Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: e//4JcqE2MOr1n4ZQnOPd3eeADwYOwt3xGdidtslH2A=
Subject key identifier: C4:B5:52:46:97:B1:95:B8:FF:2A:B9:9A:12:5C:36:3F:AC:CE:B6:74
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 01A13E25DAA6CA2412B928FB4C7DF996CE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 032A
Signing time: Thu 15 Oct 2026 06:00:30 +0000
Manifest this update: Thu 15 Oct 2026 06:00:30 +0000
Manifest next update: Fri 16 Oct 2026 06:00:30 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: RHuUffXkjMMySixQnay41JlNx/MS2AkIQt/7hW9nOf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:da:a6:ca:24:12:b9:28:fb:4c:7d:f9:96:ce:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Oct 15 06:00:30 2026 GMT
Not After : Oct 16 06:00:30 2026 GMT
Subject: CN=c4b5524697b195b8ff2ab99a125c363facceb674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:69:df:51:0b:f0:8d:aa:cf:86:7c:b5:47:
cf:8f:da:b7:1f:b7:08:f6:9f:5c:8c:4e:38:4f:f9:
b1:e1:4d:2f:76:17:96:e2:a1:ca:33:39:ce:86:fd:
86:51:f0:d4:2d:36:d1:d9:54:ea:6a:aa:4f:c5:b7:
36:eb:d0:2f:62:a2:4a:59:b6:1d:16:38:7c:3a:8d:
a1:81:95:91:51:8f:59:d8:ec:10:c6:a4:57:bc:85:
f7:fb:f4:6f:6e:a2:3b:14:fd:82:61:b6:94:07:57:
95:54:b5:87:f2:b0:d8:85:5d:d5:9b:ff:55:b2:0e:
0d:d7:f6:aa:b1:30:f5:4e:e9:47:0c:49:bc:e3:47:
57:2f:50:f4:9e:1b:9f:fe:42:97:3d:62:27:fe:63:
e2:38:72:63:e7:b9:57:d7:b8:b5:aa:b2:c1:7b:89:
2f:63:2e:3d:32:88:b4:10:11:02:a3:b4:f1:c1:44:
a2:6a:f9:0a:74:7b:a8:53:06:94:53:59:93:c0:8d:
bf:2f:f7:e9:3d:0a:62:40:e5:67:17:04:8e:22:b6:
a1:a3:07:a0:d9:68:cb:c2:1e:41:2e:7a:da:94:70:
0d:1c:d1:c8:64:dc:0c:5e:9b:77:03:cf:a0:9c:b9:
83:51:e4:70:eb:ce:4a:f6:5c:3e:1d:bd:8d:fc:47:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:52:46:97:B1:95:B8:FF:2A:B9:9A:12:5C:36:3F:AC:CE:B6:74
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:d2:ce:7c:81:c6:71:b9:23:ff:f8:10:69:da:03:71:18:
1f:af:34:8c:55:5e:41:07:3d:74:c9:df:f7:26:37:3b:36:bc:
65:fa:36:1b:35:e4:ad:ad:70:23:94:49:66:6d:8c:05:01:e1:
c3:e9:59:35:51:7d:31:aa:89:78:9e:38:8b:4a:a2:70:2d:44:
ac:22:02:7d:83:de:5d:aa:67:8e:7f:7f:d6:1a:cf:47:26:cc:
ba:9e:04:44:83:e3:5f:e8:42:68:1b:87:f4:b0:3d:34:0e:1d:
3c:fb:ad:85:6b:d7:d2:f0:76:9b:6d:86:1f:ea:5d:52:0c:44:
f8:57:41:a1:4a:fd:a2:28:af:cd:2f:18:dc:86:64:10:47:e3:
30:0b:37:9c:67:1d:3d:c0:16:7b:f4:c5:69:81:70:bd:8b:70:
17:f6:c2:bd:46:ac:80:a0:99:59:4f:5f:7a:85:67:1f:48:4a:
56:df:63:f5:46:08:3a:36:74:75:e0:6d:c7:2a:92:67:3d:8f:
34:51:7c:e6:ef:56:6b:a5:36:75:59:57:60:e1:2b:59:1d:a4:
67:74:ce:7a:2d:86:36:e2:0e:2b:92:31:0c:2b:b5:f5:dc:fe:
de:85:54:09:8c:ec:d7:55:32:45:b4:77:71:5d:9c:f8:46:85:
52:3d:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:28:56 2026 by rpki-client