Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: pIdmw93LxeH7dDhtnVRf2qT42cr04Eq0QynTyyzSdWY=
Subject key identifier: 27:6C:D3:E3:8B:D0:0F:5D:A8:99:51:84:8A:7F:76:5A:26:0B:D4:AF
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 01A0ED41CF33927CC266E0F0DA52B9900841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 1650
Signing time: Tue 29 Sep 2026 13:01:48 +0000
Manifest this update: Tue 29 Sep 2026 13:01:48 +0000
Manifest next update: Wed 30 Sep 2026 13:01:48 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: xaM8G4ctBWiF204kPPXS3SuQyZfgY9OpR/WIIMfJv5w=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:cf:33:92:7c:c2:66:e0:f0:da:52:b9:90:08:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Sep 29 13:01:48 2026 GMT
Not After : Sep 30 13:01:48 2026 GMT
Subject: CN=276cd3e38bd00f5da89951848a7f765a260bd4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:f0:dd:44:2d:88:40:b6:7e:4e:40:1a:6e:
c2:e1:30:bb:5b:f4:56:7c:47:69:3b:24:7b:32:ed:
c0:7b:a5:0c:da:9d:0b:91:18:d3:5d:5f:46:04:14:
59:98:70:c3:95:c9:f5:7d:ab:c3:18:dc:3a:fa:15:
2e:20:cf:5d:3e:0f:11:48:de:83:cb:e7:ed:24:2d:
ad:dd:cc:08:04:11:e0:b6:2d:ea:64:3b:99:68:46:
ca:82:10:c4:59:80:df:7c:27:e7:21:f1:6f:fe:a3:
08:8e:9d:86:3c:d7:a4:61:a4:46:24:9b:5f:38:e3:
cc:69:27:1f:12:10:c5:4c:db:df:be:d3:05:1c:40:
3e:5e:52:e1:d9:0c:96:d2:52:6f:d5:15:78:ad:3c:
5d:41:21:b2:13:8c:05:d9:c3:c9:85:4f:9d:26:b4:
7a:44:14:db:f0:5b:a9:28:3c:38:0d:0d:77:eb:69:
6a:f7:a3:39:f9:ca:2e:1b:3f:bb:9e:77:69:2c:6d:
09:64:68:a3:58:a4:26:a2:9f:2d:af:79:f3:c5:a9:
34:be:13:af:f8:cc:4e:9a:a5:29:db:88:24:0e:0c:
6d:e0:14:65:11:ce:90:da:e1:d1:02:f7:de:2a:70:
bf:fc:4b:36:cd:5c:25:b2:a5:76:67:e7:8f:c1:a0:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:D3:E3:8B:D0:0F:5D:A8:99:51:84:8A:7F:76:5A:26:0B:D4:AF
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:2e:21:4f:39:5f:f0:f8:b2:44:b9:18:b5:a0:e1:af:a0:
c2:b8:49:a1:b5:a8:6f:4f:97:46:f7:bb:64:36:9f:d2:c1:d9:
e1:04:65:f3:58:49:40:48:81:06:92:31:3e:a6:0f:52:af:0d:
5e:4a:e9:c1:84:36:97:56:7c:cd:7b:1a:91:55:a9:45:3f:ab:
50:08:be:5d:5d:34:e7:36:fc:74:09:7a:5f:8d:eb:68:c2:ef:
ed:6f:ab:9d:6e:56:26:9a:c2:48:fc:54:05:cb:8b:db:13:d9:
a0:3d:1a:33:18:67:ad:37:c5:df:3b:7d:39:1d:66:2b:7f:d0:
a1:12:62:a8:01:96:2b:0e:64:e5:43:48:a7:b4:04:b6:08:4a:
5c:c9:a9:2c:d0:f3:65:b2:b7:61:21:ca:e1:00:41:70:e6:12:
da:f9:b3:fa:05:c2:47:13:be:da:e3:a5:e2:b4:3c:45:f3:a3:
2c:00:14:a6:01:b2:7d:fb:cf:c0:a4:71:ef:69:e9:77:76:72:
43:52:10:ae:da:dd:1c:f7:eb:19:5c:75:f4:7c:62:59:f3:54:
dd:3c:8e:38:5f:4d:42:3b:16:b7:e8:04:a9:80:05:1d:d0:78:
79:06:ac:4e:c8:f3:2b:68:4e:f2:48:67:1f:8f:43:c3:db:c2:
23:ba:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:50:57 2026 by rpki-client