Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File: pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier: XxmOH7++A/sL8cq3mQ7YVmAtxspK+yS2YjPDyxw4llw=
Subject key identifier: 86:01:67:EC:6D:8E:A0:8F:BC:FA:00:CB:FA:0A:6D:0C:59:3C:0E:FD
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 019F292499C8FA4FDEEAED2098767AD651DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number: 0A
Signing time: Fri 03 Jul 2026 18:01:32 +0000
Manifest this update: Fri 03 Jul 2026 18:01:32 +0000
Manifest next update: Sat 04 Jul 2026 18:01:32 +0000
Files and hashes: 1: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: eUfq4HQp7RZV07FnxwGm/gd0DMi1GIGh+rMlqbzr/4U=)
2: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (hash: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:24:99:c8:fa:4f:de:ea:ed:20:98:76:7a:d6:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Jul 3 18:01:32 2026 GMT
Not After : Jul 4 18:01:32 2026 GMT
Subject: CN=860167ec6d8ea08fbcfa00cbfa0a6d0c593c0efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:56:5e:bb:36:6c:06:84:cf:ee:d2:2b:00:
bb:0b:c2:62:44:d3:97:e7:55:97:c5:16:5a:9f:41:
fe:cf:8e:90:75:67:75:49:81:f3:2f:95:59:58:29:
22:e1:b6:b5:d5:c3:4b:c5:99:6a:9e:b8:38:b3:b0:
75:d9:d2:d1:63:4f:a1:54:3d:aa:67:9b:db:4d:70:
67:14:75:5c:1a:5b:71:e9:3c:89:ae:45:5f:a3:12:
1c:b3:55:cd:74:44:7c:98:ce:20:1d:e0:e6:6e:4f:
d6:ce:0d:9c:a6:df:97:f8:c3:90:40:bd:1b:46:6c:
5f:90:c2:0d:7c:47:98:a0:a0:2f:c5:74:89:a8:35:
62:f6:64:df:9c:4d:d5:db:07:2c:d3:5d:1a:f0:10:
a5:a8:66:14:47:a8:d1:b2:cd:ba:ca:f7:b1:e0:2d:
1a:36:82:e3:45:bb:84:a7:15:ac:d4:15:a9:09:07:
c0:ab:0e:ea:f2:70:af:81:a8:29:8e:6e:23:cf:cb:
72:b0:47:85:97:ab:cd:92:5b:14:7d:92:1d:77:d9:
04:76:99:95:b0:7c:27:43:30:9e:44:17:39:35:08:
ba:d1:53:b5:4b:26:72:45:ea:23:e8:05:dc:ab:d7:
9f:a6:e5:74:96:73:94:2a:82:c0:74:3d:b5:06:08:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:67:EC:6D:8E:A0:8F:BC:FA:00:CB:FA:0A:6D:0C:59:3C:0E:FD
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:e3:62:bd:83:e3:80:a7:1f:94:87:f1:ad:48:e3:36:1e:
d4:11:fe:31:95:49:e0:bb:5c:e8:91:2a:91:a5:9f:ec:a4:bf:
09:e8:50:95:ac:09:93:7c:38:2c:82:e5:e8:23:4c:bb:8d:1f:
18:91:6e:29:fd:df:d3:2d:de:29:44:b9:6b:0c:98:68:f0:64:
ee:c2:4f:9c:5b:86:e8:16:67:89:61:a0:eb:96:32:fe:af:61:
4b:00:05:04:89:61:b4:80:f4:f6:71:38:37:45:2d:f1:b2:39:
fa:5f:ed:33:52:e8:7f:72:ca:fd:07:e2:09:84:9d:fe:43:59:
96:ae:dd:1e:b1:ad:26:02:57:6b:85:a5:10:18:9c:89:7e:9c:
fb:77:63:27:08:25:1c:f8:50:f6:9e:56:19:fe:47:76:d9:c9:
82:11:32:a6:58:ee:9a:4e:b5:9f:2d:88:21:38:22:65:3c:fb:
0a:f3:a0:a5:35:e8:6c:01:22:85:ca:71:43:8d:55:9c:b0:97:
93:b9:8e:e4:d0:4a:6b:fd:d1:8a:b9:94:aa:4b:3a:69:da:b2:
e2:99:7d:fa:c4:a2:5a:6a:d7:a6:55:e2:53:63:11:fd:26:de:
16:b1:9a:45:eb:f6:d1:ae:90:29:e6:19:6a:c2:cf:59:85:f3:
09:3c:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:04 2026 by rpki-client