Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: OQjOfCgun0vjq+yzzfB2UFajpSmlj9ZOLudXxEmunOE=
Subject key identifier: 35:B3:AC:86:38:3B:08:06:B8:BF:0E:B2:FE:51:DB:C8:9B:7E:F1:90
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 019CAC0FBBA855EDD0B3D13B5701198612BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 141C
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: 54JDFenAwWQAz+jMJs5MO2EvuLnLIaZBtfXzZORJsC0=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:bb:a8:55:ed:d0:b3:d1:3b:57:01:19:86:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=35b3ac86383b0806b8bf0eb2fe51dbc89b7ef190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:76:8e:99:11:74:70:fe:cb:74:f1:c8:0d:
2b:62:d1:ab:e8:4f:e9:1b:a1:f1:bc:ab:f3:e1:f6:
a8:84:f2:b6:d7:75:40:95:13:8b:fa:9a:af:d9:46:
89:7f:a3:32:69:9d:a2:c0:80:33:cf:ee:aa:4e:2f:
5e:3e:b1:c0:be:95:b0:ff:54:85:60:55:a6:93:00:
c3:30:a7:11:e6:63:69:36:5f:c9:4f:35:50:57:f6:
3c:24:48:03:a6:20:70:43:25:7b:df:b7:e7:d8:ae:
f0:b4:39:a9:2b:dd:7a:3d:49:ca:4e:3e:be:68:80:
13:16:22:2c:22:90:b7:09:9c:09:2f:e8:da:7d:2c:
a6:dd:92:cb:3a:3d:05:cb:4f:8b:cc:3d:6b:18:81:
c7:ec:d9:9b:e4:26:1f:aa:3e:fb:17:d4:85:c7:25:
65:89:5e:9b:f2:12:e5:4e:83:15:4a:f1:4a:8b:15:
0c:b5:6d:33:85:bf:b6:c5:63:99:32:23:48:b6:17:
73:39:51:8c:68:94:31:da:f8:44:03:da:3b:84:96:
7c:af:8c:fc:d2:da:80:8b:b8:37:66:9e:31:0a:55:
39:44:f2:e4:3b:52:39:a6:0d:fe:7d:9e:08:d9:23:
61:36:71:0b:b7:83:2d:6e:80:c1:b3:3c:4e:8b:91:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:AC:86:38:3B:08:06:B8:BF:0E:B2:FE:51:DB:C8:9B:7E:F1:90
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f2:f2:e8:ad:2c:b1:2b:49:45:c9:fe:79:37:37:26:c0:9e:
0b:5f:6e:2f:7b:d6:1f:8d:72:7d:f8:5e:7a:7b:9e:23:84:4f:
95:b6:c1:23:59:30:9e:16:c7:37:44:b9:04:8b:b9:2e:59:64:
5b:dc:26:71:16:f3:8f:80:1e:cd:c5:23:e9:60:2b:e1:67:88:
77:24:b9:b4:be:90:8a:0c:b5:cd:63:73:3f:ea:dc:f0:1d:63:
29:86:80:76:3c:38:03:1b:34:9d:00:8c:03:38:6d:0d:c3:4e:
02:63:30:e9:e0:cb:9d:a2:dc:dc:83:b0:7c:17:ff:06:c6:b7:
84:75:ae:5a:5d:cf:4e:f2:2f:5f:dd:75:30:0b:fe:82:27:bc:
97:b5:64:5e:99:a4:44:77:71:03:b1:3a:07:50:99:c8:36:3e:
e0:25:f9:9e:01:ef:c6:c9:33:65:e6:cd:1d:11:0b:00:b1:f4:
60:68:c9:05:48:45:17:ec:ca:19:f3:22:08:43:a1:a1:28:bc:
cc:59:54:e9:4a:5a:3b:38:6d:61:fc:1b:a2:ab:50:ff:80:fd:
30:d2:66:07:96:3e:0b:ad:66:72:63:3e:90:2f:11:40:9e:91:
e2:49:91:3d:55:76:ed:f4:00:f8:db:9c:fd:40:76:5c:40:a7:
e8:da:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:29 2026 by rpki-client