Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: epCqJ5gxu1PTJMbaz4biu0aWKxPmqxmBVGIMr2K91SM=
Subject key identifier: 04:1D:C8:9F:04:5E:09:5D:1E:D9:74:35:B5:62:BB:EB:7A:8D:D1:A5
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019DA4F8BAA82E9D91A5B3F6C655616190DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 014D
Signing time: Sun 19 Apr 2026 09:00:57 +0000
Manifest this update: Sun 19 Apr 2026 09:00:57 +0000
Manifest next update: Mon 20 Apr 2026 09:00:57 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: eHvX12bFrgidVjlH1mhwrf/nEQe14343NiuZOW82+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:ba:a8:2e:9d:91:a5:b3:f6:c6:55:61:61:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Apr 19 09:00:57 2026 GMT
Not After : Apr 20 09:00:57 2026 GMT
Subject: CN=041dc89f045e095d1ed97435b562bbeb7a8dd1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:98:3e:88:9c:c2:76:51:32:2b:6f:9f:03:
6a:bf:8c:a0:dd:42:b5:a3:40:38:1e:b4:40:48:0d:
c7:b7:95:b3:c4:cd:a1:17:1a:3e:b1:b9:bd:d2:9b:
ba:47:e4:18:a6:1f:30:dd:ac:b5:93:a9:94:71:9a:
07:5a:fe:4b:dc:82:fc:d9:d7:fb:60:43:14:46:7d:
c9:c1:df:14:88:4a:26:7d:cb:bc:1a:2d:5f:ae:d7:
12:c1:c9:e2:25:13:b1:6a:cf:64:ad:a6:ca:8a:7a:
c8:cd:44:d5:d4:ba:fa:f4:1d:f7:0a:01:35:20:26:
f9:6e:84:b2:46:82:7b:98:44:9b:64:ed:dd:4d:da:
07:b0:51:b4:c3:cb:68:d8:93:e0:b4:7e:b0:e3:78:
23:32:51:a5:a2:01:a1:0b:82:2e:17:6a:03:fc:1b:
ce:f9:13:16:c1:b5:6b:35:d1:4c:a4:24:37:8c:49:
07:9d:5a:1c:2a:e5:b7:9b:21:59:72:86:b1:0d:2c:
8d:e0:1e:a0:b2:87:24:12:30:37:64:08:b6:d0:17:
52:fd:a9:cd:7a:2b:7a:b5:4b:4a:58:2a:41:33:da:
3b:0d:df:02:b1:24:2d:d0:88:9d:30:91:ff:ae:c2:
d2:a6:6a:42:91:3f:40:4e:2d:a0:f6:ca:94:2e:ec:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:C8:9F:04:5E:09:5D:1E:D9:74:35:B5:62:BB:EB:7A:8D:D1:A5
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f2:04:17:c9:41:a4:a0:06:e4:ec:05:06:43:94:3f:b6:76:
11:ca:85:19:47:36:b8:c1:59:f9:0c:66:9c:e1:a6:99:3a:50:
77:7d:a0:d5:cd:bd:95:ef:96:3e:ac:c4:31:7c:5a:f2:29:62:
39:58:61:38:44:42:96:74:4a:10:23:e4:3d:38:90:f7:7c:5a:
52:bc:6f:6c:d8:37:ae:7d:f1:99:84:b1:f6:ac:04:03:29:f3:
ed:20:57:79:3b:5d:3b:1b:62:77:fc:40:ee:41:f1:f8:ce:73:
67:97:8f:d7:de:e2:3b:6f:dd:6f:36:28:3d:ec:37:83:54:ff:
ab:3f:84:f2:e9:cc:64:87:5f:c7:0e:e6:1d:cc:91:fd:bd:e0:
d7:80:26:45:c9:71:50:24:04:f2:bf:10:2f:80:49:c6:36:7f:
9b:05:92:f4:a9:68:eb:bb:54:b2:d1:7f:ab:de:8e:ca:99:78:
89:67:ab:42:72:7f:06:3d:58:be:18:c5:2b:00:5b:cf:6d:6a:
c3:16:24:dd:09:8e:48:59:03:6c:9d:7d:fc:e0:45:1d:e3:4e:
6b:e0:0f:78:ec:e6:a5:a5:71:ed:f2:f6:68:4b:40:49:3f:f2:
70:33:c7:94:5e:af:e3:da:66:1b:e7:8e:72:cc:48:f4:db:80:
59:74:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:41 2026 by rpki-client