Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: C/z6KHoNvyjlZVQYCdSW5OXykx3EaKGphHjqqY5cqXA=
Subject key identifier: 89:3C:5E:E1:A6:E3:C2:AA:B9:39:52:70:44:4B:9A:75:DD:65:92:03
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 01A001A63D7F2F0F0AE53A4F077338417FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 15D6
Signing time: Fri 14 Aug 2026 19:01:06 +0000
Manifest this update: Fri 14 Aug 2026 19:01:06 +0000
Manifest next update: Sat 15 Aug 2026 19:01:06 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: v9Oa2Fle5EJiLa/TrL9Q/YUPFY5c9E12J7uwuNZCrSY=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:3d:7f:2f:0f:0a:e5:3a:4f:07:73:38:41:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Aug 14 19:01:06 2026 GMT
Not After : Aug 15 19:01:06 2026 GMT
Subject: CN=893c5ee1a6e3c2aab9395270444b9a75dd659203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:fe:75:f4:5c:51:49:4d:20:8f:c4:71:5d:
c4:39:fe:7f:6e:b7:b1:6a:2d:3d:e8:2d:2d:9a:a8:
62:76:c2:d7:f8:41:ee:c8:62:70:88:68:0a:c0:18:
fe:6f:cd:59:26:09:74:2c:d7:31:e0:e9:1d:ec:b2:
ff:85:cd:a2:c4:98:f7:59:2b:ea:78:56:39:14:47:
26:1a:3e:8f:74:81:c0:5c:f1:19:51:14:60:d5:c2:
08:d7:9f:4e:fa:a2:a7:9e:a3:45:19:cf:24:6e:ab:
7b:67:90:1a:6e:98:6f:6c:0d:35:92:70:55:64:79:
85:bc:14:18:ef:6c:6f:5e:ba:84:06:89:f2:5e:44:
68:b3:1d:09:54:2a:57:96:9b:57:b5:01:cd:ec:fb:
6d:68:7f:0c:ae:49:d1:cf:a3:fa:72:10:8a:b1:90:
f5:7c:76:5c:36:28:94:63:53:76:02:bb:58:c3:1b:
12:fd:51:f3:d4:00:f9:d1:65:84:49:b3:97:0b:77:
cf:7b:b6:6a:57:26:e1:86:d3:32:ac:c6:cf:2c:1f:
2e:dd:4b:b7:8a:c2:99:1f:77:80:8b:2b:6d:8e:f5:
d5:56:34:5a:34:69:44:90:3f:50:27:8e:68:85:a9:
89:40:b0:01:6d:a1:93:95:81:d0:90:b4:46:d5:64:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:5E:E1:A6:E3:C2:AA:B9:39:52:70:44:4B:9A:75:DD:65:92:03
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b9:51:ca:a8:45:0f:d9:8b:71:21:e7:6e:54:80:5c:cb:16:
8e:95:a6:ea:a0:30:e5:b7:38:38:3a:4c:68:8b:32:8b:83:15:
99:f3:4a:b9:a6:76:a0:3a:71:60:2d:7a:bf:1b:22:96:fd:27:
f4:fa:7c:1e:da:c6:f7:21:ac:3c:b8:ae:f6:5e:65:9e:52:ff:
63:14:e6:ba:1f:c1:8b:5b:62:3d:92:79:4b:b4:65:67:df:3d:
fa:ca:d2:61:6b:a6:57:4b:d1:17:1a:a7:8b:63:68:e4:09:f0:
25:fc:5f:05:ba:cd:25:2f:36:a2:2b:46:89:8a:7b:8f:41:32:
bb:3b:af:17:6e:3e:73:64:66:e0:6d:84:ac:bb:d7:11:d4:2d:
5e:36:a8:c3:d8:83:1a:c4:2f:b9:f3:94:80:52:8d:3f:84:54:
8d:a9:ad:75:38:84:35:33:56:24:0c:4f:aa:9e:06:87:40:8e:
c2:a2:38:34:55:f6:81:fb:e1:e8:09:a2:a8:28:05:ac:9e:f6:
fa:15:ba:1d:20:e9:c4:48:22:d8:df:0c:27:a3:be:97:18:13:
e7:2d:2f:75:55:88:0f:89:b2:11:b2:79:58:b9:89:49:9f:09:
56:b8:ac:f7:a3:11:a1:96:c2:ff:2e:9e:eb:14:98:be:19:c2:
08:3b:b0:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpj1/Lw8K5TpPB3M4QX+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0
YWY2ZjEwHhcNMjYwODE0MTkwMTA2WhcNMjYwODE1MTkwMTA2WjAzMTEwLwYDVQQD
Eyg4OTNjNWVlMWE2ZTNjMmFhYjkzOTUyNzA0NDRiOWE3NWRkNjU5MjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoan+dfRcUUlNII/EcV3EOf5/brex
ai096C0tmqhidsLX+EHuyGJwiGgKwBj+b81ZJgl0LNcx4Okd7LL/hc2ixJj3WSvq
eFY5FEcmGj6PdIHAXPEZURRg1cII159O+qKnnqNFGc8kbqt7Z5AabphvbA01knBV
ZHmFvBQY72xvXrqEBonyXkRosx0JVCpXlptXtQHN7PttaH8MrknRz6P6chCKsZD1
fHZcNiiUY1N2ArtYwxsS/VHz1AD50WWESbOXC3fPe7ZqVybhhtMyrMbPLB8u3Uu3
isKZH3eAiyttjvXVVjRaNGlEkD9QJ45ohamJQLABbaGTlYHQkLRG1WTbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk8XuGm48KquTlScERLmnXdZZIDMB8GA1UdIwQY
MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt
YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy
LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArlRyqhF
D9mLcSHnblSAXMsWjpWm6qAw5bc4ODpMaIsyi4MVmfNKuaZ2oDpxYC16vxsilv0n
9Pp8HtrG9yGsPLiu9l5lnlL/YxTmuh/Bi1tiPZJ5S7RlZ989+srSYWumV0vRFxqn
i2No5AnwJfxfBbrNJS82oitGiYp7j0EyuzuvF24+c2Rm4G2ErLvXEdQtXjaow9iD
GsQvufOUgFKNP4RUjamtdTiENTNWJAxPqp4Gh0COwqI4NFX2gfvh6AmiqCgFrJ72
+hW6HSDpxEgi2N8MJ6O+lxgT5y0vdVWID4myEbJ5WLmJSZ8JVris96MRoZbC/y6e
6xSYvhnCCDuwgg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:08 2026 by rpki-client