Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: 49e2yJ4MiaOCcpdyTcLm8/q2cfamPPuFAZU9QNn/Loo=
Subject key identifier: 7E:88:55:28:C3:B5:30:83:89:A8:9C:03:11:B3:0B:F0:1A:E5:8A:2B
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 01A17BF1EDAD158751C775BE1C3AE51B234A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0395
Signing time: Tue 27 Oct 2026 06:00:14 +0000
Manifest this update: Tue 27 Oct 2026 06:00:14 +0000
Manifest next update: Wed 28 Oct 2026 06:00:14 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: TpAfCLTVVH3TtG2gsZxBO1oVPBc7orlybISfd9K8UK8=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:ed:ad:15:87:51:c7:75:be:1c:3a:e5:1b:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Oct 27 06:00:14 2026 GMT
Not After : Oct 28 06:00:14 2026 GMT
Subject: CN=7e885528c3b5308389a89c0311b30bf01ae58a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:25:53:a3:5a:2e:a1:a4:b3:be:66:2d:0d:
1e:46:0f:9d:10:64:f9:08:56:b9:fa:11:56:31:ae:
4f:27:5b:57:12:48:99:97:c5:86:ba:5f:33:53:39:
92:66:7c:30:65:8b:66:e6:4d:68:c6:24:54:fd:8d:
f7:95:fa:9c:e2:47:3a:f4:90:1a:67:83:1f:3d:33:
03:94:e6:41:a5:25:7d:92:1f:75:f4:d2:6b:94:7d:
56:0b:a4:05:ca:78:e6:38:3c:eb:cd:4d:46:7c:40:
c2:a9:7d:5f:6f:11:30:88:cc:c1:0b:51:b1:0c:64:
d2:3a:35:8e:16:5d:22:dc:91:2b:bd:6a:66:3e:fb:
b5:d8:f7:38:b2:5c:36:a0:4e:a7:6f:dd:f1:89:31:
ae:9c:15:fb:c0:db:ab:50:fa:80:b2:20:b3:d5:c1:
8d:c4:9f:2a:1e:17:e6:d4:8a:e5:93:c9:e3:c6:32:
45:58:47:df:2f:8e:42:c8:36:92:ce:79:14:ef:6a:
d1:41:69:e2:18:54:5a:d7:e3:c2:cc:f2:14:49:62:
04:71:ab:4e:49:0b:3c:66:7b:59:fa:23:0a:91:b9:
50:7c:f9:67:15:81:37:0a:75:96:1d:92:ef:70:3d:
30:ac:bd:e6:d2:57:d5:d6:f6:8a:3c:24:98:97:7d:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:55:28:C3:B5:30:83:89:A8:9C:03:11:B3:0B:F0:1A:E5:8A:2B
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a1:4a:fd:47:df:48:55:cb:a2:7c:aa:3a:7b:43:26:b9:59:
27:6e:5b:96:e2:17:4f:71:c6:48:c3:1d:e5:27:f2:a1:13:eb:
05:4f:36:be:65:58:9e:b7:53:c1:73:90:61:cc:33:35:ce:29:
f8:b2:45:0e:0e:6a:62:54:74:33:f5:9a:b8:e9:ea:05:e2:c4:
48:94:d4:28:60:e2:ad:ee:fe:7e:b8:a1:ef:89:95:ae:cd:a8:
62:4d:c0:c0:38:41:28:f0:43:b2:ac:56:dd:85:27:fe:0a:8c:
a4:bb:5d:f9:86:35:2f:76:4d:53:dd:91:44:7f:f0:c4:ed:2b:
9b:6d:9a:22:82:52:15:0d:82:84:62:3b:23:65:74:41:62:7b:
0a:64:2c:99:21:32:08:48:6d:f8:8b:82:1a:bc:46:32:60:ed:
7b:51:f1:92:04:1a:a0:28:59:40:74:f9:3a:0a:71:1f:ed:36:
c1:ff:04:bb:6d:8f:c9:96:03:25:52:3f:db:f2:e9:62:53:1c:
a7:50:a1:8c:d9:17:ad:65:f3:b1:29:75:dc:80:45:73:ff:fd:
fa:ed:70:bc:b1:e6:d0:fe:46:b8:eb:5f:34:b7:d1:af:9d:72:
8d:d0:20:55:a6:ff:29:7d:08:c0:78:c0:ad:0a:c2:c6:40:b1:
c9:ad:92:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78e2tFYdRx3W+HDrlGyNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx
NzFiZTMwHhcNMjYxMDI3MDYwMDE0WhcNMjYxMDI4MDYwMDE0WjAzMTEwLwYDVQQD
Eyg3ZTg4NTUyOGMzYjUzMDgzODlhODljMDMxMWIzMGJmMDFhZTU4YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzslU6NaLqGks75mLQ0eRg+dEGT5
CFa5+hFWMa5PJ1tXEkiZl8WGul8zUzmSZnwwZYtm5k1oxiRU/Y33lfqc4kc69JAa
Z4MfPTMDlOZBpSV9kh919NJrlH1WC6QFynjmODzrzU1GfEDCqX1fbxEwiMzBC1Gx
DGTSOjWOFl0i3JErvWpmPvu12Pc4slw2oE6nb93xiTGunBX7wNurUPqAsiCz1cGN
xJ8qHhfm1Irlk8njxjJFWEffL45CyDaSznkU72rRQWniGFRa1+PCzPIUSWIEcatO
SQs8ZntZ+iMKkblQfPlnFYE3CnWWHZLvcD0wrL3m0lfV1vaKPCSYl30VywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6IVSjDtTCDiaicAxGzC/Aa5YorMB8GA1UdIwQY
MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt
OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk
LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaFK/Uff
SFXLonyqOntDJrlZJ25bluIXT3HGSMMd5SfyoRPrBU82vmVYnrdTwXOQYcwzNc4p
+LJFDg5qYlR0M/WauOnqBeLESJTUKGDire7+frih74mVrs2oYk3AwDhBKPBDsqxW
3YUn/gqMpLtd+YY1L3ZNU92RRH/wxO0rm22aIoJSFQ2ChGI7I2V0QWJ7CmQsmSEy
CEht+IuCGrxGMmDte1HxkgQaoChZQHT5OgpxH+02wf8Eu22PyZYDJVI/2/LpYlMc
p1ChjNkXrWXzsSl13IBFc//9+u1wvLHm0P5GuOtfNLfRr51yjdAgVab/KX0IwHjA
rQrCxkCxya2SwA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:03 2026 by rpki-client