Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: Sup0EQuf99QjkFpzLCwzAlF5Z1zPQ5sKsIv0HsIyBEE=
Subject key identifier: 1F:64:BB:CB:4C:59:EA:BF:22:BC:8D:7F:6E:4D:9A:97:0C:17:2C:0B
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019EB92167B64FB02CE8A499827127A06A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 00:00:34 +0000
Manifest this update: Fri 12 Jun 2026 00:00:34 +0000
Manifest next update: Sat 13 Jun 2026 00:00:34 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: KA6fYsU5wYcn2GJpgRAFkH8YX8i9DbQOye1D+Wnx+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:67:b6:4f:b0:2c:e8:a4:99:82:71:27:a0:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jun 12 00:00:34 2026 GMT
Not After : Jun 13 00:00:34 2026 GMT
Subject: CN=1f64bbcb4c59eabf22bc8d7f6e4d9a970c172c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:58:dc:37:d9:dc:13:61:02:a7:3f:a7:a5:
22:0f:d8:d1:ee:42:f1:39:34:c4:79:5a:16:c1:2c:
c0:76:9e:6e:7e:7b:4c:04:07:61:7d:fe:66:73:42:
b1:4d:44:0d:7a:17:0f:c9:66:f0:67:12:e7:c2:39:
62:3e:8f:e2:30:78:a3:c9:89:a3:34:7f:c0:76:38:
29:c6:29:e5:43:13:7b:f6:d1:34:15:2c:12:2e:4c:
96:73:d0:35:c0:58:36:38:51:a6:d3:65:fb:5f:1d:
e3:9a:85:36:10:e5:d6:9b:ef:e7:e2:c6:bf:95:0a:
cf:06:36:bf:d7:be:a0:62:af:f9:c8:c2:f5:48:ac:
1b:b2:0b:86:37:bf:18:1b:cd:93:80:57:50:ad:a0:
c5:d6:2a:94:91:7a:f3:46:d5:41:c1:db:f9:bf:4d:
13:07:3f:c3:57:53:f5:7f:7e:03:45:b0:6a:06:9d:
91:92:f0:04:0d:87:a7:27:52:ee:a9:72:22:68:da:
71:7e:8b:fb:62:fa:91:45:7c:f4:bb:19:10:5b:fd:
91:2f:f6:66:52:dc:6a:5f:3c:e7:b2:22:06:e9:be:
1d:4d:27:5b:0f:c5:51:54:2e:76:f4:17:4c:9c:3c:
48:c2:cc:a8:d2:b4:ea:83:93:1e:6c:62:47:6a:0b:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:BB:CB:4C:59:EA:BF:22:BC:8D:7F:6E:4D:9A:97:0C:17:2C:0B
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2e:9d:95:0e:5a:8c:15:0f:2e:bd:4a:d7:49:88:85:49:0f:
cc:24:64:10:95:31:ec:94:9e:46:3b:d5:f0:3f:ac:97:7f:9a:
00:97:2d:25:08:49:8e:0e:79:81:b1:f3:ec:50:e5:b5:e6:97:
19:cd:8d:9f:df:75:a8:f2:82:a7:85:9e:1b:ce:21:c7:a8:a8:
c2:4b:f2:9e:7e:86:fe:92:23:df:d2:1c:2e:25:6b:21:80:aa:
58:cc:6a:dc:93:ca:dd:af:f7:d8:31:11:6e:85:ca:85:35:e5:
54:a2:38:d9:aa:42:97:97:0a:87:f1:08:e9:5a:89:84:39:5b:
21:fc:a5:ed:1f:8b:83:b5:6d:a4:12:9c:9a:50:ba:fa:39:6d:
c0:8c:ed:0c:84:c3:08:98:de:c9:97:32:28:65:5a:15:35:34:
3f:89:6c:15:d5:08:4b:ab:26:58:3c:35:24:69:e0:14:51:5e:
98:87:ce:22:52:d0:8f:6c:e8:f2:77:85:c0:50:ab:a1:35:93:
d2:ef:cf:1b:d7:30:32:ab:05:51:73:12:a4:fc:9f:54:eb:20:
e9:9e:fe:24:ce:87:94:be:fa:da:d3:8f:01:e5:09:cc:a4:a2:
af:27:6d:2e:9c:6a:f9:6d:cf:1f:0a:05:18:cb:78:65:36:b9:
36:33:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:41:41 2026 by rpki-client