Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: jLWyUds4UT4dbxJPr9QraU8wIoHvqDkKwwirL7XJheA=
Subject key identifier: 6D:92:E8:85:17:74:A0:40:24:1E:DB:27:28:BC:00:19:F6:B4:60:D9
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 019D9B87536075830B84D277B3BE60B1A8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 1498
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: f9TmgEtt4oS21s90RML4ayCPRVyyTQ6nNrcrCH/+R7k=)
2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:53:60:75:83:0b:84:d2:77:b3:be:60:b1:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=6d92e8851774a040241edb2728bc0019f6b460d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:d2:b8:fe:36:66:3d:dc:cb:15:d0:8c:3f:
15:cc:35:6e:ca:52:e9:dd:e7:5c:d1:5a:54:7b:28:
bf:ef:f8:1b:c4:31:e0:e7:ea:e0:49:61:0a:87:ec:
55:a2:e0:41:86:9e:58:57:21:42:c3:74:fe:4f:e5:
c5:9f:5e:60:53:32:2e:9f:a1:04:13:12:e8:72:93:
ba:57:5a:72:7c:91:0e:da:70:c2:08:4f:b2:b6:23:
ba:32:e5:b8:1a:3d:65:32:ea:34:79:42:25:ec:06:
b4:bc:65:7a:89:11:ab:6f:a5:63:86:e6:43:7a:c9:
b3:e3:8b:15:7b:c2:2a:3f:9b:15:52:5f:e8:51:f0:
c3:7d:6a:d3:69:ce:12:a7:a4:3f:d5:bd:f5:4c:d7:
9b:6f:80:8f:48:cf:8e:6d:b6:4d:d6:fa:90:11:d7:
d5:60:dd:85:83:46:60:35:0e:8d:e0:e8:c1:46:d0:
18:47:00:37:4c:2b:0c:1b:ac:d4:c7:6f:eb:1b:17:
8b:09:96:20:fb:08:36:0f:b9:54:92:57:7e:e7:af:
09:e6:47:cf:f5:26:3d:cb:ce:99:79:75:96:54:38:
70:32:f9:6e:67:41:b2:0a:e3:c6:05:3e:83:e7:50:
db:13:5c:dc:60:c9:37:6b:0e:2a:8b:ac:b3:51:9c:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:E8:85:17:74:A0:40:24:1E:DB:27:28:BC:00:19:F6:B4:60:D9
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e8:7f:81:de:8d:c5:24:2e:56:fd:fd:56:6b:93:9c:34:37:
a0:c4:ec:d0:a9:36:0a:68:57:0f:eb:62:96:2f:9c:4c:b9:49:
a1:be:9f:2c:0d:09:d7:0c:92:06:50:c1:9e:ee:c0:53:dd:52:
71:9b:11:ea:9c:f1:da:ce:f6:80:a7:b2:50:a4:ae:6a:36:50:
be:17:9d:a8:8c:d9:36:c3:f2:1b:a4:ee:f2:d1:7d:77:23:dc:
de:fe:85:d9:ad:fe:bc:f9:0a:3a:7c:db:78:1e:f8:13:1f:49:
f5:e0:bd:ef:1e:52:49:df:21:59:77:8a:f8:b6:87:f6:21:81:
77:cf:af:0e:71:0b:f4:2e:6d:16:76:93:76:29:e7:56:dd:64:
1e:6e:16:a0:82:19:32:24:66:5d:cb:98:29:84:7d:fc:53:cf:
ec:fa:41:36:41:47:fe:07:7a:66:76:48:81:d7:9d:73:ca:99:
6b:82:c1:14:e4:df:d5:e4:ce:f2:ee:0c:b2:42:43:f1:03:ba:
b5:67:5a:7f:24:b3:e6:f3:6f:9e:d5:dd:d1:63:51:6c:59:13:
69:e7:3e:80:bb:90:fa:d7:da:52:a7:9a:f2:e3:59:a0:eb:e8:
1a:78:b0:b5:f5:e7:fe:c1:8b:11:e9:87:a7:23:67:60:ae:7b:
b8:14:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:25 2026 by rpki-client