Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: 8WxscCfCKXpDkuYRn4w1IuW/GZZKPA3hkfsjFf9w2Z4=
Subject key identifier: 06:FB:22:EE:50:CA:E3:F4:A6:F7:91:21:6A:38:BC:97:E3:43:4E:20
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019CAD90773DCF5FD712E6C3982EA9A502BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 13FA
Signing time: Mon 02 Mar 2026 08:00:51 +0000
Manifest this update: Mon 02 Mar 2026 08:00:51 +0000
Manifest next update: Tue 03 Mar 2026 08:00:51 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: 1XE8PQiUs4l2r5uMNNaINlS9P/NbGfkR4A0ocTA0t28=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:77:3d:cf:5f:d7:12:e6:c3:98:2e:a9:a5:02:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Mar 2 08:00:51 2026 GMT
Not After : Mar 3 08:00:51 2026 GMT
Subject: CN=06fb22ee50cae3f4a6f791216a38bc97e3434e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:fd:de:fe:f7:36:44:ed:32:5a:1e:9c:c7:
b5:bd:10:85:a3:cc:bb:09:2a:9c:b9:73:23:d2:1c:
ef:62:fb:5b:fa:52:be:9e:9d:c1:3c:08:eb:7f:da:
a6:6e:6a:b7:4d:9f:ff:30:94:11:d2:c5:2c:f2:fc:
17:d1:dd:3c:5e:20:03:3d:b7:7a:6a:9e:9e:d9:d2:
98:36:32:2f:f3:2c:27:a7:09:18:35:8f:8c:07:ca:
8f:c4:3f:d3:ed:cb:e3:bc:db:f0:52:a5:e6:d6:83:
f4:cb:85:2a:21:1c:5f:87:06:3c:5a:ca:9b:c5:c9:
f1:3c:f7:ee:93:d0:a1:9e:17:d7:7f:83:48:06:f6:
e7:b4:6d:5f:cb:8d:ec:1f:b4:70:98:61:71:17:0f:
d8:1f:2a:5a:c2:2c:95:0f:0b:59:df:3a:4e:c8:4d:
68:ae:aa:25:26:03:10:4b:c0:6c:ff:2b:73:5b:3d:
98:6d:f1:b0:91:ba:6e:e1:a3:40:c5:b1:47:b0:34:
ae:51:e7:9f:0c:10:4d:c3:ec:f1:68:c8:20:d3:29:
3a:2d:50:6a:c4:94:19:00:aa:6c:3c:3d:e2:74:d2:
b3:3a:02:27:d3:f0:2b:52:0e:0d:f7:ed:79:7e:8d:
c9:af:c6:b0:eb:76:27:76:93:79:e4:0c:d9:d0:c7:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:22:EE:50:CA:E3:F4:A6:F7:91:21:6A:38:BC:97:E3:43:4E:20
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:a4:31:56:c1:02:1e:5c:73:97:ed:72:68:a2:a5:9c:ae:
72:0e:5f:c5:b6:06:50:cb:95:e4:c3:2e:a9:43:4e:a6:bd:ae:
53:19:2b:f9:83:ad:20:11:ce:38:12:f0:ed:19:21:36:dc:7e:
31:f8:a8:55:a7:5d:fd:99:44:61:88:08:0c:2e:f1:20:dc:6d:
80:71:2b:b2:ec:ae:54:9f:d3:b5:5f:fe:81:b3:28:74:6f:c0:
11:db:0d:b3:b1:f3:0a:2d:0f:56:49:f8:b6:4e:b6:5c:32:39:
cf:ca:1d:ed:93:2b:a9:38:78:b1:e2:2b:50:88:33:ac:0f:25:
df:da:f6:3b:d1:fc:20:8a:a3:58:ae:4e:8a:44:c1:9c:3b:91:
a2:d4:ee:c6:54:75:19:ef:9b:71:6d:65:1a:18:2f:70:14:f5:
93:c2:5b:1c:f0:f8:1a:9a:80:38:e8:d6:84:4a:f3:79:03:91:
09:f9:87:ac:97:53:70:32:cc:75:5e:c9:75:43:c1:9c:0f:5c:
0a:cc:d7:53:23:f7:0e:dd:31:59:eb:af:3b:33:81:86:d6:0e:
59:e4:23:10:b2:26:37:e5:fe:d6:f9:e2:9a:e4:5c:36:51:bb:
5d:76:a8:4c:99:40:6e:3f:e7:02:74:c2:48:62:5d:8b:0c:31:
37:d4:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:52 2026 by rpki-client