Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: bjR3/s79u2DeYCjzsJEoxBl051WkVP1KrQCzFQQ6/fo=
Subject key identifier: 57:6D:58:53:2F:84:7F:76:BE:B4:86:AF:6C:36:9E:F3:61:43:05:90
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019D9B195B7DA206EF1372CC17F0336AA496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 1475
Signing time: Fri 17 Apr 2026 11:00:23 +0000
Manifest this update: Fri 17 Apr 2026 11:00:23 +0000
Manifest next update: Sat 18 Apr 2026 11:00:23 +0000
Files and hashes: 1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: +t5ub7kFy46Eitt7AGVyFxx/nnDFFYnpZSomw5WdanA=)
3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:5b:7d:a2:06:ef:13:72:cc:17:f0:33:6a:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Apr 17 11:00:23 2026 GMT
Not After : Apr 18 11:00:23 2026 GMT
Subject: CN=576d58532f847f76beb486af6c369ef361430590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:46:69:77:78:a2:9c:e8:ad:bf:d5:d6:c8:
86:e3:d7:6a:33:6d:d1:23:64:a6:cd:36:45:e5:d1:
67:3d:d4:36:aa:13:96:5e:99:fa:ba:a7:ea:a2:81:
62:58:0c:aa:66:91:c4:e3:ac:8c:10:e4:bb:ae:42:
5e:58:94:ea:c2:91:fd:70:3d:76:49:30:44:1f:d1:
71:33:c3:49:ff:e4:24:dc:d0:df:48:c2:74:8f:2d:
a6:9e:03:a5:25:b4:cd:64:88:2d:cf:76:45:ee:8c:
8f:46:c2:21:ce:5b:76:a9:62:b6:11:b1:18:37:2f:
a4:23:f7:ac:d5:4c:05:00:91:ad:a2:dd:e2:ef:0f:
19:30:23:91:84:89:93:dd:c9:71:a9:cf:5e:d6:97:
07:21:ae:76:e6:6a:60:81:3a:a3:52:18:39:1c:e6:
fd:a0:1c:d7:cc:e2:d1:e7:55:1e:59:ae:bf:e4:d7:
88:41:e6:67:5a:9f:a1:46:a0:4c:e5:7e:a4:9d:28:
ed:b0:71:85:0d:de:4b:24:b6:be:e2:47:7b:42:12:
ee:55:a1:28:56:ca:a6:3e:17:5b:01:ff:de:41:71:
c7:e6:43:9f:dc:55:55:e6:59:87:c0:1d:df:f5:31:
3d:83:80:1b:54:11:45:df:dd:79:04:11:0c:87:e9:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:58:53:2F:84:7F:76:BE:B4:86:AF:6C:36:9E:F3:61:43:05:90
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:37:24:1c:8c:02:b9:8f:f4:ce:d9:73:76:97:3a:3c:6d:
a6:33:e6:2b:ab:b4:a2:de:90:c3:5b:d5:2b:79:73:33:c4:7c:
a5:0b:f8:29:f2:72:8e:42:77:76:36:a8:70:be:e0:b5:49:9f:
1d:a1:2b:54:cb:7a:47:0f:13:2b:3f:16:98:8c:b2:b2:76:81:
d3:51:53:5a:0a:8c:2a:83:b1:fe:03:ca:c8:5c:ad:a7:53:03:
5a:0b:04:9d:70:46:3d:0b:d9:0a:ed:a8:a9:63:58:c8:3e:fa:
58:13:36:2f:9b:5d:d0:3a:d8:f8:db:a1:9b:db:97:68:50:f4:
6d:d4:09:12:cf:8a:54:40:22:50:d7:00:27:a3:11:04:29:42:
f7:44:3d:9e:1e:23:7a:69:fd:a4:c4:1d:96:55:f6:45:88:b3:
d8:d1:ce:77:30:2b:33:6a:7a:97:13:02:fc:60:c7:61:a5:97:
70:97:b9:fd:d3:0d:46:ee:d9:f1:9d:10:59:9c:32:36:d8:d3:
a9:81:e2:49:73:2b:e9:b1:83:3e:9e:06:2a:b9:57:6c:10:5a:
c0:e3:3c:bd:37:71:77:c3:44:79:ed:f0:66:30:9c:7d:05:86:
58:99:12:49:d3:d4:fa:02:4c:93:65:9d:00:31:28:3c:53:93:
e7:af:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:10 2026 by rpki-client