Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: QxASGKUgLYstpalMjd/h6Yb92hd4I2x+MZMCcJjd1hY=
Subject key identifier: 56:4C:01:9F:BD:A7:40:FF:A1:ED:1A:7C:89:8D:38:CF:E4:F5:3F:67
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019D25F1359F295735853C8627281AFBA7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 07DC
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: 5PcMRgl4L9qNIGH95MlauH/+HYUBEpGuKm6ajd3wxnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:35:9f:29:57:35:85:3c:86:27:28:1a:fb:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=564c019fbda740ffa1ed1a7c898d38cfe4f53f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:e3:0f:ca:df:f4:bc:1c:04:67:27:e9:ed:
55:c5:dc:c8:4b:74:6f:0d:01:52:50:b7:cb:73:a1:
14:e3:da:16:05:cc:66:dd:dc:cb:00:1a:a9:4e:36:
ff:53:21:50:03:f9:78:66:26:de:30:f4:2d:28:6e:
ce:03:13:fb:0e:e5:8a:b6:93:f8:6a:95:11:32:3c:
33:4d:00:74:c9:98:19:7f:9e:f6:d5:c2:5f:b1:c9:
5b:1f:aa:8a:19:8f:8b:a1:54:da:02:de:cd:94:0e:
9d:e0:3b:1a:db:5d:90:15:0f:9a:4d:c9:3b:ac:f6:
2b:46:8f:2b:0e:e2:19:dc:f8:c9:3b:8d:76:92:42:
75:d6:df:9c:50:f0:9d:1c:d5:72:bc:69:20:49:84:
5c:7b:b3:a8:b6:11:e5:96:2a:2f:aa:12:d6:80:31:
7a:02:27:6f:c5:68:49:54:c1:99:b8:80:c9:15:a8:
79:9d:d5:09:79:29:6c:a8:d9:4d:f9:9b:23:1a:ac:
32:0d:d8:84:f7:ff:b4:0c:10:ca:b7:70:ab:15:93:
f6:10:59:03:03:18:c5:46:b6:20:ab:18:32:9a:a4:
0f:86:f3:da:33:fe:49:79:d8:13:5e:59:61:44:26:
e5:78:ec:7b:1c:ee:55:11:87:97:d1:be:f9:32:1a:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:01:9F:BD:A7:40:FF:A1:ED:1A:7C:89:8D:38:CF:E4:F5:3F:67
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5c:53:7d:5b:d7:6f:b9:8c:a2:d0:35:bb:d5:ac:14:22:15:
f7:ff:25:73:b3:19:02:6b:99:ac:d3:14:64:12:f5:4a:44:cd:
a7:29:4a:88:49:24:e1:52:7b:41:c8:8f:5d:20:2c:83:cb:23:
e7:3e:06:cd:d4:ff:0b:b1:ed:c3:9f:89:df:6a:34:61:2c:6c:
20:e4:c9:9a:18:e0:97:e1:af:aa:5a:c5:ad:c9:23:ad:5c:54:
a2:97:00:d4:73:ab:7d:8b:c9:5b:56:33:be:eb:a0:28:07:c2:
23:84:98:36:21:66:5d:39:14:f3:b1:e0:0a:69:a5:d3:af:da:
53:86:c9:de:88:2e:24:b4:66:0c:cb:61:ec:60:ee:1b:b9:bc:
e3:70:cd:a7:3f:bf:94:6a:2a:81:18:35:f0:e5:9b:f9:1c:6f:
47:17:4f:23:09:39:59:13:1b:d1:e6:a8:c0:da:0a:48:79:d5:
0a:f3:95:3e:76:0e:cc:82:61:ff:59:c1:06:bf:fc:3f:e2:6f:
b2:98:6a:bf:08:5c:d4:10:e0:df:42:52:d5:b0:99:3a:80:ac:
66:59:e8:22:d5:05:ca:96:74:0c:c9:e9:d9:f4:65:03:6f:c6:
f5:ba:b0:bb:c7:5e:71:8e:ae:80:1a:42:17:4e:fe:93:a0:09:
f0:ba:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:02 2026 by rpki-client