Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: HOnJVb7NCc/ld+Ql9icPrYGRnOsAB3UFMM1UN4e/lLg=
Subject key identifier: DE:D5:A3:FF:5F:21:DD:9F:21:BC:60:C7:40:84:80:20:26:DB:23:76
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019CE5C86C18841ACE8231F0BB40C64D88D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0135
Signing time: Fri 13 Mar 2026 06:00:43 +0000
Manifest this update: Fri 13 Mar 2026 06:00:43 +0000
Manifest next update: Sat 14 Mar 2026 06:00:43 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: 8HGqGLxZqWEbClV470Q7TCHdrr1WQao+mSa3lEnuV6o=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:6c:18:84:1a:ce:82:31:f0:bb:40:c6:4d:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Mar 13 06:00:43 2026 GMT
Not After : Mar 14 06:00:43 2026 GMT
Subject: CN=ded5a3ff5f21dd9f21bc60c74084802026db2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:63:c9:cc:23:d4:63:a8:c6:ce:a9:0c:c8:
14:ad:e7:0d:77:45:7f:35:5b:9f:90:81:67:a4:6d:
45:f7:cf:66:8b:a0:51:f8:9a:83:3c:02:6a:52:9f:
62:1b:5b:38:75:fe:37:73:5f:1c:59:66:8d:32:f0:
6b:99:8d:77:e9:63:a2:87:45:3c:76:dd:86:5d:34:
8e:7a:c7:96:ff:a8:f9:bb:2b:d9:78:32:e1:70:a2:
c5:df:87:f4:1a:91:b1:a0:e2:d3:02:88:e0:34:80:
eb:7f:c3:f5:79:76:cb:33:dd:5c:ad:98:d2:cd:38:
f9:8e:d1:74:3c:80:11:92:ce:0d:55:67:d9:4f:3d:
be:02:cc:65:66:56:0d:27:0d:db:5b:b2:33:98:84:
a4:cf:bd:ae:b0:3e:88:89:1d:45:fa:7d:0c:24:a1:
a5:1a:79:d8:51:01:db:87:eb:e2:3b:4c:75:f3:cf:
9b:52:46:2b:b1:67:87:bd:98:f9:df:36:e5:23:55:
e7:6b:33:32:c3:98:12:d0:a6:08:86:81:73:17:d9:
53:46:af:2f:92:21:28:bc:9e:10:5f:a4:f8:70:df:
01:84:f4:32:a0:a0:8f:6f:ec:3b:2e:27:83:06:d8:
8c:60:cd:9d:9b:a1:22:42:58:04:df:36:a5:70:7c:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:A3:FF:5F:21:DD:9F:21:BC:60:C7:40:84:80:20:26:DB:23:76
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:98:78:64:f5:0a:2c:5a:a0:2c:f6:75:b7:0e:dc:7c:be:
e7:b2:37:3d:b8:7f:c2:af:69:ab:3a:49:35:e4:fb:4a:18:00:
2e:6d:22:53:73:39:04:cb:e5:7d:33:d8:14:a9:4b:5b:89:e4:
cf:e5:b2:27:f9:d2:72:8a:6c:53:cb:2f:87:ab:75:84:32:3d:
8a:58:c8:99:01:d6:60:1c:83:c4:a4:a0:25:90:72:91:42:70:
70:c1:86:58:4a:06:0c:b8:90:49:84:22:77:fb:d4:9f:17:6a:
6b:b2:95:a0:40:e5:20:a7:9c:d9:58:a6:d4:54:de:fa:28:e7:
5a:5f:b0:ab:24:fb:32:f6:cd:2f:92:bc:6c:ad:d0:23:ae:5a:
58:9f:31:34:95:64:ae:49:5a:b6:d6:15:d0:34:ab:e7:ea:d9:
bc:af:38:ef:8a:97:8f:9d:05:c9:e0:98:40:9c:f9:3c:8e:a9:
ab:01:00:10:1d:6b:93:f8:c8:b0:f8:93:23:83:92:6d:bb:cb:
88:28:e3:1f:5b:a6:03:b0:b4:9c:f9:ed:27:de:a0:54:66:c9:
ee:23:85:da:15:48:38:ba:15:a3:8e:4a:a5:55:a6:da:01:0e:
73:8e:97:6e:cb:10:ca:0b:e8:74:a1:90:ac:c2:41:4e:fe:62:
00:fb:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:13 2026 by rpki-client