Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: 5DNYF/QwjQUpZu4lyarjE2SdPbsar41eEJsaAOcDTIE=
Subject key identifier: 7D:9F:BE:7C:D2:DC:A2:3C:E3:DC:8B:60:16:C6:76:48:5C:C1:AE:7E
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019EB921B2EA7635AB8E002038B4965AAF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0227
Signing time: Fri 12 Jun 2026 00:00:53 +0000
Manifest this update: Fri 12 Jun 2026 00:00:53 +0000
Manifest next update: Sat 13 Jun 2026 00:00:53 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: csx1gBESXfewR8xnqWl8MQ2eFUa5+XfZPvBmgVEfqwo=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:b2:ea:76:35:ab:8e:00:20:38:b4:96:5a:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Jun 12 00:00:53 2026 GMT
Not After : Jun 13 00:00:53 2026 GMT
Subject: CN=7d9fbe7cd2dca23ce3dc8b6016c676485cc1ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:40:92:c9:c5:f4:0f:1e:ae:61:ab:4e:b2:
cc:18:e6:66:de:dd:5d:57:c9:b8:99:99:f5:57:74:
1b:fa:79:f9:f0:22:4b:b8:6c:91:1d:74:86:3c:cc:
94:d4:5c:4b:0e:f1:f1:f3:af:12:25:4c:d3:8b:1d:
7f:4b:c4:6b:0f:57:38:7b:f3:b6:ad:e1:f7:43:11:
09:00:6a:83:ef:e6:23:ba:eb:95:19:05:3c:fe:ad:
71:5a:f1:b7:52:d8:1c:fa:4a:a4:7c:e1:77:3c:76:
dd:80:b4:4c:44:d2:ba:8b:0b:44:a1:07:06:79:1e:
df:7a:e6:ff:e5:8c:d8:6e:d2:65:f4:a3:13:e8:43:
01:cd:5c:8c:0c:e9:0e:c0:fe:c4:ea:bb:30:2f:1f:
ff:b6:28:c4:10:e5:26:62:3c:d4:45:5a:35:db:24:
9f:e2:74:df:93:25:de:43:00:c4:d4:1e:4f:9d:f1:
0c:4b:f0:f9:a3:82:be:75:51:32:f7:7a:1b:72:e2:
8e:e6:a4:03:28:1b:b7:6f:33:8c:e5:d6:ba:00:d3:
91:8d:be:b7:0a:6d:1c:58:af:a0:89:98:17:40:af:
0b:9a:a3:75:2e:db:68:cc:1b:f8:a8:6d:ad:ef:f2:
af:35:b3:86:eb:ac:34:b1:d8:6d:94:58:cf:19:3b:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:BE:7C:D2:DC:A2:3C:E3:DC:8B:60:16:C6:76:48:5C:C1:AE:7E
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:a0:63:88:90:8b:7e:48:49:d8:b5:a9:fe:2f:bd:2c:ab:
68:3e:26:9c:53:0c:7f:ec:01:d9:f1:aa:a6:1b:b5:cf:9d:62:
5f:cb:01:68:fe:7b:82:e5:30:92:52:b8:a9:38:14:9c:51:c6:
f6:9d:ba:18:f1:9b:12:ce:bb:f5:3b:a2:f0:58:cb:1c:4e:c4:
21:c7:20:e6:02:91:f7:50:57:93:27:51:87:e6:ab:f0:10:11:
41:87:55:9f:3e:20:91:4e:cb:6c:ef:01:84:70:0f:e0:bf:0f:
c4:44:1e:c9:15:76:02:58:a9:36:96:94:df:9f:ba:3e:85:f0:
02:0a:ba:bb:3f:d4:c8:70:75:0a:8b:51:58:e2:93:55:79:eb:
e1:2f:cf:92:be:52:a0:47:ce:e7:cc:62:44:e6:e3:f5:cd:f2:
bc:6a:b1:d3:8c:3b:e8:3b:08:8d:17:d4:2d:03:fc:8b:33:d3:
7d:9f:a2:23:42:9b:7c:da:2d:58:bb:f3:c1:fd:15:30:59:a7:
b3:8d:78:d4:5f:c2:e5:37:1a:f1:68:2a:18:a7:25:73:a9:b6:
dc:74:5a:6e:6f:33:d2:8f:e5:9e:d1:88:1c:4c:f9:3e:26:f5:
0f:ed:81:6d:52:03:53:f3:6d:1d:4e:b3:d4:8e:50:4a:25:98:
35:d7:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:12:43 2026 by rpki-client