Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: xpIhzMl5tQ6q0KF96mN2mTLdGOSmiGSSAafg5XFzdcw=
Subject key identifier: 6E:0D:CF:C1:5B:0D:40:5F:96:EF:D3:9E:65:B4:00:4D:A5:8F:3A:FB
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 019F93919F14A01EBD41C0F892F2C27D99A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 159D
Signing time: Fri 24 Jul 2026 10:00:21 +0000
Manifest this update: Fri 24 Jul 2026 10:00:21 +0000
Manifest next update: Sat 25 Jul 2026 10:00:21 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: bV19ssKs9mBLETOO+hEERdKhHTx8caikTi+OTkyAGmo=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9f:14:a0:1e:bd:41:c0:f8:92:f2:c2:7d:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Jul 24 10:00:21 2026 GMT
Not After : Jul 25 10:00:21 2026 GMT
Subject: CN=6e0dcfc15b0d405f96efd39e65b4004da58f3afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:a9:60:2f:48:8e:c4:42:1f:f8:05:88:1b:
0e:02:d3:3a:b3:6c:4a:6d:4c:0a:e6:82:1f:2f:ab:
50:b2:e3:6f:4b:ff:bd:4d:73:c6:ee:22:c3:05:cb:
45:05:ad:7f:06:bf:05:8e:29:1d:10:8a:03:18:4d:
80:37:de:90:d3:ef:9f:76:25:bc:91:6b:38:f5:d1:
27:04:72:b8:35:9e:5f:71:ed:25:8d:a6:21:84:6a:
24:41:c2:99:0f:50:4c:7f:dd:ab:35:3c:53:fe:ae:
43:63:cc:1a:f9:84:62:dc:40:44:b8:68:26:ea:e5:
a4:cd:1e:72:66:da:3d:8c:8c:ea:5b:85:e4:8e:2a:
76:1b:56:bd:85:62:de:7d:97:3b:f9:42:1e:70:d3:
f7:dd:7c:cc:a6:2d:83:7b:0b:9c:02:2c:ea:56:b3:
cc:a3:55:81:54:1d:83:d0:89:e2:36:03:c7:66:ea:
b4:b1:6d:61:a2:fd:d1:4a:42:6d:2b:67:40:4d:e8:
14:75:9e:3f:b2:d4:2d:a1:74:73:2e:f9:64:7c:1b:
d7:c8:2f:5a:fd:92:70:3c:56:9c:f4:7e:eb:27:ad:
8f:cf:dc:af:97:0b:07:0a:56:0b:61:19:32:6c:6b:
54:6c:6a:e0:a7:d8:9d:d7:50:8a:15:7a:40:3e:54:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:CF:C1:5B:0D:40:5F:96:EF:D3:9E:65:B4:00:4D:A5:8F:3A:FB
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:30:ae:28:0c:de:b1:13:d4:38:91:1d:5b:65:8e:ae:d7:
3d:91:c3:bb:79:90:5c:f7:72:81:6d:3d:48:5e:05:7c:06:66:
13:d8:ba:24:94:54:28:fb:5f:b5:7f:d0:8d:86:91:dc:4c:61:
4c:4d:85:ee:2a:3a:61:e2:60:d6:af:e9:e7:dc:fb:39:67:56:
81:7b:3d:8f:e2:2f:a8:fb:a4:a1:ce:db:83:f9:cd:35:85:fc:
73:12:4a:21:1b:f5:89:6d:f2:9b:32:37:3f:fd:33:4a:01:9d:
2c:cc:85:01:d5:fa:13:93:57:68:35:b7:65:fb:01:df:bb:0d:
6c:ab:a2:d3:d3:cb:e1:91:44:75:23:bc:e2:b2:3e:47:19:84:
19:33:34:7e:e5:da:54:90:94:21:59:e0:28:bc:d2:0b:40:17:
d3:4d:61:5d:a3:55:c1:c1:72:4f:6d:1f:d8:10:86:41:fd:f1:
54:4a:0c:45:f5:dc:08:1d:50:49:1b:0f:6f:1d:22:8a:bc:32:
a1:bf:62:e6:da:a6:92:66:66:4d:8c:b5:eb:7c:96:86:c4:b7:
37:2f:0a:14:fb:00:45:0c:97:ac:f5:c5:de:c7:9f:03:27:ea:
3c:2b:20:7b:30:80:33:47:4b:3b:25:a9:3d:3a:a0:25:84:cb:
ca:72:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:01 2026 by rpki-client