Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: sRBRlm9ASeMwSIsb+isb+CUUpi11FwhKC5R/dmVgNDk=
Subject key identifier: 34:65:3B:67:45:FD:CF:D5:4F:DC:EC:EE:28:7D:B4:CA:16:B1:05:A0
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019D37C0FB1FA99EF6188B578446AF82EEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0B32
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: jTMMBgli0Cs/bN7rtGPZcaDQaAlOZpmw7M44txzriR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:1f:a9:9e:f6:18:8b:57:84:46:af:82:ee:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=34653b6745fdcfd54fdcecee287db4ca16b105a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:0d:81:e6:de:8f:e9:66:1b:2f:a6:82:b7:
9f:83:1f:51:47:35:93:79:53:c4:4c:16:2b:49:aa:
b3:a2:3b:07:87:ee:e8:7a:4a:44:ff:60:e9:cb:cd:
59:3f:4b:f9:0c:b9:da:cd:04:ea:93:28:71:a6:a2:
b6:80:d6:06:62:f5:41:81:21:58:3d:62:44:70:10:
55:ef:81:8e:5d:ea:24:bd:0b:50:69:96:66:60:dd:
64:83:e0:47:c7:10:91:28:eb:31:a3:38:ab:8b:5a:
85:b3:ea:62:71:d8:c6:d3:c5:62:d4:c1:0e:c5:af:
48:7b:59:b8:42:23:16:61:cd:63:97:b2:56:e1:c8:
c8:7f:49:2f:74:c0:a7:0b:2d:02:df:c7:00:4b:f3:
46:af:d6:88:61:df:75:ec:5b:a1:dc:02:de:5f:76:
50:9d:ce:18:b7:b4:d1:20:9f:a9:9a:e4:42:6a:b2:
eb:04:ff:62:88:82:67:9d:ca:75:ae:c2:83:80:1d:
8e:0e:7b:ec:4a:07:81:25:04:fc:51:11:60:7f:4b:
8a:44:48:a8:bd:8a:fe:8f:c2:73:33:56:a8:08:67:
13:aa:5d:62:b2:aa:77:0a:1f:60:9c:0e:33:dc:05:
8b:8e:08:a6:42:2d:0f:99:98:74:92:c3:8e:b8:ef:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:3B:67:45:FD:CF:D5:4F:DC:EC:EE:28:7D:B4:CA:16:B1:05:A0
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:a3:35:3e:c1:56:e0:4f:ce:d7:6d:ad:35:b7:67:45:73:
c4:d3:ae:c2:53:80:3a:e6:45:e2:32:99:b3:b5:45:46:70:1e:
58:5d:55:0c:eb:80:ad:c1:42:aa:71:3c:12:c8:bb:f8:27:5b:
2f:13:be:44:68:1f:49:24:f5:b8:4e:a0:f5:37:f2:39:60:5a:
c0:9a:71:09:a3:70:c7:ee:2a:9e:c2:88:34:2f:d6:b5:59:2b:
f8:2a:7e:32:99:cf:d1:a9:a4:de:81:69:6b:01:a9:38:61:f9:
8a:19:e0:51:bf:2a:fc:fc:79:3d:39:66:a8:e8:1f:0a:66:cc:
c2:6d:90:40:9d:28:16:95:81:44:02:4b:ad:ef:38:78:8e:96:
8d:da:bd:23:f8:dd:5b:e0:49:d9:be:e3:ee:7f:08:9f:3e:15:
6e:34:f8:c0:00:b2:86:14:32:eb:aa:b1:ac:c7:e2:c6:39:79:
11:ab:43:47:8b:41:3d:d0:27:29:cc:b8:54:8e:5f:4b:b1:35:
ba:7d:e6:34:a2:87:ba:51:05:99:ff:ce:98:1b:15:0b:49:f7:
30:81:86:76:37:24:e4:a6:1a:80:6c:45:44:10:00:ce:ad:f5:
5c:ea:69:43:ec:b3:1e:43:d0:bf:70:c5:23:09:dc:a6:c2:0b:
d3:4e:99:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPsfqZ72GItXhEavgu6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj
Zjk2Y2EwHhcNMjYwMzI5MDQwMTI3WhcNMjYwMzMwMDQwMTI3WjAzMTEwLwYDVQQD
EygzNDY1M2I2NzQ1ZmRjZmQ1NGZkY2VjZWUyODdkYjRjYTE2YjEwNWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDsNgebej+lmGy+mgrefgx9RRzWT
eVPETBYrSaqzojsHh+7oekpE/2Dpy81ZP0v5DLnazQTqkyhxpqK2gNYGYvVBgSFY
PWJEcBBV74GOXeokvQtQaZZmYN1kg+BHxxCRKOsxoziri1qFs+picdjG08Vi1MEO
xa9Ie1m4QiMWYc1jl7JW4cjIf0kvdMCnCy0C38cAS/NGr9aIYd917Fuh3ALeX3ZQ
nc4Yt7TRIJ+pmuRCarLrBP9iiIJnncp1rsKDgB2ODnvsSgeBJQT8URFgf0uKREio
vYr+j8JzM1aoCGcTql1isqp3Ch9gnA4z3AWLjgimQi0PmZh0ksOOuO876wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRlO2dF/c/VT9zs7ih9tMoWsQWgMB8GA1UdIwQY
MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt
MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2
LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2qjNT7B
VuBPztdtrTW3Z0VzxNOuwlOAOuZF4jKZs7VFRnAeWF1VDOuArcFCqnE8Esi7+Cdb
LxO+RGgfSST1uE6g9TfyOWBawJpxCaNwx+4qnsKINC/WtVkr+Cp+MpnP0amk3oFp
awGpOGH5ihngUb8q/Px5PTlmqOgfCmbMwm2QQJ0oFpWBRAJLre84eI6Wjdq9I/jd
W+BJ2b7j7n8Inz4VbjT4wACyhhQy66qxrMfixjl5EatDR4tBPdAnKcy4VI5fS7E1
un3mNKKHulEFmf/OmBsVC0n3MIGGdjck5KYagGxFRBAAzq31XOppQ+yzHkPQv3DF
IwncpsIL006ZLA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:02 2026 by rpki-client