Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: Kt5AsdaChGHrlXtiAXthwFG10v8vdUOMq8c/gaEo7pc=
Subject key identifier: 43:80:BD:ED:E3:52:2A:6B:95:66:89:DF:02:B6:2E:60:70:41:D1:96
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01A138C9B134457A0F5B304D78E98F4ACF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 148A
Signing time: Wed 14 Oct 2026 05:01:44 +0000
Manifest this update: Wed 14 Oct 2026 05:01:44 +0000
Manifest next update: Thu 15 Oct 2026 05:01:44 +0000
Files and hashes: 1: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (hash: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8=)
2: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: g0mTuqZr6p6frY/GWMZ9AP3SuRiomMuARhMZWACfoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:b1:34:45:7a:0f:5b:30:4d:78:e9:8f:4a:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Oct 14 05:01:44 2026 GMT
Not After : Oct 15 05:01:44 2026 GMT
Subject: CN=4380bdede3522a6b956689df02b62e607041d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:d8:be:14:c2:7f:7b:51:2b:ed:7e:be:df:
f2:8b:6f:94:07:e3:37:eb:a0:bf:19:14:43:51:ba:
5c:c7:5f:4b:a6:d2:16:49:c4:1e:7e:f0:27:bd:77:
e3:83:04:3e:cb:66:d6:61:d0:be:4e:8b:03:a6:43:
54:7e:3a:fc:de:87:63:d6:7b:44:11:b1:d6:72:5b:
1a:af:3c:94:48:65:e8:e0:63:34:2b:91:9e:bc:f7:
5f:2f:b3:a8:2a:96:de:b5:d8:c9:43:69:84:a6:df:
60:2f:4c:94:7e:84:97:a4:d5:ee:e2:9a:e0:5d:56:
73:af:3c:a6:18:21:ff:48:19:1f:e3:fb:b3:44:5f:
c0:af:72:a3:30:2b:08:40:1d:d5:c0:de:de:54:dd:
2f:11:a3:a5:3d:e8:ca:8a:8c:ea:77:59:3c:bb:35:
ab:5f:17:08:67:9e:76:1b:e2:1b:23:f3:0b:21:ee:
7b:05:43:ad:fc:97:c7:dc:9d:8a:0c:dd:1b:4a:9f:
f1:1b:75:65:8d:54:a5:52:26:71:a3:da:c2:8d:db:
65:f9:6b:5c:ea:74:ea:b6:4d:bf:c8:30:61:e1:64:
35:58:c3:38:d3:0f:d8:30:9c:04:67:cb:4a:ff:ce:
4d:ac:31:84:53:7b:04:f2:03:29:bf:27:10:d6:3a:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:BD:ED:E3:52:2A:6B:95:66:89:DF:02:B6:2E:60:70:41:D1:96
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:62:1a:29:30:4d:e9:8a:19:dc:2a:be:2a:2a:76:64:92:
52:a7:13:37:8f:cf:a5:4f:77:b1:81:36:77:44:f7:0f:0a:79:
9f:b8:d9:f3:ff:95:7e:0f:31:bf:73:cb:0d:7b:e9:5b:22:d4:
87:47:33:f4:c4:04:1e:d1:b5:f5:48:cd:0b:a1:96:9a:61:12:
5f:bd:37:21:20:9d:ee:d3:9e:b7:2b:90:c6:a1:04:0d:cd:52:
fe:92:04:3b:ce:db:b5:2d:37:c2:1f:7e:42:38:93:5e:06:49:
8e:0e:68:ae:eb:4f:76:93:d4:31:23:90:ee:5d:2b:6d:96:82:
6e:60:1b:69:17:03:15:63:c9:67:fc:33:ae:47:a0:6c:0a:5f:
9c:23:38:da:f8:c7:5b:ba:fd:49:1f:ab:6e:51:fc:0b:68:e9:
99:73:e5:41:2e:fc:ac:03:48:7a:aa:60:a6:82:11:71:35:a8:
89:b9:89:76:69:21:b7:fa:e2:c7:06:87:e8:7a:58:80:a2:22:
44:ad:6e:59:d7:5c:ff:77:82:53:fb:03:d0:4e:42:6a:7c:04:
81:0a:9c:a2:f7:86:62:8e:02:b4:4b:6c:47:cb:d5:f7:7c:62:
ae:8a:20:7e:0c:0e:19:a3:8e:a3:99:ed:1d:a7:e6:a9:68:ff:
7b:bb:6d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4ybE0RXoPWzBNeOmPSs9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZjk2ZTdkYTU0OThiNzBlM2JiMTdiNmUxOGEzMTEzNzEy
ZDMyYjYwHhcNMjYxMDE0MDUwMTQ0WhcNMjYxMDE1MDUwMTQ0WjAzMTEwLwYDVQQD
Eyg0MzgwYmRlZGUzNTIyYTZiOTU2Njg5ZGYwMmI2MmU2MDcwNDFkMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCHYvhTCf3tRK+1+vt/yi2+UB+M3
66C/GRRDUbpcx19LptIWScQefvAnvXfjgwQ+y2bWYdC+TosDpkNUfjr83odj1ntE
EbHWclsarzyUSGXo4GM0K5GevPdfL7OoKpbetdjJQ2mEpt9gL0yUfoSXpNXu4prg
XVZzrzymGCH/SBkf4/uzRF/Ar3KjMCsIQB3VwN7eVN0vEaOlPejKiozqd1k8uzWr
XxcIZ552G+IbI/MLIe57BUOt/JfH3J2KDN0bSp/xG3VljVSlUiZxo9rCjdtl+Wtc
6nTqtk2/yDBh4WQ1WMM40w/YMJwEZ8tK/85NrDGEU3sE8gMpvycQ1jqMGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOAve3jUiprlWaJ3wK2LmBwQdGWMB8GA1UdIwQY
MBaAFD35bn2lSYtw47sXtuGKMRNxLTK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYt
MzZlODg1MDY2ODBlLzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYtMzZlODg1MDY2ODBl
LzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF5iGikw
TemKGdwqvioqdmSSUqcTN4/PpU93sYE2d0T3Dwp5n7jZ8/+Vfg8xv3PLDXvpWyLU
h0cz9MQEHtG19UjNC6GWmmESX703ISCd7tOetyuQxqEEDc1S/pIEO87btS03wh9+
QjiTXgZJjg5orutPdpPUMSOQ7l0rbZaCbmAbaRcDFWPJZ/wzrkegbApfnCM42vjH
W7r9SR+rblH8C2jpmXPlQS78rANIeqpgpoIRcTWoibmJdmkht/rixwaH6HpYgKIi
RK1uWddc/3eCU/sD0E5CanwEgQqcoveGYo4CtEtsR8vV93xiroogfgwOGaOOo5nt
HafmqWj/e7ttig==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:37:51 2026 by rpki-client