Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: EOPbhuk9PhUMzd+tIisUdirMBFP5ST3RLKHhBy/N/TA=
Subject key identifier: E7:80:CB:ED:1D:BE:1F:05:BD:BC:2F:01:D5:59:2D:52:D3:18:44:39
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 019E1ED9B2CB232CEA7EF2121382A8975437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 14DC
Signing time: Wed 13 May 2026 01:00:44 +0000
Manifest this update: Wed 13 May 2026 01:00:44 +0000
Manifest next update: Thu 14 May 2026 01:00:44 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: F3Ozz8FOPu5vOXuXQPmMmwSmIbV86FBPmAgXd5DAELo=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b2:cb:23:2c:ea:7e:f2:12:13:82:a8:97:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: May 13 01:00:44 2026 GMT
Not After : May 14 01:00:44 2026 GMT
Subject: CN=e780cbed1dbe1f05bdbc2f01d5592d52d3184439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:e6:0a:df:2a:99:6d:b6:c7:fd:44:67:13:
ca:f4:65:95:12:38:b4:b5:fa:2a:ad:73:56:2a:a1:
de:80:80:29:d7:71:87:ee:0b:18:d1:3f:d8:a2:12:
4b:e2:26:28:9b:11:24:77:6e:37:f6:aa:ea:f3:e2:
03:9b:fa:2a:85:6f:e9:fe:29:5b:73:dd:f8:59:a9:
17:d4:0e:67:8b:45:d8:0a:b3:89:81:ed:52:c7:22:
c1:67:95:dd:78:61:0a:46:f8:81:ac:79:67:60:7d:
6e:c1:3e:81:b9:fd:37:49:bd:6d:b3:0c:4a:fc:b6:
be:c0:1d:e3:0f:28:60:ea:e1:2b:39:e1:70:0a:c5:
6d:74:09:18:d9:89:29:b0:a5:ba:8b:e6:a6:4b:3b:
86:71:ba:69:fd:af:d4:bc:d7:48:59:2f:8d:34:43:
0d:72:60:b9:9b:1e:61:88:9f:63:93:6f:1e:b6:9d:
f8:7f:f7:ca:7b:ef:37:9e:d6:dd:0b:d4:53:54:77:
4d:6a:cc:01:7a:f0:24:f7:31:56:a7:2d:53:3c:62:
b3:c8:fa:5c:9d:c7:4c:77:1c:06:9c:2d:84:83:15:
5c:1f:5b:34:34:33:25:03:b1:d0:d8:1d:d5:ed:f4:
fd:b3:71:92:d2:f0:22:83:70:d5:a7:3a:ce:7f:5f:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:CB:ED:1D:BE:1F:05:BD:BC:2F:01:D5:59:2D:52:D3:18:44:39
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:e2:91:70:88:1c:29:50:70:a1:7f:f2:1d:d0:bf:42:a0:
80:b2:ed:be:43:7c:5c:a3:ed:50:c7:7d:d5:b0:42:82:b5:c5:
4c:cd:af:79:91:34:a2:96:77:ea:22:84:42:c5:d9:16:6f:33:
77:9d:dc:de:81:ed:3e:51:67:0a:37:ab:6f:fd:b1:44:fd:97:
2f:c5:92:14:7f:b3:28:13:1a:f4:20:fe:02:ca:9d:aa:00:6d:
1b:82:f0:92:4b:60:6b:75:55:f4:ac:ab:08:de:3e:78:04:b1:
c0:d8:b6:82:ce:1e:53:5a:bc:48:59:fc:29:0f:47:d8:0e:75:
b9:65:1e:b4:3c:18:76:e7:d8:20:02:45:27:3d:68:d6:38:4e:
f5:00:f5:39:6e:8e:19:2a:93:49:f9:46:ec:48:53:d9:25:da:
86:1a:f6:9e:b2:18:c8:23:a7:e3:60:0e:c6:37:8f:c5:73:b9:
f3:2e:14:fa:0a:d4:f6:e7:2f:cb:b1:4c:0b:64:32:eb:9a:c6:
34:54:29:f5:d5:89:54:aa:a3:e2:f5:19:87:1c:6b:5c:0b:75:
bb:86:ca:d0:6c:0f:53:96:d1:56:d9:59:e2:31:9d:b4:09:bd:
8d:00:6c:76:2a:62:84:37:9f:2d:ec:59:8f:e7:46:7c:89:bc:
42:fd:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:09 2026 by rpki-client