Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File: pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier: CMCI6F+JKi4tV+YS8VoatfaL0l0eZL+2f2dbbHib9YM=
Subject key identifier: CE:56:C4:20:D3:59:20:17:14:AC:B3:8A:44:AD:5D:2C:3D:ED:4B:45
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 01A128E84BC40AE49AA8172E4333846805D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 03:01:14 +0000
Manifest this update: Sun 11 Oct 2026 03:01:14 +0000
Manifest next update: Mon 12 Oct 2026 03:01:14 +0000
Files and hashes: 1: fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa (hash: NrJrX0EfF2/UhROqrCTS8hvTOUzCH9tbVAPmA+CILDc=)
2: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: 1PkDE6e1KMUfuvqAB212z34z59URyqHN0HAVXj20Kq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:4b:c4:0a:e4:9a:a8:17:2e:43:33:84:68:05:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Oct 11 03:01:14 2026 GMT
Not After : Oct 12 03:01:14 2026 GMT
Subject: CN=ce56c420d359201714acb38a44ad5d2c3ded4b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:65:50:fa:1a:1e:7b:11:59:e1:fe:fc:98:
17:b5:d0:de:e5:81:a3:bb:67:08:39:a1:db:5d:6f:
d5:65:83:73:80:cd:41:8f:93:24:c9:ae:bb:be:1f:
cf:73:35:08:13:14:49:05:c4:d9:84:b3:21:5d:de:
d7:ee:c9:7d:dc:77:c3:28:af:4a:6a:95:70:9d:33:
e6:0a:aa:d9:8f:fc:fc:65:ec:bb:fb:0d:f7:a6:68:
b4:22:27:55:cd:51:5b:30:45:cd:43:7c:aa:ae:86:
0d:3a:a8:b0:d2:d6:1d:c5:88:34:c6:d1:fb:59:99:
84:6a:3c:0a:e3:1e:57:b9:1c:22:ae:4b:37:a0:69:
36:75:78:38:cd:1d:19:1d:19:72:86:65:ee:7e:29:
39:0f:0d:05:2d:f5:81:4a:0c:ce:f4:14:97:7f:06:
cf:4c:78:69:b7:b7:f3:0e:40:ff:53:6f:2a:ff:76:
60:2d:00:d0:42:50:42:52:59:7b:47:ee:ab:fd:8a:
38:13:c1:40:02:33:e3:58:1b:e3:3e:d9:6b:e2:9b:
0b:e9:f3:45:09:d6:fc:3e:24:66:09:1c:32:1c:4b:
05:e4:79:78:aa:70:f6:43:a6:cb:d1:31:5b:9c:ee:
07:94:5b:50:46:e0:2a:81:ff:c1:42:6f:95:88:0d:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:C4:20:D3:59:20:17:14:AC:B3:8A:44:AD:5D:2C:3D:ED:4B:45
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:f2:6f:38:3b:e5:f0:2d:42:4b:bc:76:3a:3b:01:d0:4c:
95:89:76:29:e4:8c:35:13:5f:8b:10:82:54:74:5c:5a:02:08:
8c:4c:a1:2f:4e:ad:4e:dd:56:44:aa:eb:c5:8f:d4:80:10:12:
41:62:77:57:74:38:69:ba:65:ab:37:32:c7:a4:31:65:00:46:
d0:01:81:96:24:ee:19:eb:2a:8b:bb:84:0b:b6:ac:97:b7:30:
eb:f1:45:3e:89:60:94:4e:79:6c:89:83:48:aa:ea:0c:fe:80:
30:e5:db:f1:2f:d5:69:3a:1a:e1:a2:fc:25:fc:45:f8:a6:50:
95:b1:58:af:44:39:3b:55:c9:47:f5:ab:59:b3:20:8b:16:de:
0e:cc:0a:ce:5c:5e:9d:94:4d:3e:1d:0d:b7:4e:db:99:03:2a:
1d:87:4b:a6:cc:c7:38:a9:ee:36:e7:74:d7:0f:8e:1c:2a:09:
fd:a4:97:ad:0e:bc:eb:c7:4e:93:1b:1e:78:99:66:b5:8e:01:
f3:cb:b7:52:50:1e:15:cb:de:15:63:56:66:b0:21:73:3e:cc:
83:e4:d3:65:e9:ca:4a:6c:a9:67:fd:17:ca:a8:d9:fb:12:fb:
a2:5b:ee:c2:b7:7e:60:ab:72:38:9b:58:30:50:2f:05:7f:22:
f9:fc:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:42:56 2026 by rpki-client