Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: d0MHH0uLRAy0LU38OQEJ4yPM/Vif7OVGYq/AhDE0y8Q=
Subject key identifier: E2:96:BA:98:07:A3:0A:A2:B1:E9:D7:D1:61:F3:FD:71:FD:DA:08:4A
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019D985042B0A4D19AE3314DA01EA5B9D44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0B64
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: ZTahNQdWa51ZPuJw7xtfzIr551ENienJMp0VakEKIoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:42:b0:a4:d1:9a:e3:31:4d:a0:1e:a5:b9:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=e296ba9807a30aa2b1e9d7d161f3fd71fdda084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:85:ff:11:e4:d3:27:3b:0f:9b:b7:7f:fa:
4a:e3:10:e6:89:19:a8:2e:58:79:a1:01:1c:44:cc:
93:c9:94:fe:06:e7:85:b6:35:64:e0:7b:dc:e9:70:
32:d8:dd:db:8e:db:38:ca:53:34:e7:1e:67:56:22:
84:ae:98:9e:e5:0b:0d:38:af:ce:d2:da:d1:d6:1c:
5b:a9:ee:46:22:61:d9:a3:9e:c6:5e:73:49:05:61:
e1:e7:a3:79:5d:ed:35:2e:9d:18:e6:cc:df:68:52:
96:00:c0:3b:2b:a7:97:c7:86:7e:28:bc:88:0b:07:
1b:eb:a2:2f:6b:29:84:ce:e7:f0:81:a2:5b:e5:7a:
f1:21:48:86:06:28:c4:e0:e7:e6:04:b2:a7:15:44:
f0:46:9e:a0:d0:1b:9e:85:a2:92:58:a1:cc:a0:48:
dc:71:98:13:04:89:19:56:c1:f9:aa:04:6d:0c:01:
0d:f5:0a:f9:5e:38:3f:d1:0a:b4:76:2e:80:28:d5:
96:ff:45:ef:99:fb:f5:33:da:5c:3c:50:82:9f:ce:
6d:8f:2c:20:67:08:2a:2d:52:f8:f4:b8:72:3b:ef:
47:30:fa:3e:e1:2b:4b:0f:f2:d3:b8:b3:94:38:83:
ec:58:57:c0:03:43:fa:f0:9c:11:97:33:85:22:99:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:BA:98:07:A3:0A:A2:B1:E9:D7:D1:61:F3:FD:71:FD:DA:08:4A
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:3f:86:c8:60:20:62:19:15:ca:33:d3:2d:ef:de:35:94:
7a:cc:ee:61:50:92:ea:f7:44:db:6f:a1:f0:67:d5:0f:6b:ee:
35:8d:ed:89:fb:82:21:53:a2:db:d3:b3:00:8b:77:9e:89:39:
eb:a2:f6:e7:b5:33:28:47:c7:a2:e8:f4:f6:ab:16:e9:78:16:
ee:8e:b0:78:a3:05:41:72:df:c3:66:c0:4f:41:2a:9a:6e:5e:
12:a9:b1:63:3e:68:27:69:72:78:06:38:6c:85:99:4e:fa:ee:
4a:d5:bd:1b:69:c4:1c:05:78:f5:ef:b3:42:3d:57:3d:f4:e3:
0b:d0:aa:ba:da:e7:5e:5f:60:c8:5a:2c:56:6d:46:9b:66:fd:
a8:0a:c9:ce:13:dc:7e:fa:d8:ac:7e:dc:0b:53:fe:d3:38:50:
92:22:db:46:cf:4a:6c:c7:5e:7a:a2:d5:0d:75:44:fa:3c:13:
46:ac:72:46:ef:e0:54:da:59:ea:77:88:15:cd:0b:c0:6e:48:
5c:83:88:0e:93:23:06:8b:56:c2:78:f2:fd:3c:e7:2c:31:db:
c7:ab:b5:6e:ef:89:97:88:07:e4:43:d1:0c:a7:0f:47:9c:90:
2c:4e:1d:b4:10:a1:fe:59:2a:fe:4f:47:e4:ac:a3:0d:a3:51:
13:7a:9a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEKwpNGa4zFNoB6ludRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj
Zjk2Y2EwHhcNMjYwNDE2MjIwMTI5WhcNMjYwNDE3MjIwMTI5WjAzMTEwLwYDVQQD
EyhlMjk2YmE5ODA3YTMwYWEyYjFlOWQ3ZDE2MWYzZmQ3MWZkZGEwODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqF/xHk0yc7D5u3f/pK4xDmiRmo
Llh5oQEcRMyTyZT+BueFtjVk4Hvc6XAy2N3bjts4ylM05x5nViKErpie5QsNOK/O
0trR1hxbqe5GImHZo57GXnNJBWHh56N5Xe01Lp0Y5szfaFKWAMA7K6eXx4Z+KLyI
Cwcb66IvaymEzufwgaJb5XrxIUiGBijE4OfmBLKnFUTwRp6g0BuehaKSWKHMoEjc
cZgTBIkZVsH5qgRtDAEN9Qr5Xjg/0Qq0di6AKNWW/0Xvmfv1M9pcPFCCn85tjywg
ZwgqLVL49LhyO+9HMPo+4StLD/LTuLOUOIPsWFfAA0P68JwRlzOFIpkTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKWupgHowqisenX0WHz/XH92ghKMB8GA1UdIwQY
MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt
MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2
LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJk/hshg
IGIZFcoz0y3v3jWUeszuYVCS6vdE22+h8GfVD2vuNY3tifuCIVOi29OzAIt3nok5
66L257UzKEfHouj09qsW6XgW7o6weKMFQXLfw2bAT0Eqmm5eEqmxYz5oJ2lyeAY4
bIWZTvruStW9G2nEHAV49e+zQj1XPfTjC9CqutrnXl9gyFosVm1Gm2b9qArJzhPc
fvrYrH7cC1P+0zhQkiLbRs9KbMdeeqLVDXVE+jwTRqxyRu/gVNpZ6neIFc0LwG5I
XIOIDpMjBotWwnjy/TznLDHbx6u1bu+Jl4gH5EPRDKcPR5yQLE4dtBCh/lkq/k9H
5KyjDaNRE3qaDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:40 2026 by rpki-client