Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: L6Q/HuSAQOCZzvaDeZxHESvRzjoOdS4fifD9A+U3L5Y=
Subject key identifier: C2:D9:68:20:B4:04:EB:FC:B0:CD:1E:7D:10:05:BE:B6:6E:39:9C:AC
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 019F95B7B9D61285DF3E85E3C01D30A583F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 13B1
Signing time: Fri 24 Jul 2026 20:01:13 +0000
Manifest this update: Fri 24 Jul 2026 20:01:13 +0000
Manifest next update: Sat 25 Jul 2026 20:01:13 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: g9HiMyIwfyBP/L/8mZM/h0eDpKdkAoG4btDNRB8VHiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b9:d6:12:85:df:3e:85:e3:c0:1d:30:a5:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jul 24 20:01:13 2026 GMT
Not After : Jul 25 20:01:13 2026 GMT
Subject: CN=c2d96820b404ebfcb0cd1e7d1005beb66e399cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:2c:ed:50:36:57:5e:f9:cf:e3:44:de:ba:
25:2b:cc:10:26:2d:b0:65:21:d5:dc:61:37:a9:30:
3c:e6:84:13:2d:54:89:70:7d:02:0d:e9:f3:e9:bf:
f0:e8:ac:b0:70:7d:bc:bf:b1:26:f7:b5:60:16:6c:
9c:21:c1:15:82:e7:d5:18:0f:6e:83:ec:9e:64:99:
e8:26:71:91:09:56:68:df:d5:34:a2:90:d2:8b:85:
61:12:0e:ad:48:87:68:4e:0d:f9:e8:69:39:a6:6d:
db:ee:da:97:18:f0:b8:4d:99:a3:cc:2a:06:95:ba:
81:35:52:13:8c:a8:7c:89:50:57:be:c8:dd:43:d4:
c6:02:37:8f:68:cf:fd:f5:f2:31:da:14:61:36:40:
db:0f:de:22:d7:ec:02:8a:f1:f4:e7:d4:d3:4a:89:
4c:bf:1b:55:0a:3a:c5:66:18:36:39:12:19:04:b5:
74:4f:6e:9d:df:c9:af:53:88:c6:5e:99:80:c3:2f:
6b:e6:96:66:60:87:26:01:2d:a1:8d:c0:96:66:7d:
c0:ef:6a:c5:56:fb:d0:4d:89:dc:d4:4a:ca:ed:25:
13:bf:93:08:83:c7:f5:6e:32:af:fd:d5:5d:d0:eb:
4d:c4:29:25:70:bc:63:ba:1b:32:aa:53:1c:d7:b3:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:68:20:B4:04:EB:FC:B0:CD:1E:7D:10:05:BE:B6:6E:39:9C:AC
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:28:2e:c0:fb:1a:b0:81:92:a8:d1:65:47:17:cd:cd:fe:ee:
02:aa:74:a4:24:cb:11:b9:c4:5e:42:d9:b5:55:b8:1c:b1:83:
ec:74:6b:4b:7c:55:22:04:6f:91:a9:a4:e9:9b:12:39:62:13:
98:48:91:99:68:f4:f5:29:19:03:70:96:23:b8:69:5d:99:e4:
8f:78:79:48:58:d2:66:df:bf:9d:f8:17:b5:33:c8:c9:a8:be:
41:22:4f:a0:b4:69:40:9e:ad:79:70:cd:81:d5:17:26:76:cf:
0f:d0:40:99:d0:6e:3a:86:7d:27:75:61:89:fb:ae:16:10:39:
40:d6:17:f8:f6:f9:2a:a4:8d:a8:3e:72:f7:17:3c:0f:50:3a:
16:ef:42:08:90:ff:51:46:35:06:e7:41:d4:2d:6d:1e:6f:ce:
91:89:41:54:2a:16:2a:10:a7:fe:96:1e:14:4f:28:fe:6a:a3:
db:2f:70:01:50:fc:c2:43:be:7c:f5:1e:8d:ed:b5:e4:a7:fa:
63:21:90:5c:4e:7d:f8:d2:89:6d:73:20:e9:32:d2:40:4d:1c:
d4:cb:86:dc:92:16:3b:d4:32:01:3d:e8:2e:2e:57:b8:11:5e:
aa:ef:64:48:8f:4d:46:aa:66:94:3a:ba:02:63:5c:21:cd:1c:
7d:a5:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:57 2026 by rpki-client