Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: B9452GvhqievJUh4Sy4r/TZaj0j317KEAdgm/v28aqQ=
Subject key identifier: 9A:DC:CF:F1:7A:93:BA:40:97:9E:3C:11:86:90:D4:D6:F3:82:ED:81
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019CE7B78E25BED7C94A95EB7E228C708D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 15:01:32 +0000
Manifest this update: Fri 13 Mar 2026 15:01:32 +0000
Manifest next update: Sat 14 Mar 2026 15:01:32 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: SUcp3s8QrIuMCitPgt7zD8tyBBDGqvA0vCA5kP52oA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:8e:25:be:d7:c9:4a:95:eb:7e:22:8c:70:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Mar 13 15:01:32 2026 GMT
Not After : Mar 14 15:01:32 2026 GMT
Subject: CN=9adccff17a93ba40979e3c118690d4d6f382ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:14:87:53:1a:b9:9c:90:28:47:ba:04:60:
92:73:c6:a7:4f:21:b6:93:21:96:b2:88:90:6c:15:
66:24:c6:9d:e0:48:88:d8:fb:de:97:13:a9:4c:32:
8b:43:77:77:54:2d:4e:bd:9c:b1:b7:dd:a5:8a:6c:
3c:78:ba:e3:31:b5:df:75:9a:22:d7:8b:b4:d3:d7:
c9:be:24:67:b3:02:9e:78:25:1f:ef:da:80:9f:72:
d4:28:58:44:c9:b1:45:f2:ff:38:86:ee:7c:c7:bc:
c7:b2:0d:f5:aa:8b:1f:df:9a:23:a1:e9:d0:27:f1:
f0:70:e6:28:9b:d7:3f:54:f2:f4:55:84:44:ab:90:
fe:74:c3:b4:a7:6a:0c:5e:53:0f:e7:58:be:53:9f:
c6:38:8a:27:86:00:b1:7d:a1:ae:1d:d7:c4:94:24:
2f:58:7f:e3:32:17:8a:ac:e6:6a:97:9b:e8:cf:9f:
81:28:04:9e:e9:24:bd:8e:ca:a1:fc:82:1f:e7:76:
6a:0d:ec:7b:a9:8a:b5:09:d0:3c:7f:1c:20:dc:a8:
0e:55:6d:a7:90:76:8a:f2:f9:21:a9:b2:58:dd:10:
90:ad:4c:1a:df:90:09:ac:0d:31:70:61:c0:35:49:
3f:22:25:57:17:fd:b2:e8:59:17:7e:98:33:b5:2d:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:CF:F1:7A:93:BA:40:97:9E:3C:11:86:90:D4:D6:F3:82:ED:81
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:c2:66:f6:9f:e3:12:4d:3a:25:99:a7:30:82:be:30:0c:
26:c3:ed:16:0c:6c:df:b6:b2:ff:04:29:03:86:6c:7d:54:af:
84:ed:27:7e:a3:ed:bf:6a:23:b3:cd:19:91:26:ce:eb:01:4c:
af:98:2c:bc:6d:39:49:b8:65:93:4c:18:58:dd:ed:f6:25:83:
e0:25:e4:51:12:c7:97:37:a2:ea:28:7f:e8:71:82:f2:0b:2d:
7c:62:b5:52:8a:3c:72:41:27:5a:05:8a:9b:b9:8d:f6:ac:11:
72:d1:59:47:23:34:5e:c7:4a:91:b5:77:05:9d:43:c1:dd:82:
43:c0:38:df:81:9b:d0:f7:7b:82:c3:fe:fd:71:1b:c4:f8:a6:
84:67:19:e0:99:34:84:d5:b2:28:f6:42:7d:3d:7f:1e:a3:0e:
be:94:c4:2b:78:e2:01:eb:88:a2:f7:68:72:0f:16:22:58:8f:
b7:c6:de:bf:59:1b:d7:1b:53:94:ad:70:05:d2:37:3b:19:89:
e6:4d:f4:56:cb:83:e2:ba:ce:0f:13:e6:04:b2:69:cc:16:a8:
9c:b6:1c:3d:cf:5e:3a:3d:63:76:8b:35:cd:6d:76:db:c4:08:
31:61:ed:fa:4b:fd:4f:f0:66:01:d2:37:61:10:dc:b9:56:01:
bf:79:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:50:48 2026 by rpki-client