Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: /50Gf2drcRy03kaoHGjv74xiVKz0szjnuI0ImsV3H50=
Subject key identifier: 28:11:F2:21:94:93:B2:1B:0E:15:F2:E7:33:69:3E:D7:44:C9:26:9E
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 019FA33C86960448D624CD875E678DC0360D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 13B8
Signing time: Mon 27 Jul 2026 11:01:20 +0000
Manifest this update: Mon 27 Jul 2026 11:01:20 +0000
Manifest next update: Tue 28 Jul 2026 11:01:20 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: ttzPWQXdsMGZBNvrWHjaT7+E/xVL5CyVI7loV7EkVyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:86:96:04:48:d6:24:cd:87:5e:67:8d:c0:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jul 27 11:01:20 2026 GMT
Not After : Jul 28 11:01:20 2026 GMT
Subject: CN=2811f2219493b21b0e15f2e733693ed744c9269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:fb:90:69:cd:35:a9:94:23:28:03:f0:01:
cf:b6:78:69:3e:80:92:f4:b4:4f:08:af:70:fe:e4:
56:f1:00:8b:7a:2f:6a:7b:fb:6a:bc:74:7e:e9:44:
f7:10:44:39:55:24:61:fe:08:fe:d0:6a:74:ef:f5:
8b:6a:87:53:92:f7:c4:50:95:61:c8:b4:fa:de:fd:
1a:be:8d:13:6e:07:5f:8f:6b:e9:25:80:b5:d8:8e:
86:6b:67:ce:77:68:7a:83:27:66:38:fa:e0:01:3c:
b5:68:1d:5f:63:0c:77:f4:b4:0c:95:b7:50:08:ec:
49:8c:fb:31:bf:a9:fd:74:70:a7:e2:34:82:49:8f:
b4:f9:ac:cc:63:7d:d8:47:e5:ab:63:6d:0e:8d:b4:
8a:77:3b:93:94:45:dc:88:7a:0c:81:47:a6:4f:fc:
d3:44:1b:76:ad:ed:bd:09:d0:f5:bd:9f:f1:87:d4:
93:31:73:48:78:3f:79:de:20:6e:81:65:32:93:2a:
37:e0:0e:a5:ec:c4:82:f2:f8:c8:62:4f:a2:fe:d3:
05:09:2b:7e:37:2b:30:db:f4:03:1e:98:34:d6:22:
4a:43:26:d7:0e:a2:0d:a5:cd:6b:1d:c0:0a:6b:ed:
21:4b:9e:90:7e:f2:21:ca:59:05:47:22:d0:89:d4:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:F2:21:94:93:B2:1B:0E:15:F2:E7:33:69:3E:D7:44:C9:26:9E
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:d6:01:83:32:72:5f:55:46:63:c4:b7:16:97:54:dc:2e:
93:1c:59:aa:ae:89:33:78:64:94:c5:a2:78:97:ed:1b:92:a1:
3f:e2:5d:66:e1:5f:ac:b6:14:f9:f3:50:55:c3:63:21:0f:67:
3b:7a:86:0c:a1:35:99:c2:9a:7b:ce:1a:70:ed:cb:8f:54:a3:
1d:b6:0b:3e:7f:24:be:68:3d:70:d8:61:f8:95:d2:f8:e4:7b:
e4:1d:56:f3:cf:b0:09:a3:43:4d:58:15:b7:d6:84:14:75:2d:
d7:0e:a2:83:c8:70:c3:83:a3:8a:2e:b5:9b:4d:91:49:c9:1d:
50:16:89:b6:a6:a0:70:18:0c:80:0c:09:da:06:a1:a0:ea:1c:
fe:04:e5:6a:f0:4e:8b:06:c1:80:1d:89:0a:cf:38:01:71:e2:
aa:f5:21:e0:7c:62:2e:f2:39:c1:fb:2d:20:cd:ad:2e:83:b2:
09:30:35:91:25:f1:a3:9d:81:c5:6a:dd:38:13:78:9a:db:df:
85:af:82:79:76:ca:48:ac:61:bb:71:4d:1c:6f:53:8d:a3:ed:
e4:0a:0c:66:58:b0:54:21:7c:7e:04:f5:ee:6f:f3:31:fe:0c:
da:55:01:81:2e:86:e9:54:54:29:a0:a8:be:f3:ca:ca:1c:31:
82:9e:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:12:30 2026 by rpki-client