Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: GAqhih18vD8ChJNBph7/koFquPxa7Id/iBW4BH7yeaY=
Subject key identifier: DE:0A:45:16:AA:0C:16:9C:6A:15:A5:A0:5A:61:41:B2:C6:EB:BC:D2
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019CADC7953B7C075549EC7EC878A35003D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: CD
Signing time: Mon 02 Mar 2026 09:01:03 +0000
Manifest this update: Mon 02 Mar 2026 09:01:03 +0000
Manifest next update: Tue 03 Mar 2026 09:01:03 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: x+I8qtPGoVNWcKVAOIVa261A+4CSfKkQQVQ6aMNvbjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:95:3b:7c:07:55:49:ec:7e:c8:78:a3:50:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Mar 2 09:01:03 2026 GMT
Not After : Mar 3 09:01:03 2026 GMT
Subject: CN=de0a4516aa0c169c6a15a5a05a6141b2c6ebbcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:1e:9c:16:b5:ee:14:d0:de:48:36:3b:59:
51:0a:2e:db:e9:6e:e1:1f:a9:b9:cb:d9:bb:b4:e4:
40:ca:3b:4d:f9:0c:88:2f:fc:0d:50:9d:3a:ca:32:
ec:ed:5e:6f:9d:cb:17:9f:5c:55:3d:1b:55:2b:ce:
56:11:90:aa:27:ab:b2:f8:ce:6e:33:47:c3:8a:d1:
28:5c:af:b2:85:22:0d:a5:97:a7:94:8e:38:11:12:
0b:7e:b2:cb:3e:85:3e:de:71:ff:75:14:ae:aa:f7:
83:a3:33:f8:99:cd:6e:fb:2f:f4:1c:ab:35:7e:de:
25:19:90:70:d0:71:d4:18:9d:e7:f4:f3:f6:2a:10:
c5:e9:58:55:13:14:97:a8:05:89:c9:58:6a:3f:23:
75:10:bc:66:dc:a5:e1:a1:da:6e:54:fe:93:5b:52:
6d:32:b1:53:5d:1f:55:1e:14:f4:5d:27:e0:7c:b2:
29:2f:7c:e9:fc:89:f6:05:06:73:f6:ad:11:8a:cb:
98:0d:d7:bd:c6:6f:70:f7:92:0d:74:d7:f8:f0:94:
03:7d:6a:cb:d0:91:ef:27:dc:03:fe:66:31:be:99:
f3:7c:b5:ea:10:2f:72:ab:d4:8e:b9:51:07:83:ca:
12:92:0d:9c:0f:9d:fd:77:64:df:a3:29:59:86:d9:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:45:16:AA:0C:16:9C:6A:15:A5:A0:5A:61:41:B2:C6:EB:BC:D2
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9c:21:86:b6:8e:54:5f:61:fb:94:4b:50:db:f7:5a:5f:65:
c5:a5:11:b8:19:ce:df:63:68:b9:d8:06:34:1c:86:62:f5:1a:
9b:c3:1a:20:42:5d:9a:0b:15:7c:60:de:d9:fa:e4:44:80:74:
15:07:85:9f:41:00:cc:4d:4a:e0:7c:09:a2:57:55:b2:ef:87:
b3:75:c3:e0:d9:e7:51:5d:34:de:60:56:5a:40:cd:43:55:59:
15:86:f1:fa:e8:06:bb:fd:75:a5:a7:3f:52:6b:d9:45:80:13:
12:85:44:2c:f2:0f:ef:e2:28:07:98:8e:3b:aa:8f:e4:95:87:
34:1a:63:64:0c:09:98:c5:e1:d1:d9:dd:f8:2b:67:3e:53:38:
8b:ea:44:1c:c9:26:fd:fd:84:43:f1:02:20:41:f1:da:e8:42:
8c:94:69:0a:5b:7f:1b:c7:be:9d:3a:a8:32:eb:df:fc:e3:f2:
39:71:a0:a9:35:62:d1:bd:57:5f:66:75:ae:00:64:0d:d0:59:
76:70:6e:0a:23:c1:83:ab:06:27:41:60:6f:41:6a:53:52:8d:
5a:2e:e4:2a:38:72:78:4b:5f:f0:c2:90:3f:dc:61:77:f7:4b:
7a:8e:37:89:14:ca:da:0d:ef:b6:10:03:91:f0:97:dc:32:47:
c0:a2:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:29 2026 by rpki-client