Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: ZriXt9au47AswaQh9pgLbNAdTH4x9QrHWK6/q63fsgI=
Subject key identifier: C4:71:CD:49:91:A4:8A:1B:24:9A:C6:E0:A6:89:49:B4:D8:0D:B8:36
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01A17E4F54BF4DDD6CE5AB92EA880E53EC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 14AE
Signing time: Tue 27 Oct 2026 17:01:30 +0000
Manifest this update: Tue 27 Oct 2026 17:01:30 +0000
Manifest next update: Wed 28 Oct 2026 17:01:30 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: HiWciZAht55yYGsDIzB8T8KRfdgIlP8Fwwe0oxf8JD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:54:bf:4d:dd:6c:e5:ab:92:ea:88:0e:53:ec:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Oct 27 17:01:30 2026 GMT
Not After : Oct 28 17:01:30 2026 GMT
Subject: CN=c471cd4991a48a1b249ac6e0a68949b4d80db836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:63:6f:a8:05:8d:1b:02:0e:22:46:88:54:
e9:6a:b6:3a:51:b2:e2:dd:16:56:7f:c8:ec:c6:d9:
04:a7:44:73:f7:b9:10:18:55:88:ac:c5:95:20:c2:
3d:be:e3:11:22:e4:ec:fa:51:ee:f1:07:b9:8e:9a:
55:d7:4f:a9:80:3a:7a:7e:e8:56:38:d1:fe:38:c7:
14:c3:5b:be:2d:6c:ee:d7:e3:2f:a9:05:25:54:64:
48:9e:2d:27:fa:99:30:06:b8:3e:48:4d:da:c4:0c:
5d:e1:a0:12:d5:c2:cf:d2:5a:5b:b2:84:b5:24:93:
ee:dc:58:8a:aa:77:72:59:00:fb:eb:f2:db:3c:67:
29:95:ba:ca:91:f0:fc:eb:d5:86:f4:b3:71:07:e5:
15:37:0a:ed:e6:cb:22:84:0a:61:84:eb:a7:3c:87:
cb:44:4d:7b:a2:59:35:9a:67:80:ae:24:b8:e2:93:
9b:8c:0d:8d:6e:73:8c:1d:17:b4:2a:18:6b:1f:c7:
64:df:7c:bf:ac:cc:69:cb:84:fd:2c:f7:be:9d:e2:
8d:72:35:a8:8e:42:cb:fc:d4:42:d4:1f:56:7c:16:
12:30:c3:eb:05:97:54:01:76:e8:ac:e7:6e:ac:1b:
7c:62:96:70:30:eb:4d:d3:14:3d:7a:a0:a4:7d:b9:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:CD:49:91:A4:8A:1B:24:9A:C6:E0:A6:89:49:B4:D8:0D:B8:36
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:02:00:44:7b:e3:84:e3:7c:5d:70:84:81:92:31:35:c8:
34:6d:c8:99:c1:86:d9:c7:8c:24:37:ce:98:ef:5a:f8:cc:90:
52:45:d0:75:eb:83:0b:91:8e:70:5b:e0:f4:94:40:0b:05:66:
1b:ef:5b:88:cb:d7:81:8b:d6:46:13:8f:30:92:70:8d:ab:18:
3d:a3:6a:15:ac:58:99:9c:b1:7e:1a:9a:b0:a4:96:4a:c1:74:
5c:51:b0:7e:fe:26:a9:79:dd:76:31:85:c3:9a:a8:6d:37:b7:
a2:5b:6d:0b:16:83:99:18:4f:55:04:c7:15:03:f4:55:aa:c8:
ed:f2:05:96:78:77:77:28:33:6b:11:10:65:28:76:cf:db:8b:
42:87:d8:8b:ff:54:c2:5f:75:ff:1c:74:c8:2c:97:4c:9d:ec:
37:6c:92:41:64:66:c8:04:bd:88:fa:0e:9b:ad:e8:ee:73:20:
85:f0:63:4b:0b:64:35:a7:f5:75:0d:81:0d:ba:ff:11:ef:0d:
ab:70:0b:cb:ec:5a:aa:3e:ff:ff:67:13:75:c8:ba:d5:64:95:
e1:cf:8c:96:07:c4:ca:59:ca:9e:94:db:e1:97:08:b1:17:b6:
f8:54:f7:73:3c:9d:e3:f0:f7:31:bd:d2:0d:67:00:68:af:37:
ad:e4:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:35:56 2026 by rpki-client