Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: YGFkXSEVLjFwRZHxke/B6GH+MT3ZPaoz8vro2CNvzCA=
Subject key identifier: 6B:02:7D:8F:7D:2B:B7:A2:C0:B0:70:0D:79:63:15:7D:21:B2:14:7B
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01A11BD0CB18D40BF72E91283B1991D7F6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 147B
Signing time: Thu 08 Oct 2026 14:00:30 +0000
Manifest this update: Thu 08 Oct 2026 14:00:30 +0000
Manifest next update: Fri 09 Oct 2026 14:00:30 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: iL3WN0TkbqUFZZFaUBioeOrf+TuZzuL8sKA+vtlAYyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:cb:18:d4:0b:f7:2e:91:28:3b:19:91:d7:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Oct 8 14:00:30 2026 GMT
Not After : Oct 9 14:00:30 2026 GMT
Subject: CN=6b027d8f7d2bb7a2c0b0700d7963157d21b2147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:4f:37:c7:26:4a:a1:c6:0c:76:c6:7d:15:
e8:09:6e:48:ed:c2:bf:9c:37:ec:38:ba:1f:99:f5:
20:e3:18:ed:16:d7:40:16:c0:a1:ed:a1:83:c1:b9:
d7:0c:33:50:48:12:50:4b:ec:a8:6b:7d:30:92:da:
6c:4f:f4:39:c1:c2:3e:85:6e:2f:0f:56:47:cb:d8:
99:9d:a5:a5:9f:d0:ae:81:77:d3:a6:7f:a9:43:c1:
f1:6c:04:6d:de:6d:c5:ed:ad:97:17:8e:04:1a:58:
7a:61:d7:f4:0c:ac:c8:b2:bf:c7:f1:bc:6f:ae:bd:
8b:ad:fc:f8:0e:d0:a3:3f:c9:e0:a1:89:ac:26:91:
f6:31:a7:5c:75:f5:66:79:a6:1c:61:48:18:6c:41:
16:ee:77:da:7a:b6:83:d8:0f:7d:fb:d1:fc:91:5d:
cf:52:d2:1d:a9:8a:90:00:a7:74:2a:4d:13:af:1f:
ad:a4:d1:30:15:dc:97:df:f1:37:ff:74:24:22:71:
71:c5:74:21:e3:48:94:4d:41:31:38:65:e1:0f:38:
e5:87:b5:78:9e:ab:ee:60:76:8e:83:41:09:5d:be:
17:f3:d0:12:ee:9f:78:f1:42:89:0f:6f:8b:41:1b:
84:43:50:0a:aa:33:ee:05:47:ae:5e:2a:43:e7:c4:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:7D:8F:7D:2B:B7:A2:C0:B0:70:0D:79:63:15:7D:21:B2:14:7B
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:81:e9:8f:4e:8a:c7:16:ff:85:3c:fd:fa:ed:f4:37:4a:
49:f4:07:1d:a0:f9:46:98:cb:d0:4a:64:33:4c:a4:3b:bf:bf:
77:f9:66:54:8c:4b:cf:09:c6:92:d6:05:11:05:49:32:0d:80:
90:c5:23:a9:07:2f:1d:01:ec:8a:5a:8d:84:b6:4c:18:7f:af:
f1:72:5d:b9:28:4e:25:e5:45:d1:6e:39:bf:c1:bd:9a:77:d1:
bb:f6:40:bc:c3:83:88:8c:cf:27:0c:05:0d:f2:d9:33:9b:cd:
21:c8:73:ca:df:31:5e:cf:7e:ee:73:52:89:18:52:d8:ec:b2:
2a:4c:d8:45:59:5f:9b:8f:0d:d1:56:3a:74:ee:8e:e7:4a:07:
ec:20:18:cf:7f:02:55:01:53:c8:cd:85:dd:50:fc:3b:21:14:
c6:72:2e:79:4b:74:07:2c:56:4c:60:ef:9f:fe:1d:8a:cd:a6:
69:31:74:bb:a0:0e:ff:7b:11:de:45:af:cf:1c:59:67:8e:78:
1a:8a:c8:d2:e3:d1:13:3b:c7:1d:a6:b5:ba:2c:cc:5d:82:61:
6b:14:b8:c0:94:be:31:e7:9b:01:b6:4f:c2:70:30:67:3c:96:
18:ba:18:88:e8:cc:1d:3c:fd:1a:23:5b:23:be:18:b0:35:81:
d3:b2:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:00:55 2026 by rpki-client