Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: pt39SHU2n9mjac6sdAj5v3BnIt54e5crUaI4OkJMe90=
Subject key identifier: 42:D3:20:D5:58:BF:AB:76:AF:41:A8:CE:E6:D9:1C:4A:D1:A9:EB:AB
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 01A0C5FC7EB70CA3F9D5865403725CD11BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 06C2
Signing time: Mon 21 Sep 2026 22:00:54 +0000
Manifest this update: Mon 21 Sep 2026 22:00:54 +0000
Manifest next update: Tue 22 Sep 2026 22:00:54 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: Zd9je2ql5rcZgSEIl5I5PT87R73bA0PUEqMNM9Zvsfs=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:7e:b7:0c:a3:f9:d5:86:54:03:72:5c:d1:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Sep 21 22:00:54 2026 GMT
Not After : Sep 22 22:00:54 2026 GMT
Subject: CN=42d320d558bfab76af41a8cee6d91c4ad1a9ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:c6:5c:80:af:3e:5f:bd:1d:3d:7e:55:8f:
b5:1a:57:6b:88:3b:32:f1:f4:f5:d2:a3:8e:ad:c8:
aa:47:5b:cd:4f:72:42:6c:84:2e:6d:e6:45:06:b0:
b1:56:9a:07:ad:ab:4d:e1:89:51:6d:ff:c1:f2:48:
74:0e:ec:a3:50:fd:67:28:a7:23:b7:dd:47:f9:a1:
c3:b7:42:93:ce:2e:e7:3e:dd:7b:dd:5a:bb:dd:34:
0f:4e:6a:92:39:94:94:f8:d4:81:db:01:09:c8:73:
bd:5b:b5:6b:13:de:ff:84:fa:b8:b0:a7:f0:d7:17:
a7:6d:6a:9e:2a:40:ae:89:ac:07:03:2b:c3:69:1c:
70:45:a0:95:1c:78:df:9d:7e:4d:ad:c3:74:af:37:
f8:8e:6e:c4:d7:79:c5:0d:e0:c2:bd:81:96:cb:5c:
65:58:1a:8e:6c:22:7e:c3:d3:f2:5c:5e:53:b0:3b:
7a:82:a6:71:23:cf:a4:3c:38:0b:6d:f0:e0:22:98:
43:db:9b:0d:d0:2a:a3:fd:25:9c:bb:c7:86:25:59:
7a:4f:0f:0a:60:4a:70:60:7b:6e:29:f2:6d:07:8d:
d4:6c:ff:bf:12:ab:b9:29:a2:ca:5d:91:f7:c3:fc:
85:be:79:38:f8:cb:c2:1d:f5:46:65:64:32:d4:b3:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:20:D5:58:BF:AB:76:AF:41:A8:CE:E6:D9:1C:4A:D1:A9:EB:AB
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ed:0a:dc:b1:8a:02:74:cb:aa:34:36:b1:88:fe:f2:5e:0d:
9c:9b:dc:07:17:5c:7a:18:a0:32:c3:b6:2d:9f:7b:e0:64:5b:
3f:30:87:19:b9:c9:88:18:f5:0e:12:01:81:52:fe:be:bd:3f:
a0:83:e2:a7:fa:79:64:6b:c2:78:5d:d8:20:c7:d0:5e:c9:f0:
09:c3:bd:df:ca:e9:d3:43:9a:d3:97:18:1d:e6:0a:bc:39:1f:
59:dd:47:b1:cf:05:e2:58:76:b5:10:a8:ae:a8:c0:7d:0e:9a:
d7:f7:54:7b:4d:f3:da:6a:20:8a:fc:77:48:1c:07:8a:19:e9:
40:e3:4e:17:9a:5c:67:9c:15:7d:5c:e5:bb:cc:0a:91:21:41:
f4:e2:71:ac:f7:65:ba:76:4a:6d:ef:42:a7:1f:86:71:ab:8c:
0c:65:d8:de:66:e8:2b:37:ec:c4:75:6e:c1:c0:d1:22:c8:f3:
95:f8:04:f6:a6:c3:b8:40:a7:cd:d7:86:11:41:58:a0:ac:f4:
f7:c4:27:40:b8:ed:48:69:9d:e9:23:68:92:31:8a:e0:9c:e4:
a9:b6:46:07:b4:6e:d5:c4:a7:6c:9b:7b:8c:b4:25:c8:e3:01:
81:3f:22:66:a0:e7:37:1f:ea:f2:c7:50:bd:11:77:7e:2a:50:
d5:0a:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:23:08 2026 by rpki-client