Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: mjiYfvhKFpmz9zlAI66t3lzB6AxhOQWWYjXke6p5++I=
Subject key identifier: 8F:70:80:92:0E:E9:C7:2D:44:F2:CC:2D:21:96:A7:E7:92:B9:AD:F8
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 01A15B5567CBB7C78B3F0A9500E241F91C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 1689
Signing time: Tue 20 Oct 2026 22:01:26 +0000
Manifest this update: Tue 20 Oct 2026 22:01:26 +0000
Manifest next update: Wed 21 Oct 2026 22:01:26 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: z7UdIs4r/MQnQL89BQK1xlUPZn7CyhRpqOn2bAUvlr0=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:55:67:cb:b7:c7:8b:3f:0a:95:00:e2:41:f9:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Oct 20 22:01:26 2026 GMT
Not After : Oct 21 22:01:26 2026 GMT
Subject: CN=8f7080920ee9c72d44f2cc2d2196a7e792b9adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:08:45:ab:6f:8c:cb:30:31:55:a6:60:80:
55:88:7e:ea:e2:07:2c:2f:74:de:df:f3:10:ce:35:
e8:d2:c6:1d:f5:db:91:ef:72:c4:7b:aa:7e:05:71:
43:80:b9:3a:37:df:9a:e9:7f:92:61:8b:89:80:04:
27:2c:26:96:ee:d9:1d:66:3a:ff:b0:82:51:15:dd:
ac:4d:11:b9:38:ce:21:eb:fc:d8:04:7c:06:b1:cd:
a1:3e:4a:f5:01:c0:81:c0:ab:e2:e0:2b:98:44:61:
31:39:93:ad:9e:63:b0:23:44:1a:e0:26:c0:c8:4b:
cd:59:24:dd:42:4c:96:b4:8a:f2:a1:1c:4d:77:4f:
5e:89:78:e3:82:b3:db:26:e3:3e:1f:3e:99:bc:f1:
bc:4a:7c:eb:51:0d:6c:05:4d:f8:6e:28:9b:64:84:
bd:74:ce:8c:24:58:d9:03:17:b1:7a:54:62:b3:62:
88:2a:2b:9b:9a:a5:a7:b8:59:42:72:f9:f8:8b:05:
b4:a0:95:c3:cb:59:bd:fd:eb:68:c3:c5:2e:1a:57:
ea:81:a6:9a:d2:15:e8:e0:fc:a6:63:86:60:42:6a:
62:d9:6a:d1:8d:3e:03:4d:86:5c:43:4c:85:65:c2:
d2:03:18:d4:29:5c:6e:24:25:4e:9d:9b:61:a2:be:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:80:92:0E:E9:C7:2D:44:F2:CC:2D:21:96:A7:E7:92:B9:AD:F8
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:dd:fe:f7:62:13:97:f8:c2:20:81:ae:72:23:e4:ce:ad:
e2:1d:57:56:9d:4d:a7:08:75:47:7a:0f:4d:01:92:92:71:81:
77:9b:e9:d4:f4:7e:f4:5f:f7:0b:82:c8:a1:91:43:96:5b:61:
a9:8a:19:69:fd:34:9e:e7:78:59:42:6b:60:f4:5f:91:37:65:
3e:23:72:83:84:11:44:5d:da:e9:44:70:a1:6c:bf:71:f3:e2:
6d:11:df:f3:63:bd:9c:db:6f:4a:d0:ac:d8:0b:8d:6c:15:1a:
d3:cf:e6:4d:a8:a3:01:90:9e:e7:88:91:cc:8f:14:13:7c:21:
63:bd:be:7d:47:b8:a7:65:72:fc:aa:37:14:f2:a8:1e:d3:96:
6a:58:0c:43:cb:c3:b7:be:20:28:ec:e0:73:35:9a:c4:e9:03:
b4:19:bd:5b:7d:73:a1:8a:8e:c2:0b:34:62:94:9f:59:07:4d:
19:f3:93:c5:78:ba:00:3c:b3:fb:5d:95:3e:dd:51:78:3d:05:
e9:00:67:9d:06:6f:8a:0a:13:b9:c2:42:56:c3:10:2a:9a:80:
7c:9a:89:58:9d:ad:14:09:fb:7c:67:66:fd:03:94:e4:27:4b:
25:df:c2:8a:fc:94:85:a4:ec:a3:f9:56:35:35:19:d9:db:1c:
c9:41:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:38:43 2026 by rpki-client