Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: JgsRMcVb4F/oN7zALEWpYiPqFcuaRXFnND83mcNVdvk=
Subject key identifier: 46:01:61:32:CB:82:61:DF:28:10:DF:37:CF:23:FA:93:ED:B9:97:D6
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019F15D432C2C2FDC34B41B343B3352AE428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 020C
Signing time: Tue 30 Jun 2026 00:00:55 +0000
Manifest this update: Tue 30 Jun 2026 00:00:55 +0000
Manifest next update: Wed 01 Jul 2026 00:00:55 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: P3D3N3GfsSFEFmKwe6MFz0Auo+il3GaiX3EJU/Qpy3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:d4:32:c2:c2:fd:c3:4b:41:b3:43:b3:35:2a:e4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Jun 30 00:00:55 2026 GMT
Not After : Jul 1 00:00:55 2026 GMT
Subject: CN=46016132cb8261df2810df37cf23fa93edb997d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3a:a0:f9:00:d2:1f:b8:00:5e:a5:c3:25:46:
d3:3c:5d:87:fc:c8:e4:45:89:8b:c5:64:ce:0e:a8:
7a:07:ca:3b:4d:45:3b:d3:ef:3f:33:ca:f7:3e:8c:
fc:9c:81:40:ab:79:af:0c:64:6b:5b:87:6e:25:32:
3a:56:c0:f2:eb:5a:a3:ef:20:79:76:b7:d4:38:18:
b8:c5:7a:d4:ce:07:d5:9e:a1:96:cf:00:df:81:04:
cf:44:22:80:12:29:62:68:c8:55:07:78:6c:e0:79:
30:71:a9:b4:22:63:fe:dd:a2:8c:87:6b:51:bd:7c:
ab:9c:8f:fe:07:8c:d8:7e:3a:dd:e7:92:93:7f:73:
f9:b9:01:ca:a6:cf:cc:2f:1a:49:52:fe:29:e5:a1:
57:d9:9f:b0:64:86:63:7f:00:fc:83:b9:60:09:bb:
ae:89:48:73:8b:8a:4c:4d:d1:0f:ff:79:a0:bc:f5:
98:e5:f8:e6:47:f0:8e:98:d8:7f:b3:24:52:43:8c:
68:fd:6f:6f:06:05:40:6d:7e:2b:97:4c:81:c4:0b:
4b:73:31:97:02:ad:31:b9:ff:81:a1:1c:cf:e7:37:
9f:32:d7:f8:e3:ee:39:5b:80:dc:3d:cc:3a:27:95:
1a:0c:e2:6a:17:49:e5:bb:87:4d:7f:cb:b9:c5:8a:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:61:32:CB:82:61:DF:28:10:DF:37:CF:23:FA:93:ED:B9:97:D6
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:ae:ff:f6:1b:b9:d8:67:1e:62:72:ee:3d:24:78:cc:29:
21:04:e6:55:6d:42:3e:c3:32:19:b3:03:44:a1:cd:10:17:d2:
d3:b9:ed:26:0f:b1:35:51:16:fd:7b:83:d9:be:c9:85:bd:68:
66:86:79:0f:43:45:73:48:e3:5e:a8:e8:60:51:51:a3:f8:b3:
00:ba:e7:ae:c0:65:fe:90:7d:19:d8:b3:f4:d2:c6:85:46:fc:
8d:e4:de:00:43:df:dc:ef:3b:5d:ed:77:2e:6c:d2:18:7a:71:
69:9a:50:1d:8b:e9:da:9e:51:07:7b:4a:69:71:30:5f:e2:b7:
ca:13:bd:54:5f:63:3a:09:01:74:11:8a:78:04:05:fa:43:11:
78:e6:ab:8f:c4:16:88:f5:21:37:1b:31:d5:1d:7b:a4:dc:10:
61:b6:eb:37:15:4b:67:91:8a:39:42:50:0c:75:57:b8:db:2f:
94:6f:ac:64:3a:f8:fd:a7:dd:b5:00:23:4b:62:5b:10:87:2f:
39:ba:7d:bd:60:0f:b7:ef:23:f4:4a:e2:25:02:fa:42:e8:11:
eb:52:c2:21:a6:70:7f:de:fb:55:92:cd:30:3c:96:da:72:1d:
05:80:07:5b:ba:54:b6:90:a4:bb:b0:08:3e:91:bf:23:39:d6:
05:74:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:19:41 2026 by rpki-client