Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: HEDphAZ/31HCKOch6pCwX5fsAxNoefH3UCV15U1xgBc=
Subject key identifier: 98:12:88:A2:C7:FB:66:5F:B6:57:90:A3:0D:10:20:AB:66:67:FF:F6
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019D38D2F6B4D5C7088C4676BFE819FAC695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 0115
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: A4wu6ZHFnNSYeNBGxLCb6dqf68m8BBagIIdthN8lQyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f6:b4:d5:c7:08:8c:46:76:bf:e8:19:fa:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=981288a2c7fb665fb65790a30d1020ab6667fff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:6b:80:27:af:fb:30:e0:23:a0:2f:3b:ad:
cc:35:84:5f:b0:20:59:c9:b5:8f:10:d8:2d:12:d7:
94:a2:7e:e6:25:b8:e2:34:b8:4a:52:c8:42:1e:c9:
15:d9:7c:04:74:ba:09:22:ef:a6:09:07:40:af:f9:
03:43:49:c4:a3:86:c2:42:30:20:a6:03:f9:d4:ba:
df:b0:5e:cb:bc:c1:1f:76:40:f9:3b:ae:e8:d8:d6:
0b:19:a9:3e:c9:1d:75:52:17:5f:a4:9c:3a:88:66:
75:ad:0d:69:8e:03:ee:49:59:f4:15:2e:ef:0c:e3:
05:83:3f:26:07:a2:0c:68:df:30:e0:0b:b6:87:0a:
81:13:ad:e8:60:61:b3:0f:7e:fe:83:d8:31:64:99:
70:e5:26:82:91:c8:36:c8:0b:8f:fd:66:2b:c6:b9:
0e:b7:51:82:4c:67:6e:aa:a6:2a:97:c0:9e:dc:a4:
7f:3a:61:d5:91:c3:07:df:59:2b:80:95:eb:69:1a:
7f:fe:21:f9:d6:0f:dd:b8:ef:7b:22:6e:ea:5e:7d:
19:6f:01:1e:f9:5f:07:f1:35:39:49:0c:05:24:d5:
9e:df:31:2b:a6:aa:79:a5:67:45:5e:53:ae:b0:a4:
cc:90:c3:fa:55:f0:d4:f0:6f:2f:38:eb:84:7b:53:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:88:A2:C7:FB:66:5F:B6:57:90:A3:0D:10:20:AB:66:67:FF:F6
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:77:03:3b:6f:e6:ad:bb:11:90:7f:be:fe:41:19:84:9b:96:
11:85:3b:f5:07:ce:e3:07:e8:64:2c:16:8b:c4:53:ea:94:1f:
d0:04:3f:d7:95:21:41:fc:03:ee:2e:db:97:7f:3b:cf:c5:1d:
e1:26:df:1d:6e:9d:ce:9a:70:44:e6:c8:35:ae:80:90:26:f6:
6b:ff:bf:da:b4:af:74:60:f8:5f:4c:4c:c9:81:13:24:f7:2b:
56:dd:e0:fa:27:b0:f4:34:7e:92:f6:e3:fd:a3:e4:20:33:f9:
66:d6:07:9a:97:d2:65:53:42:48:56:78:76:51:b5:74:4a:32:
cb:14:e6:ec:f8:76:f5:3a:01:2d:9f:79:dc:96:18:a4:7f:19:
ef:bc:3a:c9:96:c3:16:db:7d:0e:0a:8b:1e:b7:4e:92:ae:de:
1a:56:95:d2:ac:25:6d:0d:59:85:3d:2f:dc:e1:ee:5d:8f:2b:
57:43:12:cf:f0:f8:e4:67:6c:ce:cc:11:d8:3b:9a:5a:06:93:
c9:60:12:7c:32:21:a3:95:d9:45:da:92:93:b7:59:ec:ee:bd:
eb:c3:07:f0:3c:27:e2:aa:d8:e2:93:de:21:b9:8c:50:52:02:
15:44:4b:7b:e0:75:74:1e:7a:27:ca:70:3f:b7:7d:11:19:06:
33:37:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:19 2026 by rpki-client