Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier: oADjnQqyyuDxPv9JwefWoGbbojfaR7hLNbb8WhBGSBU=
Subject key identifier: 6E:40:AD:7A:F6:13:92:36:27:60:15:98:C6:AB:93:00:35:98:88:DB
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial: 019D98F4C3E3576265793E8073D82BCC87EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number: 051D
Signing time: Fri 17 Apr 2026 01:01:10 +0000
Manifest this update: Fri 17 Apr 2026 01:01:10 +0000
Manifest next update: Sat 18 Apr 2026 01:01:10 +0000
Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: Ol37f41sfn3jtHFS6q+NkNDOEPaNRzr8qzbhEvD5Vjs=)
2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c3:e3:57:62:65:79:3e:80:73:d8:2b:cc:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Validity
Not Before: Apr 17 01:01:10 2026 GMT
Not After : Apr 18 01:01:10 2026 GMT
Subject: CN=6e40ad7af613923627601598c6ab9300359888db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:06:80:b3:37:54:6f:7f:00:3f:a0:1c:03:
e9:13:30:20:aa:88:78:36:a9:e1:a9:8f:ce:eb:ee:
73:78:dd:fb:9f:5d:db:dd:a1:c8:0b:68:68:3f:ba:
28:11:51:68:08:ab:1c:50:9a:43:e8:90:83:f7:a9:
83:1f:02:23:a2:c5:01:63:bc:47:50:c4:01:13:f0:
45:ea:1a:a8:08:0a:ba:b0:09:d1:52:2c:45:c6:16:
2c:6c:a9:7f:c4:eb:1f:69:cc:fa:0b:50:5c:c5:92:
9a:5f:71:2b:9f:6c:56:96:10:54:6e:93:1f:25:f4:
1f:0e:2e:fc:fb:b6:77:5a:c0:4d:f6:d7:9e:f6:8f:
90:49:56:94:8a:57:98:b7:b6:2c:55:4a:75:0f:fd:
04:09:d2:b7:95:45:7e:0e:ad:ff:49:2f:0e:a1:c1:
d8:5e:b0:39:01:28:2d:20:4f:73:c4:60:de:be:11:
94:c5:81:2f:e9:69:4e:c6:a6:90:26:88:34:47:53:
8d:8a:a6:51:ff:5f:58:ab:95:6e:5e:74:c7:5b:4c:
24:b2:7f:86:52:2c:d7:9d:9c:4f:c0:26:29:01:b7:
e9:75:45:5e:6c:5b:2d:d1:3b:77:f5:46:e0:9e:6b:
11:c6:cb:f3:78:ad:bd:b8:89:82:a3:0b:c9:1d:06:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:AD:7A:F6:13:92:36:27:60:15:98:C6:AB:93:00:35:98:88:DB
X509v3 Authority Key Identifier:
keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:12:28:26:aa:7f:d0:e5:3c:f1:dc:3e:f0:f8:4c:8b:8e:
07:66:b6:17:d6:e2:9a:8b:5b:ff:7f:cc:84:3b:42:fd:f0:53:
ac:69:bb:15:c2:7e:b0:f7:92:13:2d:ad:43:c9:05:0e:31:34:
21:11:a1:fa:2a:d4:bf:6c:69:16:90:71:4b:63:69:1f:71:d7:
23:d1:11:c2:e3:4b:12:f5:68:05:91:dd:6f:2c:e5:86:bb:41:
1d:95:47:fa:49:21:ca:20:db:40:c6:88:7c:cc:ce:e0:14:0f:
70:11:c5:a4:ad:33:1a:44:66:62:7e:db:60:a6:e1:ee:d7:57:
e7:55:b8:17:be:8d:4f:05:fb:a6:f4:36:79:cd:d5:1b:5f:ce:
0d:57:1f:f8:34:aa:7f:44:e9:ee:09:80:2f:5e:f0:a8:f1:2a:
14:7b:da:cf:7a:ba:e8:69:61:7b:58:69:93:55:4c:8a:85:df:
46:a2:25:e1:19:c4:34:ab:b7:64:7e:81:53:c8:5c:6e:63:cc:
11:0c:39:c2:90:0f:a3:e1:2c:cb:ba:59:71:a4:1f:26:79:f0:
ef:1b:13:79:16:c7:73:a4:48:a2:9e:1d:be:d4:19:53:68:4b:
b8:bf:f5:15:7e:2d:43:f8:c7:b9:92:71:d1:36:61:bf:6a:0c:
fe:72:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:28 2026 by rpki-client