Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: vgYSyg2dcEVwd7otjBxKBkWTyFbX9vFCMHJ0Sijrp6I=
Subject key identifier: 57:77:B6:4F:43:CE:4C:78:D5:C3:87:54:BA:9A:07:8F:D9:73:48:1F
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019FA0E0A9BF40C1D34DED65AB130B5260C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 029F
Signing time: Mon 27 Jul 2026 00:01:45 +0000
Manifest this update: Mon 27 Jul 2026 00:01:45 +0000
Manifest next update: Tue 28 Jul 2026 00:01:45 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: CEwN+Au2j3pb+RRRxfp+CuN3Rs6s+3dzRXs7yxY3RHc=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a9:bf:40:c1:d3:4d:ed:65:ab:13:0b:52:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Jul 27 00:01:45 2026 GMT
Not After : Jul 28 00:01:45 2026 GMT
Subject: CN=5777b64f43ce4c78d5c38754ba9a078fd973481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:05:01:06:a9:6f:a4:a0:18:52:6f:76:a5:
db:f0:a4:95:b4:f1:aa:42:14:8a:67:50:42:40:18:
80:7e:79:24:c2:0e:dd:82:aa:9d:82:ae:dc:78:f6:
7f:0f:e5:ff:d1:a2:02:88:e9:4b:53:b0:33:cd:84:
f0:92:91:19:2a:9a:83:1c:19:5e:c1:f8:f0:18:f3:
23:a5:32:77:87:e7:e1:c9:7d:5c:4e:6e:50:79:6e:
d3:7a:b1:6e:4f:82:a0:69:1b:a0:63:5f:ae:84:20:
77:a5:1e:18:30:18:f3:79:86:2e:58:aa:9d:a9:a9:
78:66:93:e1:5f:ff:61:57:43:1a:ce:85:da:28:de:
5d:18:f1:c7:10:7a:9b:d6:9f:66:1d:1f:a8:ba:f5:
f0:72:2c:70:8c:2e:d5:df:c3:da:7a:9f:cd:0e:1a:
e0:e5:16:f1:20:d7:3f:d7:fe:59:4b:ec:7c:d8:f6:
a2:ea:ff:9a:7e:72:a9:9d:0c:8a:ea:d9:3f:69:bd:
f6:ed:3a:9b:4e:b8:35:50:b6:76:e2:98:92:fd:15:
b9:9d:ad:98:69:ef:74:e4:f5:7b:0d:f8:87:b3:3f:
31:7b:3b:ab:7e:f2:2c:c7:83:4e:5b:b0:ef:22:6e:
ba:18:74:17:3e:67:ef:6b:31:cd:a0:13:04:54:14:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:B6:4F:43:CE:4C:78:D5:C3:87:54:BA:9A:07:8F:D9:73:48:1F
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:b7:47:85:30:82:e2:76:a6:26:7d:36:64:ad:0a:9b:50:
58:b8:30:f4:fd:0b:72:53:84:23:10:f0:d2:72:a5:cc:eb:b4:
b3:59:fa:0d:57:e6:15:fe:84:8d:5c:01:a1:b7:3b:98:35:38:
05:e0:2e:f3:9d:86:87:10:db:e3:ba:e1:98:19:53:bd:c4:5d:
ac:02:71:3d:54:fd:48:15:f4:ca:e6:71:50:5d:62:85:7c:d4:
80:0c:78:3a:ec:44:00:e9:22:b4:04:09:0a:c6:94:25:33:2e:
af:03:23:3a:38:22:11:ed:7e:76:89:d6:20:bc:1c:28:e0:a3:
ee:dc:ac:c4:0e:21:c3:96:9f:f1:a6:bb:78:fd:4f:58:bc:f1:
fe:2c:ef:66:6d:61:29:1a:8e:9f:01:dc:a3:07:66:f1:a5:0a:
b8:e7:6a:79:09:3c:e4:79:0d:b2:d2:1d:ed:6f:4c:c3:2e:e8:
aa:2d:e7:b9:f7:b8:f4:5a:bd:37:57:56:29:cd:31:f7:ca:dc:
9c:ee:65:2c:70:63:bc:b7:f8:35:ce:6e:58:54:b1:3f:f8:06:
bd:86:6a:39:8b:3f:aa:2b:e7:3e:74:84:5f:7c:e9:1e:4f:5c:
3d:ac:3e:77:c4:0c:73:29:2e:3c:2a:83:35:16:69:3c:73:38:
90:cf:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:29 2026 by rpki-client