Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: nv98/CO6eSGL5ZI1AffilES1Nt7K4Ij0kc4JJqnPGCk=
Subject key identifier: 09:40:C0:D3:56:81:F6:AC:D0:85:3A:42:81:95:44:D2:6F:88:3C:5B
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 01A0C8594CE93AC0AB6FD7163B8EA687609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 02ED
Signing time: Tue 22 Sep 2026 09:01:30 +0000
Manifest this update: Tue 22 Sep 2026 09:01:30 +0000
Manifest next update: Wed 23 Sep 2026 09:01:30 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: Z0KI/Ff48oDWSIoPq9EuCZxCY7+JLDQIGfMDo1Wu0GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:4c:e9:3a:c0:ab:6f:d7:16:3b:8e:a6:87:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Sep 22 09:01:30 2026 GMT
Not After : Sep 23 09:01:30 2026 GMT
Subject: CN=0940c0d35681f6acd0853a42819544d26f883c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:7d:c2:6d:e0:a9:b4:56:82:ac:a3:12:bc:
a5:e5:f9:c2:48:00:8c:c9:bd:e6:d2:17:6f:0a:03:
6a:ae:68:e0:20:29:b9:69:8c:bc:ee:c5:04:3b:52:
ef:55:da:40:85:5e:d1:e9:f5:66:e8:51:62:74:8f:
ee:11:be:e1:8a:43:79:5b:3f:c1:35:a5:96:1f:48:
9d:1b:a7:ca:aa:cc:c2:98:ad:6c:83:58:e5:3e:30:
61:60:d3:54:01:ce:f9:64:c7:04:6c:d3:75:14:68:
d0:18:70:52:9a:5f:b5:1b:58:fd:f7:22:08:98:07:
ad:27:96:4f:f4:49:e7:d3:58:54:67:7c:ab:68:27:
bc:f8:32:64:7d:2d:f7:e8:e9:0b:a9:3a:0f:44:08:
ca:19:39:04:60:17:18:49:41:02:f7:89:30:54:a5:
3b:fc:94:a4:24:0d:c4:01:3c:0a:06:48:b0:b4:a6:
a4:45:63:3f:5e:b9:df:91:62:dc:90:57:a7:82:c0:
2d:84:75:5d:0c:50:db:2e:d8:5a:41:cc:31:32:64:
06:e8:d0:9c:94:ba:4d:8b:fa:be:10:ef:45:34:9a:
21:4c:35:9d:56:23:1d:33:ee:4b:5c:ae:67:3e:b2:
20:a1:96:f8:99:ba:2f:af:29:26:c4:e3:6f:33:23:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:C0:D3:56:81:F6:AC:D0:85:3A:42:81:95:44:D2:6F:88:3C:5B
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:8b:63:cb:71:6d:56:0d:9b:39:5c:f1:16:f2:bb:f6:3a:
87:bb:09:e5:52:3c:3a:78:40:78:64:a8:94:27:ab:e0:a5:6d:
a7:86:83:0e:aa:19:77:17:c9:72:5a:23:77:4c:c0:0f:41:25:
92:9a:53:b7:b2:40:ef:99:72:f3:b0:07:8d:dd:19:e4:e2:3a:
09:30:16:0e:a6:db:c3:15:2a:a5:ab:c6:2b:93:4b:05:50:b8:
1d:51:cc:cb:1c:51:a5:a2:8e:98:e3:c9:c5:23:5f:5d:62:b2:
db:fb:1d:42:39:65:1c:17:ea:b8:2d:d9:b1:c7:eb:99:80:f4:
03:15:6b:58:9c:ec:81:f4:14:ba:ae:58:c9:30:5d:db:3b:bc:
76:dc:88:29:42:8d:5f:04:9a:3b:7a:2d:17:c7:92:87:a1:9d:
c5:3d:6c:4a:ee:92:41:cc:5c:2c:99:c2:49:74:71:6c:54:49:
5f:c8:ce:f4:3b:b6:6a:d9:4b:98:e2:bc:5a:bb:b1:53:fb:53:
69:45:e3:38:e8:19:66:3f:39:de:98:cf:67:77:7e:e1:f2:67:
32:3d:45:1f:84:16:ee:ba:e5:82:7c:f4:aa:02:60:8e:ff:cd:
6d:8f:75:89:0f:b9:85:66:74:a6:2f:8a:0f:2f:78:f7:7d:ad:
24:d2:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:10 2026 by rpki-client