Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: i/c2C3ukqToD9tAMsdtrvL2tryZNQ4/fxdWkcAvAwLo=
Subject key identifier: DE:C5:00:8C:A2:94:A6:7D:F5:48:49:EF:C6:AB:74:32:7B:1C:EF:66
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01A08AFA8A80EF3ED1BEB825EEFC1B72903B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 1430
Signing time: Thu 10 Sep 2026 11:01:10 +0000
Manifest this update: Thu 10 Sep 2026 11:01:10 +0000
Manifest next update: Fri 11 Sep 2026 11:01:10 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: I0rZbrtejKmn/RtijFodcl8x0Q9BsZtb2em9CODU6SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:8a:80:ef:3e:d1:be:b8:25:ee:fc:1b:72:90:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Sep 10 11:01:10 2026 GMT
Not After : Sep 11 11:01:10 2026 GMT
Subject: CN=dec5008ca294a67df54849efc6ab74327b1cef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:4c:98:a9:fa:a8:54:96:c1:77:73:76:0c:
cf:18:ec:4c:57:f6:b9:72:18:23:00:63:b0:99:1d:
2c:59:83:20:60:d2:41:05:d4:a4:c8:49:75:6a:35:
a8:71:95:60:e0:fc:c2:35:ef:d5:0b:90:d3:76:74:
f7:b8:f0:66:8a:0b:3e:15:8b:db:65:66:dc:97:0b:
45:55:f4:98:e7:b6:d8:1f:41:1a:25:0f:3f:87:73:
97:c0:92:63:96:31:1c:da:c5:9d:41:b7:15:01:c0:
88:3d:94:7f:55:85:b0:22:29:e2:1b:53:93:d2:74:
c0:b9:2c:9b:0a:b1:b7:e0:9c:cb:67:f2:19:b5:3d:
96:59:bd:51:1a:b4:67:db:f1:34:ba:90:aa:bb:2d:
63:c1:7e:0e:ea:f6:04:ea:58:dd:6d:01:f4:be:0f:
41:3b:c1:29:61:df:d3:8c:af:d2:bf:39:7d:fc:d7:
89:78:4d:72:d1:75:8b:fa:f4:3a:ed:02:eb:19:47:
d5:70:b1:ea:a1:e8:a0:91:52:6a:8c:a6:ff:20:c1:
05:2b:d7:54:13:89:d8:f8:17:34:79:68:6b:32:b2:
4e:25:25:d6:58:e4:ac:1c:bc:1a:8b:e5:8e:24:96:
59:e8:ba:e2:d0:dc:6d:2a:43:46:b6:5d:f7:ba:2e:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:00:8C:A2:94:A6:7D:F5:48:49:EF:C6:AB:74:32:7B:1C:EF:66
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0f:1a:ed:53:0a:70:a3:5b:ad:91:36:be:20:0d:8d:79:e7:
d0:98:bb:6d:99:b0:2b:4a:52:1e:50:f2:14:2e:36:7c:17:43:
fc:b2:39:20:56:55:45:6d:87:e9:ca:b7:b3:6b:f9:72:5a:d7:
ec:51:b1:bc:43:20:a0:2e:62:b4:2a:2a:9c:cc:0e:29:d8:39:
57:42:ab:42:75:5e:00:29:77:2d:16:d0:a8:fc:5d:c4:42:51:
92:f2:fc:7c:a6:20:77:d9:8f:d2:f8:39:ab:68:ce:93:16:ab:
c1:29:4f:88:be:8f:3e:0f:77:be:d1:73:6d:0b:c1:e3:5f:11:
8c:0a:61:a5:8f:4f:31:73:03:23:7d:0f:a5:d2:bd:80:c1:a7:
02:f4:66:11:62:f6:79:da:7e:33:4b:9b:90:9e:9c:57:a2:26:
b2:f0:43:db:b9:d5:de:7c:cd:ac:ba:11:9f:6b:af:d2:e4:7a:
d1:d3:fe:d1:fa:66:6e:b7:ba:13:3b:d9:75:d5:a8:9d:5b:21:
49:00:ab:fe:6b:82:70:ea:0b:e5:60:15:9c:16:e9:7d:4f:8f:
8e:b5:97:2b:60:fe:8d:d7:10:d8:da:96:76:dd:f4:7f:93:6f:
d0:23:ff:47:b4:ba:75:91:2d:63:da:0c:d2:44:19:65:6a:d3:
ba:fe:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:05:03 2026 by rpki-client