Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: IdPfAMepjp0BySUQKu5iFmD8GRHr1W4SfY39pYKrXgM=
Subject key identifier: 7B:F4:1E:58:96:F8:99:F7:6C:EB:E6:04:9C:46:1B:E4:6C:CA:BA:51
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019DCF74F524219288F946D84FD1BC964BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 01AE
Signing time: Mon 27 Apr 2026 15:00:41 +0000
Manifest this update: Mon 27 Apr 2026 15:00:41 +0000
Manifest next update: Tue 28 Apr 2026 15:00:41 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: uvKRl4gUj4wXYN8bA/JDsoecdOcgVOsD+hlsAZ84yjQ=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:f5:24:21:92:88:f9:46:d8:4f:d1:bc:96:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Apr 27 15:00:41 2026 GMT
Not After : Apr 28 15:00:41 2026 GMT
Subject: CN=7bf41e5896f899f76cebe6049c461be46ccaba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:64:cf:9a:f7:17:47:da:0c:c5:d7:a2:15:
f5:04:50:a0:3d:70:4c:7d:b7:77:81:1f:13:1e:c2:
ed:1d:0c:77:ca:9d:5d:f0:89:64:f7:f8:98:2b:e0:
d5:bc:77:38:76:45:dc:85:22:21:e4:71:dc:a3:fd:
98:ea:6d:cd:4d:6e:f3:90:96:1f:41:28:29:b6:b8:
a5:6c:35:5b:0a:76:2e:06:23:71:e8:44:83:ab:fb:
b8:72:a7:4c:86:42:0e:d6:4b:65:e5:7a:8d:a4:a8:
b3:03:74:1e:9d:21:d1:36:b8:b5:74:62:88:fd:cb:
8e:4c:e5:9b:d2:8b:2b:47:a3:99:79:f4:8e:df:2d:
8e:26:0a:6f:4e:31:2f:d4:44:6f:71:65:8e:cc:2e:
d8:0f:05:09:ca:69:c1:28:57:7f:5d:fa:b1:67:87:
ec:7b:60:b1:9b:07:89:e7:bf:cd:37:e1:3e:0c:1e:
5d:42:a4:24:74:47:84:67:c5:5c:de:ab:ba:83:32:
b0:dc:61:36:b3:35:db:a3:e9:7a:c9:b4:19:e8:51:
d4:d7:df:84:4a:3a:b9:e7:6d:72:9e:e5:89:cc:54:
5b:a9:45:02:7c:0d:75:3d:c7:0f:7b:2e:ab:58:1a:
19:c4:3e:5d:83:94:67:bd:2f:64:7b:5b:7c:eb:b0:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:1E:58:96:F8:99:F7:6C:EB:E6:04:9C:46:1B:E4:6C:CA:BA:51
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:22:79:7a:aa:cb:2b:5e:75:09:37:ad:fe:7e:64:2c:dc:0d:
0f:dd:5d:96:04:10:67:8c:6a:b3:50:ab:f6:44:1b:24:43:be:
eb:23:f3:70:62:a0:95:92:1b:af:c5:d8:a3:a9:39:bc:1b:1e:
27:28:77:79:1a:4f:29:eb:4c:29:97:7a:ca:a9:8c:16:20:df:
34:cd:d4:e5:9a:99:ce:b9:b6:fb:d0:45:68:4b:a1:cb:0c:0d:
26:28:e8:5e:8e:9f:fe:92:40:f3:7e:50:be:a5:d1:82:2d:ca:
42:5b:1f:54:a5:6c:65:f0:ae:fb:04:89:53:5e:df:3c:6a:d7:
76:8a:b2:93:12:95:ca:b7:ce:c1:ed:7f:01:9a:ea:03:d0:09:
b7:67:bd:52:34:0a:3d:6d:84:ca:07:dd:4a:0f:83:a2:11:ac:
41:f6:3e:55:3a:e9:8a:e1:df:3e:fc:df:c9:a1:33:48:3d:82:
0e:ac:d2:0d:55:e7:39:1a:86:a9:46:57:77:ec:c5:4c:ac:e1:
21:fe:0c:65:dd:8f:c3:69:d0:87:30:e2:58:65:1e:bf:16:0d:
2e:6e:fc:0a:e1:19:32:e2:9c:77:24:ea:3a:69:15:c9:bc:64:
2f:7a:bd:28:f8:5b:59:a6:4c:88:2a:75:44:f9:c7:d6:52:e3:
af:5b:a5:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdPUkIZKI+UbYT9G8lkuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx
NzFiZTMwHhcNMjYwNDI3MTUwMDQxWhcNMjYwNDI4MTUwMDQxWjAzMTEwLwYDVQQD
Eyg3YmY0MWU1ODk2Zjg5OWY3NmNlYmU2MDQ5YzQ2MWJlNDZjY2FiYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZNkz5r3F0faDMXXohX1BFCgPXBM
fbd3gR8THsLtHQx3yp1d8Ilk9/iYK+DVvHc4dkXchSIh5HHco/2Y6m3NTW7zkJYf
QSgptrilbDVbCnYuBiNx6ESDq/u4cqdMhkIO1ktl5XqNpKizA3QenSHRNri1dGKI
/cuOTOWb0osrR6OZefSO3y2OJgpvTjEv1ERvcWWOzC7YDwUJymnBKFd/XfqxZ4fs
e2CxmweJ57/NN+E+DB5dQqQkdEeEZ8Vc3qu6gzKw3GE2szXbo+l6ybQZ6FHU19+E
Sjq5521ynuWJzFRbqUUCfA11PccPey6rWBoZxD5dg5RnvS9ke1t867BdLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv0HliW+Jn3bOvmBJxGG+RsyrpRMB8GA1UdIwQY
MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt
OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk
LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiJ5eqrL
K151CTet/n5kLNwND91dlgQQZ4xqs1Cr9kQbJEO+6yPzcGKglZIbr8XYo6k5vBse
Jyh3eRpPKetMKZd6yqmMFiDfNM3U5ZqZzrm2+9BFaEuhywwNJijoXo6f/pJA835Q
vqXRgi3KQlsfVKVsZfCu+wSJU17fPGrXdoqykxKVyrfOwe1/AZrqA9AJt2e9UjQK
PW2EygfdSg+DohGsQfY+VTrpiuHfPvzfyaEzSD2CDqzSDVXnORqGqUZXd+zFTKzh
If4MZd2Pw2nQhzDiWGUevxYNLm78CuEZMuKcdyTqOmkVybxkL3q9KPhbWaZMiCp1
RPnH1lLjr1ulHQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:24 2026 by rpki-client