Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: nnFyv6bmfjv2eHMBFd6S4u0wxhsBo+1evWdB4Z6DK/k=
Subject key identifier: FF:94:1F:15:96:DA:D5:14:5E:5F:9A:EC:87:B9:DF:02:36:BB:9B:72
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019FAE659F7D4CB535C011C6C7CEDEADD11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 025B
Signing time: Wed 29 Jul 2026 15:02:03 +0000
Manifest this update: Wed 29 Jul 2026 15:02:03 +0000
Manifest next update: Thu 30 Jul 2026 15:02:03 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: NNvSZ/zJJ934kwGDh28PsfRWL700Pl++bnVt0+0lv0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:9f:7d:4c:b5:35:c0:11:c6:c7:ce:de:ad:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Jul 29 15:02:03 2026 GMT
Not After : Jul 30 15:02:03 2026 GMT
Subject: CN=ff941f1596dad5145e5f9aec87b9df0236bb9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:cc:65:b0:7a:d2:ae:dc:f1:10:2c:00:7c:
58:53:b0:bc:e0:14:35:ec:71:ee:63:1c:20:c6:14:
bd:2b:aa:fa:ee:9f:bc:e0:3a:c6:1a:b7:88:b0:b3:
a6:9b:fa:99:ec:f1:85:32:e0:3c:99:9d:a4:7d:17:
e1:1a:09:9e:79:48:45:a3:2f:ad:f8:77:53:ce:be:
db:1e:99:50:2e:d1:43:ec:b0:5f:b9:64:06:80:4c:
47:30:54:4d:42:64:b8:85:50:10:b2:d4:90:89:ef:
6c:c4:f7:1f:a0:08:f5:a3:08:c7:47:8b:50:b6:cc:
d7:31:4d:e7:cc:1d:50:18:9b:3a:2d:c5:f3:71:12:
8c:1a:0a:de:fd:a6:83:5a:ef:fc:33:0d:d5:4a:7f:
96:8d:fe:6e:1c:b2:4d:e1:d6:3d:8a:99:8a:27:78:
64:59:c3:2f:36:27:93:cf:7d:46:84:ec:d6:af:b4:
e7:0a:64:76:56:47:39:a6:2b:c3:fb:f4:46:fe:3b:
99:9f:17:59:ca:16:33:9a:9c:b3:3b:62:fb:0e:2e:
bb:67:1c:8f:8e:f3:1b:56:8b:66:71:d3:c2:ff:89:
35:98:5c:ab:1f:99:e1:29:0b:44:4e:28:23:16:ff:
17:98:9e:ea:4d:46:c3:e2:d1:b2:83:97:8b:e6:5c:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:1F:15:96:DA:D5:14:5E:5F:9A:EC:87:B9:DF:02:36:BB:9B:72
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:f4:39:7c:94:c8:a3:ad:b9:2f:cd:df:4f:4c:36:6f:e6:
6e:22:13:e3:c7:07:8a:ef:d8:1a:6d:77:7d:93:ef:b1:49:33:
fa:ea:6c:8d:2a:86:a1:ef:12:c0:ad:dc:40:aa:ec:d9:34:86:
2e:20:cf:bd:b4:b4:90:8d:60:90:7f:5d:ca:0c:67:57:f5:0e:
d8:c3:52:e6:7a:df:c1:65:37:bb:5b:0c:d1:d5:29:d9:77:b5:
9e:46:e7:60:1a:0a:c6:51:b1:cf:a2:bd:7f:28:cd:a1:b9:a4:
d7:8b:73:f4:dc:6b:7f:1b:58:66:40:1f:58:52:ee:78:50:d6:
41:95:78:43:40:12:f1:aa:98:81:2e:21:91:3e:5f:b2:60:9e:
d1:e9:24:03:e6:3a:47:92:d5:3d:1b:2e:b4:a0:1f:23:3d:d0:
0e:83:c7:96:1f:92:05:f8:0a:25:4e:bf:69:b6:82:62:9b:bd:
6d:8b:70:99:e1:fe:66:a1:1a:03:a0:67:08:3c:26:fa:d1:e7:
0d:5d:1e:82:3e:d2:ac:8a:b7:5f:f0:10:ce:c4:a8:98:ac:d2:
34:21:19:b9:48:84:4a:87:05:c7:87:5e:1b:62:d0:49:55:82:
8a:49:2e:05:8f:7e:75:b8:fb:88:7c:9b:14:0a:2c:2c:ad:ca:
71:cd:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:28:26 2026 by rpki-client