Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: EPhD8qxiHMQesNTe0k6OR/mYY3a6TUpYwt1YBYW+cPw=
Subject key identifier: A3:D6:07:9F:A9:57:25:40:DB:F7:11:B0:5F:96:ED:DC:C2:32:3A:3B
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 01A0CE24E6165B712F17CD7C85E921AD8AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 12:01:59 +0000
Manifest this update: Wed 23 Sep 2026 12:01:59 +0000
Manifest next update: Thu 24 Sep 2026 12:01:59 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: 6cBAwFlZSVDVroUS/dr4GoB94fQCjPDj+MSQKVL1ax4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:e6:16:5b:71:2f:17:cd:7c:85:e9:21:ad:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Sep 23 12:01:59 2026 GMT
Not After : Sep 24 12:01:59 2026 GMT
Subject: CN=a3d6079fa9572540dbf711b05f96eddcc2323a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:28:c3:37:85:25:49:31:50:2c:22:e3:46:9d:
43:f4:2e:ff:99:e9:09:ee:5d:16:d1:18:03:70:9c:
cd:da:39:08:61:6a:c4:e3:5a:ec:c5:9d:fa:bc:20:
b0:9d:90:45:fd:02:f7:4c:48:f0:e2:6f:91:8b:84:
6b:38:f0:69:76:bf:e9:bc:dc:ed:65:e1:df:77:14:
60:6d:d0:ba:cf:49:ac:04:38:96:68:80:f0:d2:ea:
15:18:cb:fa:88:dd:8a:90:ee:87:56:e1:6b:1d:05:
aa:73:f3:c9:9d:33:df:1c:4a:57:dd:77:4b:81:b4:
93:3f:4d:3b:c4:fc:c0:60:ed:c8:50:a9:5b:07:f3:
e6:b7:69:44:b5:e3:9f:c6:44:18:07:ee:08:fa:78:
f0:47:e8:8c:34:6b:c4:8e:38:52:52:88:8c:fe:27:
69:5e:4b:77:34:14:6f:84:98:07:71:89:75:66:8f:
23:47:06:77:a4:42:f2:30:17:0e:f5:08:de:f5:37:
b8:01:ac:aa:1c:06:e1:4e:f4:5a:e8:4e:91:0a:87:
06:ba:e1:c3:74:47:95:3f:a8:05:19:d8:37:13:dc:
aa:4d:9a:2d:25:0c:5f:82:97:29:4a:9f:c8:af:a5:
b6:c8:06:84:79:31:fd:9b:e5:a4:d4:4c:93:c7:c2:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:07:9F:A9:57:25:40:DB:F7:11:B0:5F:96:ED:DC:C2:32:3A:3B
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:a5:05:a2:9b:37:9f:90:63:4b:54:a1:4a:c5:67:17:ee:
e6:ac:4e:3d:89:9e:8e:d6:1d:75:88:17:3b:e3:04:d0:1f:4a:
40:b5:58:d8:47:43:f2:15:61:53:3f:58:0a:0f:93:74:e7:e7:
22:3c:64:a4:0e:0a:52:fb:57:64:71:36:f1:ab:5f:be:cf:3d:
d1:5e:c5:6a:18:24:a9:b6:d7:c9:8b:da:96:43:11:69:bd:70:
8b:39:7f:fc:ba:13:15:f1:d1:b0:d6:60:b8:7f:f2:16:a6:61:
d1:3e:9d:d0:30:ae:53:54:f9:4b:a9:42:7d:88:14:aa:9b:82:
e2:d2:8d:02:38:83:55:66:38:69:6b:54:23:db:8b:17:25:4c:
6c:a0:90:bf:3c:54:b5:d4:86:ed:4f:12:ce:f5:86:ab:55:30:
2b:06:ec:81:a5:14:04:50:4c:75:bc:a4:31:e9:2e:33:e2:0d:
85:78:1a:7a:28:7c:67:18:70:63:dd:74:eb:af:b9:a9:b7:16:
9f:c8:fd:14:87:e3:32:8f:b7:8f:4f:3a:c4:37:9a:75:62:cb:
d0:71:b3:e4:44:dc:c1:04:6f:b8:c7:34:d4:12:b0:c8:0e:7b:
2a:ee:0e:d3:91:8a:d1:98:46:82:09:64:83:a6:fa:0e:0e:0a:
d6:db:d0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJOYWW3EvF818hekhrYrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2
ZjExZmIwHhcNMjYwOTIzMTIwMTU5WhcNMjYwOTI0MTIwMTU5WjAzMTEwLwYDVQQD
EyhhM2Q2MDc5ZmE5NTcyNTQwZGJmNzExYjA1Zjk2ZWRkY2MyMzIzYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SjDN4UlSTFQLCLjRp1D9C7/mekJ
7l0W0RgDcJzN2jkIYWrE41rsxZ36vCCwnZBF/QL3TEjw4m+Ri4RrOPBpdr/pvNzt
ZeHfdxRgbdC6z0msBDiWaIDw0uoVGMv6iN2KkO6HVuFrHQWqc/PJnTPfHEpX3XdL
gbSTP007xPzAYO3IUKlbB/Pmt2lEteOfxkQYB+4I+njwR+iMNGvEjjhSUoiM/idp
Xkt3NBRvhJgHcYl1Zo8jRwZ3pELyMBcO9Qje9Te4AayqHAbhTvRa6E6RCocGuuHD
dEeVP6gFGdg3E9yqTZotJQxfgpcpSp/Ir6W2yAaEeTH9m+Wk1EyTx8IuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPWB5+pVyVA2/cRsF+W7dzCMjo7MB8GA1UdIwQY
MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt
NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy
LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaOlBaKb
N5+QY0tUoUrFZxfu5qxOPYmejtYddYgXO+ME0B9KQLVY2EdD8hVhUz9YCg+TdOfn
IjxkpA4KUvtXZHE28atfvs890V7FahgkqbbXyYvalkMRab1wizl//LoTFfHRsNZg
uH/yFqZh0T6d0DCuU1T5S6lCfYgUqpuC4tKNAjiDVWY4aWtUI9uLFyVMbKCQvzxU
tdSG7U8SzvWGq1UwKwbsgaUUBFBMdbykMekuM+INhXgaeih8ZxhwY91066+5qbcW
n8j9FIfjMo+3j086xDeadWLL0HGz5ETcwQRvuMc01BKwyA57Ku4O05GK0ZhGgglk
g6b6Dg4K1tvQSQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:34 2026 by rpki-client