Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: dxJSAjYBCoe8cnVmWmTiKZJl8OBa6ZD2Qf+iTyu/GK0=
Subject key identifier: 83:57:FA:76:31:2D:E7:AE:13:2F:ED:CF:BD:D1:75:81:62:CA:0B:94
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019DD163A54B9F652AF80AEEDB3236C44449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 18DF
Signing time: Tue 28 Apr 2026 00:01:01 +0000
Manifest this update: Tue 28 Apr 2026 00:01:01 +0000
Manifest next update: Wed 29 Apr 2026 00:01:01 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: C11nnzWtkDd8AW8kuNfXpXNj2cfjn4d4lQA6rqAiLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:a5:4b:9f:65:2a:f8:0a:ee:db:32:36:c4:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Apr 28 00:01:01 2026 GMT
Not After : Apr 29 00:01:01 2026 GMT
Subject: CN=8357fa76312de7ae132fedcfbdd1758162ca0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:fb:25:e6:4c:3b:42:25:9c:31:7f:bd:60:
cf:dd:01:be:07:36:77:7d:7c:ed:c3:8c:6e:a6:4b:
b6:91:de:c5:29:3a:83:d2:ac:b2:fd:f7:19:ce:06:
7b:34:8d:38:8f:1e:36:5f:e3:a8:97:ff:e3:d0:89:
cd:f5:dd:43:d4:58:42:53:d6:96:e3:f5:82:ac:52:
c0:29:91:c0:6e:b6:33:37:32:bf:b0:0b:c0:a5:77:
19:fb:15:c9:ac:ea:27:ef:d5:8e:09:80:eb:83:8e:
72:8a:c9:db:a8:6d:8d:43:cd:27:b9:25:cc:57:bb:
ec:98:3f:3e:b4:8b:fc:5d:e8:b9:c7:b4:d0:c1:b2:
4e:02:96:d3:8b:13:0d:7a:b9:7e:52:21:73:dc:84:
61:5e:90:5e:18:83:56:6b:cf:37:99:99:46:f2:cb:
eb:d8:72:eb:9e:eb:be:6b:37:64:68:29:c7:69:d9:
0f:95:06:d8:77:7c:3d:a1:2d:e8:ed:9f:ba:46:9f:
d8:21:68:9d:1b:f0:af:50:82:8e:25:3c:ac:cd:04:
b2:fe:fb:f7:74:d1:b1:c8:a9:53:1e:ae:d7:07:d3:
cc:00:ed:42:a3:dd:39:e7:78:77:04:16:ce:d2:82:
fe:c2:d3:ff:d4:91:f4:64:b9:d2:f6:6f:24:34:5f:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:FA:76:31:2D:E7:AE:13:2F:ED:CF:BD:D1:75:81:62:CA:0B:94
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:78:b5:8d:1f:63:43:23:76:f7:ed:fd:82:bb:c5:73:ba:df:
ff:70:bb:67:cb:82:3e:16:7e:ef:99:27:73:30:d8:f9:dc:5d:
59:91:73:c5:5f:5f:32:ac:06:19:7b:35:8b:69:52:a9:6e:d3:
1f:5c:21:94:a6:94:70:2d:84:ab:a2:83:44:27:e1:81:61:a7:
3d:83:a4:6d:51:96:1d:cd:8d:3d:2b:5d:ff:40:f8:99:2e:3b:
6b:26:05:83:de:f2:14:f8:28:e4:23:df:20:69:28:40:c3:7b:
ed:f2:79:c1:06:86:66:05:0a:23:14:bd:db:ff:e3:53:e6:d3:
63:c5:bb:85:b1:74:eb:8b:7b:49:f2:b1:30:b5:82:be:4b:f9:
ea:0f:48:34:6d:14:8c:93:85:82:ea:f5:cc:89:bd:5d:16:3c:
6e:7e:eb:52:32:65:58:a6:13:aa:fa:ff:d6:17:fb:76:54:f4:
5c:97:bc:b0:42:45:3e:88:f8:8a:fb:e5:37:6f:ab:7c:df:8c:
74:6d:6b:23:b3:43:a1:63:c4:e5:34:85:f8:74:09:b9:bb:cc:
67:6d:7a:78:8a:31:4b:36:d0:6c:31:23:90:fb:b0:a1:d7:65:
b1:79:c0:bb:5b:dc:36:2c:a8:d3:6e:d9:16:b1:0c:0e:81:67:
50:fd:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:12 2026 by rpki-client