Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: idbiIqexwCGEEQUXOgREX63or4xySCFlxBCbAra9MJQ=
Subject key identifier: 85:67:43:02:DE:E8:E9:0D:1F:40:DD:9E:D7:18:C1:AC:31:F3:45:2D
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019CE635E658124FC5571E390A5A302FD690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 07BB
Signing time: Fri 13 Mar 2026 08:00:17 +0000
Manifest this update: Fri 13 Mar 2026 08:00:17 +0000
Manifest next update: Sat 14 Mar 2026 08:00:17 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: MRkAJSWCcvnq3//u7L2qM+LdHJy1obvuLTUkE2Sc68U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:e6:58:12:4f:c5:57:1e:39:0a:5a:30:2f:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Mar 13 08:00:17 2026 GMT
Not After : Mar 14 08:00:17 2026 GMT
Subject: CN=85674302dee8e90d1f40dd9ed718c1ac31f3452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:fe:5a:e9:5c:89:a1:39:b9:b2:c4:f2:25:
dc:af:35:47:8f:2d:9f:54:ec:a3:38:59:98:04:c7:
62:7f:c8:88:5c:fd:b8:2c:ea:af:e8:6d:f5:1a:24:
07:c8:ba:23:20:88:df:6b:83:9f:02:ee:bb:2c:35:
f0:21:0e:f6:0f:f4:13:3c:7b:50:db:09:b0:cc:4b:
54:c2:2e:7c:d0:64:cc:06:36:6f:a2:d6:8a:d3:0e:
d4:21:ec:22:ba:13:9e:f0:05:8e:1d:82:bb:66:0b:
d8:ab:d2:55:b0:f5:9c:a4:00:a2:95:4f:be:b0:c8:
75:27:d4:68:39:40:20:db:82:65:b7:76:a2:b9:7c:
0b:fe:3c:8e:64:23:9d:10:d7:c9:b9:64:f8:7b:f1:
1c:b3:df:cd:c3:e9:44:99:2b:97:81:a8:d5:ff:56:
51:55:d3:8d:a7:b1:a4:a4:d8:96:2d:ce:b3:ad:cc:
3e:a7:6b:ee:79:43:12:f6:3d:ae:58:df:3e:a4:32:
74:24:2d:14:82:f1:04:0e:37:5e:3c:b1:7c:f5:a2:
c1:95:0f:60:2c:db:97:19:12:a3:3e:d2:7b:da:f6:
0b:ad:42:9a:0e:9c:f7:1b:7b:50:3f:76:b0:ac:c8:
be:73:8c:ac:36:d0:e8:d9:e8:d7:27:ed:f8:02:fb:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:43:02:DE:E8:E9:0D:1F:40:DD:9E:D7:18:C1:AC:31:F3:45:2D
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:ce:17:3b:e0:a3:0a:c6:cd:29:75:61:76:d0:f4:3c:92:
0f:df:dd:40:ed:61:ad:c9:9b:89:20:55:68:5c:aa:d0:c6:c6:
af:7f:fe:da:33:5b:4a:67:d5:c6:44:b2:6e:dd:9c:d5:13:31:
0f:30:89:26:6f:89:30:95:06:32:a4:35:76:22:16:2f:67:7f:
6e:90:79:c1:60:9a:d9:9d:33:84:0f:71:e9:94:8e:ae:0e:ee:
9a:ad:7e:3e:72:1b:eb:d9:45:50:97:5d:b3:dc:a4:01:72:bf:
c6:f3:3d:61:61:45:81:5e:39:7b:6c:08:b5:4c:da:70:11:75:
40:aa:b3:ba:ab:e3:39:35:40:f5:f1:fe:21:c8:1b:58:45:6d:
e6:91:9b:5d:4e:33:63:7a:37:a6:53:8b:56:fc:05:4d:60:e4:
82:a6:6e:11:83:e3:bd:70:b4:d4:9a:fd:31:68:c8:70:9e:7f:
33:b4:f9:f9:86:a9:ac:6c:54:d3:49:11:d8:12:39:2b:f1:57:
63:70:6a:ef:d3:b5:9d:2a:83:0f:df:46:f7:06:7c:9b:d7:38:
fd:53:5f:33:14:c9:ab:a6:95:05:bb:89:2f:54:df:15:f8:53:
72:52:ef:9e:cb:33:b6:8e:10:a0:5a:02:99:3a:bb:14:87:93:
1e:65:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:56:59 2026 by rpki-client