Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: xPKONa5WwDG3px1cnSPKuqn6WrKBADVBc/WRJbJT4gI=
Subject key identifier: 1C:C4:BE:AE:8B:7A:01:2A:9A:4F:0D:11:CC:CC:11:9C:92:76:34:3B
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 01A17DE122B7B6252D5911E4EDD66D07F80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 15:01:08 +0000
Manifest this update: Tue 27 Oct 2026 15:01:08 +0000
Manifest next update: Wed 28 Oct 2026 15:01:08 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: 1cdn8s+6SFT4+48ZtWXIsp+Uk7scmkCW6OhNkHWQTMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:22:b7:b6:25:2d:59:11:e4:ed:d6:6d:07:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Oct 27 15:01:08 2026 GMT
Not After : Oct 28 15:01:08 2026 GMT
Subject: CN=1cc4beae8b7a012a9a4f0d11cccc119c9276343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:a3:5a:0f:9d:4b:b5:60:fa:7f:55:b6:60:
5c:09:62:eb:9c:2a:b1:9d:a0:fb:99:9b:03:5f:34:
6e:cb:04:85:0c:db:58:78:86:bd:8d:75:de:bc:7d:
89:87:08:0d:c3:ef:de:48:80:79:ff:b8:3b:17:5c:
38:f9:2b:e4:d1:f8:49:00:7d:7b:52:9b:04:a2:e3:
a4:5b:ea:84:b0:e1:be:30:2d:b8:2f:63:71:2b:2d:
c9:9e:0d:7c:90:8b:97:aa:c9:4c:ec:fa:61:55:00:
49:30:bd:a2:e5:4e:e7:fe:c6:20:bf:3a:05:61:98:
4e:66:94:9d:54:24:81:d1:19:6f:3c:1a:e6:63:30:
eb:c3:d9:a4:c1:43:b4:96:6b:d1:79:89:3a:f5:88:
06:b3:99:7c:aa:12:56:9b:07:91:41:8a:c9:3b:b3:
69:17:ec:08:08:e6:2e:d4:c8:90:49:17:05:d7:a6:
6e:f2:b4:03:36:17:e0:b7:37:2a:a1:6a:61:a5:20:
83:e0:ad:9a:96:da:59:28:55:09:e3:dd:3a:d0:36:
9d:51:b3:89:b8:c4:28:ae:6c:b8:b2:da:49:e6:2e:
fa:5d:e5:f5:0f:f5:31:05:81:7d:29:f5:1a:44:0a:
dd:72:92:b0:38:a0:2d:f8:e5:32:67:89:af:07:58:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:BE:AE:8B:7A:01:2A:9A:4F:0D:11:CC:CC:11:9C:92:76:34:3B
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:f4:3c:bd:4d:4d:da:12:b8:33:46:94:8d:95:6d:92:f4:
9b:e5:f8:de:c9:47:b0:7e:85:14:16:42:35:78:5e:c1:81:15:
a1:14:85:73:0e:48:88:d2:0c:00:75:d4:91:62:54:3e:60:14:
bb:92:bd:d8:13:2f:c3:03:46:37:22:5f:d6:ef:5b:e2:9e:8e:
c2:dd:ac:7a:da:0e:b2:98:39:30:53:37:c4:e2:73:25:ba:1b:
32:d4:3e:c1:9e:60:64:eb:e9:27:a3:ab:c5:a3:12:bb:00:7d:
03:fb:09:7d:8c:7e:07:f4:86:7f:eb:9e:32:c5:01:b1:24:25:
2e:b7:bd:ff:14:fd:09:27:5a:ca:11:1d:a5:c5:84:88:12:a4:
fc:42:ef:80:7d:be:5e:05:80:2c:f0:a3:73:fd:a3:df:25:89:
1a:a0:12:d9:f8:14:d9:5e:78:b2:50:a6:1a:59:b9:03:ab:a6:
b3:1d:c6:67:6b:0c:e2:54:41:40:b7:bf:52:00:9d:61:b9:d7:
74:bb:90:7d:b6:2f:07:43:25:70:43:bc:5f:8a:2f:3f:7c:18:
f8:7f:7f:8e:9d:22:81:36:4c:a3:17:af:1a:a7:8d:9b:53:67:
99:12:e0:ac:16:ad:f9:6b:dd:6f:41:3e:ce:48:b0:49:19:76:
da:e5:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:59:58 2026 by rpki-client