Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: twu5CrGtXuu2z69ye/KtSjXwabTfmbqPgXY9o1XSZos=
Subject key identifier: B0:4F:33:34:F9:F4:11:D6:BD:AF:6A:81:13:F3:B7:DE:28:C9:FD:71
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019FA2CE2CE937D762383623D725B6F54453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 09:00:48 +0000
Manifest this update: Mon 27 Jul 2026 09:00:48 +0000
Manifest next update: Tue 28 Jul 2026 09:00:48 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: aDzrYifKIe8+kqYv5hhuedpR7EqOZ3dXxCMdhi6WFfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:2c:e9:37:d7:62:38:36:23:d7:25:b6:f5:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jul 27 09:00:48 2026 GMT
Not After : Jul 28 09:00:48 2026 GMT
Subject: CN=b04f3334f9f411d6bdaf6a8113f3b7de28c9fd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:08:5a:b8:31:3c:27:2a:e3:45:7a:4d:82:
68:be:81:43:97:70:74:19:61:68:3c:10:eb:d5:f7:
53:f7:a3:f5:2e:b1:53:c2:ea:7f:40:2f:d8:1a:e9:
a1:dd:99:92:2d:45:81:53:e4:3c:18:3f:6e:38:78:
27:27:af:c1:f9:3b:a4:07:b2:ba:27:aa:e7:ee:ad:
f7:c6:2d:7c:09:e9:a4:af:2e:c6:bb:3c:84:c8:09:
1c:18:9c:26:de:0a:7b:75:00:06:86:70:e0:e4:39:
92:86:52:6c:67:b9:a7:ba:a7:f1:f5:98:a0:ae:c1:
01:77:b0:8b:c8:aa:d1:62:ca:70:35:69:3b:68:86:
ca:eb:e4:42:e7:98:3f:e1:2f:23:16:21:18:04:ae:
93:78:2e:c0:13:6e:a9:f6:7f:72:5f:2c:47:47:03:
9e:07:27:aa:4d:16:7a:cf:ab:19:56:8a:ef:e8:9c:
a4:0b:05:59:51:9c:82:dc:22:91:59:7d:cd:90:2d:
35:ea:23:71:5f:02:60:d7:fb:6e:eb:39:80:e7:13:
80:87:e6:c5:bc:4d:71:97:c5:c8:06:29:71:c6:41:
3b:58:8d:99:dc:c6:33:d3:9c:4c:96:71:fd:43:7e:
d3:a5:c9:d0:de:41:64:8a:62:1e:e4:a7:82:9a:ad:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:33:34:F9:F4:11:D6:BD:AF:6A:81:13:F3:B7:DE:28:C9:FD:71
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:a0:2a:d3:6c:26:8a:81:7e:40:86:e2:d1:43:04:3f:d9:
69:72:74:4e:6d:94:92:a2:6d:eb:a7:c9:2e:14:7c:4e:78:5c:
28:16:98:82:80:79:bc:a9:bd:ca:51:75:34:24:46:9e:fc:d9:
30:01:d3:e0:d0:07:1d:ab:36:de:96:1e:15:18:e1:26:71:db:
06:ec:98:a6:81:96:2a:8f:26:4f:6a:91:a5:cc:81:37:61:0d:
43:27:6b:4e:35:1e:6b:b3:4c:cf:6b:82:3e:2e:03:35:91:ad:
b1:12:37:4e:e2:89:48:18:45:26:f2:f9:eb:d8:ca:f6:ae:2e:
1b:e2:43:8b:46:8d:78:fc:0b:54:63:a1:e7:d7:31:c1:1e:ac:
76:a5:22:a3:89:26:01:11:01:eb:79:8f:16:72:71:bd:dd:73:
32:7f:ab:2b:9a:14:e5:c7:40:08:e1:e7:83:bc:cf:d4:92:c2:
5e:6d:2e:bb:ab:ea:ad:d2:7f:7c:8d:a6:f0:6d:ef:f8:cb:6b:
60:79:56:c3:d7:04:69:79:bc:48:ae:f1:6d:80:2e:09:43:8b:
96:4a:1a:67:08:0b:7e:a5:1e:61:cd:93:0e:71:54:6c:6b:24:
51:fd:6a:a8:6f:40:31:01:49:72:00:99:a4:98:09:f0:c2:aa:
07:0e:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:46:22 2026 by rpki-client