:1a:33:dc:7b:24:9b:32:6d:7d:1b:b0:75:9b:13:
b9:fc:b9:b9:35:88:12:ab:e0:c8:70:6e:bb:7c:2d:d1:ca:77:
b8:16:fa:c9:2b:d2:cc:f5:74:dc:1e:e2:2f:2b:25:70:1d:bb:
3b:62:f4:07:08:ef:28:cc:e9:78:2b:2c:72:29:3c:f4:a6:35:
27:06:7c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZk7gj7dfmuTUlRwZwFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3
NDZhN2IwHhcNMjYwMzAyMDcwMDU1WhcNMjYwMzAzMDcwMDU1WjAzMTEwLwYDVQQD
EyhhYzgyYTE5MWQyZTY0NjA3NDYzOTYxNjA2ZWM5ZDY1NGI3YjZiNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40C1dRu3XXmPEatLtv+aEjg6ubKM
VqwsmfAzO6QXmNsO6QBfj6jG+iUKu4Sz1m3Jgg2ig2duYrWacmaqePv55rQBhvMa
6YJWsEzcwvXTHe9mFvmL9tSh7Gb6hioIhq31rM2SMiVD/vgxG34zlksfd0bdFQDH
MfLee80wRFna5Y5CP6wrZyqAueSr/rrhylayp2ryFaiRNrtAs/BwhFl0MevYKsQq
7J+z+g3fC9D8+JZZo+HWN0gu4RA0Bi0K3BIw67OmUuACAjyFbCL8TPhjMPiVjzMk
Enqi/Ihq8sLdNefqedK/wXrixuA2aQgO4I8RIMiQd98Yzpqa/l2FGiRlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyCoZHS5kYHRjlhYG7J1lS3tra8MB8GA1UdIwQY
MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt
M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz
LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjoTfQDk
4eF6h6M3kHhiiGp+Dlp1jF3eMN0IUwrkdxgdHWOU81N/2+2gEDex/w8Kmtkc5g9m
tkEdi7zYe1P0IVyMyr1Ayag9vUU3R7tcQsGcylz9hJDOgWX9nbi09NsUTje0nDj7
g6VwtlGiX0THFgkF0l0s/sqoOn/KYyTbwMqTMwoLnnMj3vGN4Wp2IHx8UhZn6MLA
jC6+ipUN6IZYZlOx0b053G6Fb5YGmtVNG2wnptS5wmw3vRoz3HskmzJtfRuwdZsT
ufy5uTWIEqvgyHBuu3wt0cp3uBb6ySvSzPV03B7iLyslcB27O2L0BwjvKMzpeCss
cik89KY1JwZ84Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:08 2026 by rpki-client