Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: mx0RNNSmPK7tJ2AjqikYMi87EuxwoRyox/SeJQO4Vl8=
Subject key identifier: 38:8B:E6:E5:10:1E:7C:56:0B:49:76:DD:90:C6:A7:82:ED:43:59:F8
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 01A08A8D1710A84A3E1D3458F819A00A1D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0318
Signing time: Thu 10 Sep 2026 09:01:37 +0000
Manifest this update: Thu 10 Sep 2026 09:01:37 +0000
Manifest next update: Fri 11 Sep 2026 09:01:37 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: 93V0Zw/r98NQzwOgEumbMwixNrNV/zNU4vCIZUFUiJ0=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:17:10:a8:4a:3e:1d:34:58:f8:19:a0:0a:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Sep 10 09:01:37 2026 GMT
Not After : Sep 11 09:01:37 2026 GMT
Subject: CN=388be6e5101e7c560b4976dd90c6a782ed4359f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:3b:17:f2:7e:88:79:14:c9:28:0c:83:ca:
21:36:7a:0f:40:d0:90:f6:e9:6e:cd:ac:cb:04:45:
0b:19:5c:8e:17:85:0d:22:b3:ac:fd:db:08:98:3a:
ac:6e:86:83:c3:22:96:6a:26:d1:70:fd:3f:0d:39:
42:55:64:e2:14:4d:b7:60:65:0a:8a:09:ec:7d:d5:
22:77:4c:a8:24:3c:9c:ae:d3:20:f4:6a:14:7f:99:
81:f9:16:58:5b:4c:49:f9:a2:82:a4:59:dd:10:ec:
26:ee:da:ab:ae:4e:42:07:39:3a:6f:20:58:3b:d3:
19:2a:5e:79:15:e8:27:86:53:e9:3d:a0:29:86:9f:
18:76:7f:c1:92:6c:42:b4:24:2f:ae:ee:53:5f:d8:
8c:60:0c:bb:0c:ae:17:8c:97:c4:cf:45:3a:ac:a7:
c2:02:93:75:43:96:b4:32:7e:81:ff:f1:e7:4b:e3:
91:5f:44:2b:28:1f:3e:e4:5d:5d:1b:74:9c:31:bf:
f1:e0:94:ca:b8:db:22:16:d5:3c:ab:82:9a:eb:64:
6b:8e:e0:ef:6e:d2:36:f6:0d:ed:5d:4d:dd:5b:e7:
b4:b2:ac:07:5b:f7:d1:96:60:b5:f5:8d:fe:5b:f3:
d0:19:5d:d3:c4:48:b4:ef:c7:59:38:7a:f8:20:ae:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:E6:E5:10:1E:7C:56:0B:49:76:DD:90:C6:A7:82:ED:43:59:F8
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d4:00:aa:3a:5c:07:04:a8:09:95:86:c0:e2:6d:b6:5e:ef:
10:97:64:bd:72:f9:4b:b2:c6:fd:47:42:c1:6d:20:2a:46:2e:
48:de:09:8a:76:0c:e0:79:0d:e0:ce:25:ea:87:e6:18:89:6b:
17:13:ad:22:c7:6c:ec:8f:e1:96:2a:94:58:ca:44:1b:bc:67:
f5:8f:b8:77:25:b1:70:32:5b:99:7b:6e:bf:bc:96:4f:41:bd:
40:97:22:3f:47:56:14:cd:db:05:77:69:0b:eb:7c:4d:f9:df:
9f:2d:55:5b:02:ad:64:dd:5f:32:a1:e2:1a:3c:c1:89:98:37:
cb:35:a0:8f:7b:d4:56:4c:5e:5a:c5:09:85:63:1a:96:75:9d:
fc:ac:6f:d8:e6:bc:57:dc:d0:45:2e:95:e5:22:d3:d4:bb:82:
c7:53:cf:cf:cf:67:8f:a4:b3:02:b5:92:54:17:c0:42:a0:8a:
45:56:31:a9:75:c9:5a:54:f8:3a:0a:b7:6b:03:2b:f2:b0:05:
de:a2:7a:4a:82:72:45:17:4c:1d:b1:0a:27:5d:b3:03:32:3d:
8e:3a:39:01:85:a7:45:25:c6:9c:66:cc:df:a6:fb:fc:9c:ad:
e2:78:55:a2:3d:ca:2d:70:11:8f:85:e8:41:5d:8f:d7:97:56:
5e:4b:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:49 2026 by rpki-client