Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: hF507Nfamnru1dcw/LU/a1+Pta9LEG9uWSKLh05i9Wc=
Subject key identifier: DB:C2:BA:B1:93:C9:78:9D:2B:A9:C7:15:76:A8:61:FF:E5:58:9A:F6
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 01A08A8D2897FAD0EFEC25FED366605FE05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:41 +0000
Manifest this update: Thu 10 Sep 2026 09:01:41 +0000
Manifest next update: Fri 11 Sep 2026 09:01:41 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: IrhSivdkzocliW1YOKblBP/HWoMdhquh/RGlrJtO1lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:28:97:fa:d0:ef:ec:25:fe:d3:66:60:5f:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Sep 10 09:01:41 2026 GMT
Not After : Sep 11 09:01:41 2026 GMT
Subject: CN=dbc2bab193c9789d2ba9c71576a861ffe5589af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:c0:fa:69:d7:33:e0:d9:3a:10:f4:80:99:
75:c7:da:31:08:fc:31:8b:09:63:90:84:0a:5c:7c:
6f:07:d2:dc:8b:56:2b:23:ac:33:53:c4:ab:52:5e:
4e:a1:c0:3f:94:48:fd:df:05:bb:0f:2d:54:c5:32:
23:ce:bc:6d:56:f8:55:5c:de:1e:80:c5:8a:55:fd:
a0:85:2e:3e:9c:fa:d0:fb:82:26:86:9d:56:3e:15:
72:ba:e7:6e:9b:4a:8e:83:ab:47:dd:98:65:40:a7:
13:46:73:c7:2a:8f:32:2b:72:a6:0d:81:06:cd:f8:
17:26:f1:80:25:59:36:a1:ff:76:a1:70:a2:ad:31:
38:5b:3d:71:d9:86:c3:22:64:21:b0:b9:91:76:90:
a0:e9:7b:d9:83:c4:23:59:22:2a:51:e2:e3:53:db:
52:87:93:16:f0:b4:b9:97:2b:23:2d:bd:55:ed:a7:
46:a7:76:9d:71:33:54:ba:41:fc:38:00:4f:98:e0:
dc:1a:04:c3:ff:62:8f:73:25:05:8e:92:94:ce:f2:
53:98:d8:27:0c:1a:82:d8:c1:4a:1c:13:3a:f3:f0:
bd:38:f9:b2:68:3c:ab:ec:7f:5e:12:39:79:47:a3:
ba:50:e0:38:b3:63:79:ad:6f:45:01:a9:b1:23:aa:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:BA:B1:93:C9:78:9D:2B:A9:C7:15:76:A8:61:FF:E5:58:9A:F6
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:db:d5:3e:50:68:21:0e:a2:d2:e0:c3:aa:e3:39:c1:6b:
6c:95:d5:f1:f3:9e:1b:89:65:8b:ea:8e:a5:53:55:89:15:4e:
9d:e2:92:ea:6d:e5:e7:ea:06:24:46:b7:f7:e3:4d:5b:fa:07:
02:ff:65:70:4d:ce:11:3b:72:4c:b6:cf:da:0f:a8:8d:e3:ac:
aa:bd:d2:e4:be:93:02:8e:19:f5:be:b2:64:4d:bc:84:40:2e:
fa:71:00:b2:42:b4:1a:43:c9:9d:f5:9d:c9:3b:1a:aa:9c:16:
7d:26:8d:41:af:13:b3:52:7d:03:7d:87:a3:bb:3d:c3:81:8c:
7e:10:1f:80:5d:35:63:37:d1:54:d8:7d:5c:1c:ed:34:cf:4e:
c2:b5:21:ae:38:ef:45:b2:10:f3:c0:94:70:b1:dc:44:fc:25:
84:8c:8c:13:4b:88:de:63:a5:b5:89:7c:5f:75:4c:1b:41:20:
4b:28:75:25:1d:ee:fb:d8:3e:c2:d8:3c:23:2c:30:d9:b9:b9:
76:fe:19:b8:e9:24:4d:ea:df:1e:b6:98:6f:f3:3d:f8:67:67:
33:de:a3:5a:54:b7:6e:5c:68:d8:07:0d:c1:fb:40:d7:2f:f8:
07:73:ac:25:5f:c9:a3:f0:a9:f0:70:36:95:48:6f:20:64:d1:
4f:26:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:47:59 2026 by rpki-client