Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: AnEzcXzEuY7dX7HbRBrPeBTLbpk2hoB9lRiHYDdIxDs=
Subject key identifier: 3E:BE:A0:FA:AA:B9:65:D1:3C:FA:91:BB:7C:97:CB:7D:66:65:7E:D3
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 01A125428D3411F2AEEB1EC6839FCC283D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 166D
Signing time: Sat 10 Oct 2026 10:01:20 +0000
Manifest this update: Sat 10 Oct 2026 10:01:20 +0000
Manifest next update: Sun 11 Oct 2026 10:01:20 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: lEKI7z9WyCWfHZub1CO4ldgdi3LWswLKKRsE4/6prDs=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:8d:34:11:f2:ae:eb:1e:c6:83:9f:cc:28:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Oct 10 10:01:20 2026 GMT
Not After : Oct 11 10:01:20 2026 GMT
Subject: CN=3ebea0faaab965d13cfa91bb7c97cb7d66657ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:66:48:b5:a2:8b:f3:a3:9f:90:01:64:61:
49:10:ef:c7:ad:80:77:b3:f1:90:a5:c5:e2:46:cb:
a6:9e:24:7f:d1:c4:f8:8b:a8:19:17:10:c1:29:8d:
ff:1d:c1:48:07:db:33:00:82:01:88:24:0e:6e:52:
2b:5c:76:ea:26:59:f7:ea:92:fb:f9:e0:7b:be:bb:
71:cb:41:bd:d8:fc:31:a8:c6:85:bd:16:65:a0:20:
a9:95:af:e4:b7:6b:1e:96:16:f0:43:7b:1f:0d:10:
f4:da:29:47:61:dd:59:db:4c:4c:0c:f2:9d:ec:f8:
0d:21:70:a8:cb:9e:d4:ad:f6:9d:b9:8d:0a:84:8f:
3b:9a:97:f8:2a:65:40:49:c7:2a:9e:56:a6:c0:6e:
1e:79:0e:30:43:05:0d:6a:bb:93:c4:42:ec:a8:cc:
73:84:3b:3c:24:f8:cf:91:6d:55:7b:2f:58:b6:fb:
d5:57:89:8b:d4:1e:a4:4c:f4:58:a2:69:67:ab:48:
eb:00:5b:a9:de:b1:4e:2a:2d:3c:2d:15:93:bf:b6:
5c:7d:b6:3d:42:77:50:ab:44:0f:e9:b2:07:54:19:
d1:eb:cc:62:55:8c:c2:2e:7c:1a:f5:2f:28:1e:0b:
ca:6b:b2:7c:a5:08:33:ef:18:c8:b1:8b:9f:aa:2d:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:A0:FA:AA:B9:65:D1:3C:FA:91:BB:7C:97:CB:7D:66:65:7E:D3
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:5e:39:62:80:4a:25:04:cc:a8:80:d5:63:9a:0e:0c:c7:
df:c7:19:c3:63:31:ad:07:b7:e6:34:44:1d:3d:12:81:cc:0e:
98:39:24:83:11:0b:85:2d:78:d6:4e:c0:25:cf:91:79:03:09:
8a:6a:90:12:b4:47:f3:d3:04:9b:8c:f6:2f:22:e1:6c:d6:84:
48:35:e5:1e:74:2b:1a:10:ee:c3:52:76:38:a3:ce:51:a8:75:
e6:42:a2:20:de:98:f5:70:22:35:1d:0d:32:40:40:d8:b4:0c:
6d:99:06:48:c4:34:23:29:10:27:8c:d8:28:07:bf:63:d7:eb:
52:cf:ff:3b:08:e6:a1:ff:e1:f7:f9:ea:85:8d:49:c4:de:42:
48:74:50:0b:aa:e0:86:df:da:17:06:27:6b:67:10:eb:81:4d:
8c:2d:65:9e:e7:66:3b:e6:63:95:bb:35:42:68:50:7b:c1:09:
38:e0:89:a6:92:a0:3b:85:87:09:2a:ca:0f:8a:a7:34:56:2b:
5a:ae:37:e2:a4:55:01:84:f4:d1:95:63:00:d2:c1:5a:f6:00:
13:59:51:30:90:58:67:4f:8f:61:d5:8d:db:10:f0:5c:c9:4e:
91:d4:2b:51:a9:8b:26:37:89:5b:df:1c:c2:9c:22:00:4a:8d:
b1:ea:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:59:13 2026 by rpki-client