Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: qrBs4Y/gUNVNMiY5P7Ajbv69bXjUUr+GdteC8z4Tg0M=
Subject key identifier: B9:20:5B:4A:70:BB:53:51:8C:9F:19:3D:69:0A:B1:84:1B:CE:46:2A
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019CABD9E5B7702B37B8A3935965A39326BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 09B9
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: nQFS/zPgb1obTqc755kGcTgKuE7aZzsr2qbm9DhgGgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e5:b7:70:2b:37:b8:a3:93:59:65:a3:93:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=b9205b4a70bb53518c9f193d690ab1841bce462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:88:05:8e:c8:a4:35:f5:e8:5c:21:79:c9:
5e:e1:e0:1a:43:0d:ad:0f:2c:68:42:5e:54:70:df:
c8:d2:12:3f:81:2d:f8:49:80:6d:89:5d:1f:ae:ec:
ac:a8:cf:d6:c5:e8:89:d0:49:93:7e:7f:19:2b:af:
14:2d:8f:54:dd:f0:97:30:bb:fb:a0:7b:f6:57:c0:
ff:c7:e8:59:a4:7e:6f:3f:48:ba:15:fc:ce:50:32:
39:ee:6e:a1:b6:2c:9b:25:12:39:a4:f5:6c:72:cf:
71:3c:cf:0e:b0:e3:b7:6e:ab:98:07:ef:5a:6c:8a:
f0:4e:44:51:1b:2e:63:41:5b:51:83:23:dc:00:d8:
8e:dc:9c:5d:0e:95:9f:5c:fa:dc:3d:5d:a5:d0:92:
93:2c:81:77:18:ad:21:fe:d3:52:aa:0c:bb:16:f3:
e8:55:e7:73:46:59:6e:29:a0:fa:32:e9:44:a8:fd:
ad:68:2f:4b:8c:66:42:4c:9c:38:1f:e8:6d:ea:c9:
8a:df:74:3a:9f:a0:b2:e2:4e:67:51:ce:f4:93:66:
11:0d:65:b4:f8:fe:a4:29:e2:0a:40:3f:0f:b3:f8:
df:78:5c:32:1c:80:11:cb:31:b3:f2:f0:ea:34:98:
66:aa:77:93:38:95:77:e5:07:9c:bd:8c:65:9a:6c:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:5B:4A:70:BB:53:51:8C:9F:19:3D:69:0A:B1:84:1B:CE:46:2A
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:4f:59:f9:ea:e4:c1:eb:cc:16:6c:c3:c9:cb:7c:d0:99:
92:a4:2d:28:cc:2c:75:8e:9e:83:0b:c7:a6:66:36:5c:48:4e:
7c:0d:60:8f:32:be:d2:31:28:aa:ec:6b:92:5d:3b:4b:f2:41:
87:27:c7:72:1f:b3:c1:b1:b1:7f:4c:b0:78:37:18:86:60:95:
bf:74:7f:13:61:ca:21:dc:c3:03:cd:33:a9:c0:78:24:fc:a3:
5a:d6:32:38:45:8b:be:6c:28:1e:85:ca:92:9a:5b:4d:82:6c:
7a:9b:5a:81:99:5d:5c:d8:39:6f:38:59:87:1a:43:83:b2:08:
4e:77:ce:43:f1:a0:71:82:c6:1d:c4:0d:60:20:ba:9c:aa:da:
57:97:d9:da:a8:72:e2:fb:87:4d:01:9e:69:3f:69:23:ad:60:
a5:ab:30:de:d9:ed:28:41:32:a8:c3:a2:33:79:9a:2a:83:ee:
fc:45:78:22:97:9f:12:1d:ab:30:8d:bf:78:cb:39:f0:32:3b:
4f:ce:e1:ff:c7:d2:5b:0e:43:c6:e8:1e:8f:9f:b7:0e:c3:6c:
94:5f:fe:f9:58:aa:a1:fe:d6:e2:b7:8b:e1:16:a0:e8:65:b3:
ab:1c:7b:6c:4b:72:b9:4e:a2:df:43:9b:b9:93:2c:70:2a:de:
6c:28:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:59 2026 by rpki-client