Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: m3y7qyAZl7RbdBVUwDtb8rETiPLzPkmuN0brgT3tW/s=
Subject key identifier: 59:30:12:3B:78:B4:8F:EC:E0:BA:85:AB:83:AA:F9:C5:A8:D0:29:E9
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019CAAC71A05FC3ACA6E423A22E2944EE1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0AE9
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: IgHfNLmS4QhxfGMAEa03pHfGk7nPScgaPy9YJwUIXWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1a:05:fc:3a:ca:6e:42:3a:22:e2:94:4e:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=5930123b78b48fece0ba85ab83aaf9c5a8d029e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:ba:14:22:77:85:1e:04:4f:da:3f:51:38:
c0:09:5c:4a:ba:38:dd:71:ca:05:00:02:01:cb:0d:
4a:25:06:12:28:46:a3:9a:6b:90:7b:19:0d:6f:39:
41:a4:5c:71:fb:fa:2c:bc:b5:9d:ce:5a:8d:40:fb:
39:a5:8d:1b:63:57:39:6e:90:7a:6c:8c:fc:48:fa:
8a:60:8a:c9:2c:95:85:30:37:1d:07:8c:79:fb:2f:
2c:f4:e6:99:3b:e8:05:e5:6b:21:ae:ed:1b:b0:4f:
f3:c0:68:eb:61:9b:ca:83:57:fb:5c:f7:85:5c:e7:
89:65:f8:de:8a:49:8c:11:72:58:64:e5:bc:76:e1:
3e:aa:6c:c9:03:92:33:b9:67:40:9f:2f:81:31:f7:
2b:61:2e:f7:8c:aa:1b:12:bc:50:ba:ef:95:d1:4a:
ed:2b:b6:01:69:84:fe:33:3d:1b:69:9b:26:8f:57:
bf:5f:ce:2e:c5:77:30:ab:45:1f:a4:ef:42:78:c2:
7d:ef:0d:c8:79:5a:36:43:5e:84:29:c7:9b:f2:4a:
c1:ff:67:f5:83:3a:a6:80:ad:fc:c8:8d:f7:b8:a7:
c7:bb:57:1c:b3:b4:8c:b1:92:ee:1c:4b:17:e8:fe:
f1:b5:20:a0:54:12:98:9d:14:44:d6:fe:a6:d0:9d:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:12:3B:78:B4:8F:EC:E0:BA:85:AB:83:AA:F9:C5:A8:D0:29:E9
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:68:41:6f:7c:59:be:76:23:17:7e:4e:09:2e:5e:06:64:
48:30:c1:db:13:05:cb:e6:2a:8b:45:32:ae:e3:c1:fd:26:38:
ea:ca:13:95:23:8c:52:14:54:d2:90:ba:a2:70:65:2c:60:03:
09:f1:a3:fa:91:45:72:66:07:2d:06:c7:8d:69:25:3c:b8:0a:
e9:9f:43:5e:e1:93:a9:c7:6a:e9:0d:c5:35:f1:ad:0a:f8:45:
f1:cd:af:59:3c:73:95:ea:47:cc:a1:3c:34:0e:95:54:b8:72:
c2:e2:78:87:de:8a:e0:98:ae:4c:56:82:6a:6f:5b:a2:4a:1d:
05:56:50:ea:e7:c4:75:a6:50:42:52:b6:68:38:ed:6c:4e:1a:
b4:14:60:b4:9d:0d:25:cf:80:19:05:1a:90:c3:b8:b3:ce:9a:
2d:9b:6e:da:27:64:3d:06:0b:f5:86:8c:fc:9c:fa:3c:3b:27:
30:e7:fb:2a:6f:ce:a7:1c:1b:d2:ad:e9:9e:73:e8:65:a7:b7:
33:a6:ad:aa:d6:c3:64:80:d8:ea:8e:b0:fe:d9:dd:52:1b:40:
e4:8c:24:a3:96:3b:84:6d:e8:e2:f6:a1:90:52:4f:3f:40:d5:
12:9c:21:c4:58:74:95:ca:80:71:fe:86:ad:85:14:43:6a:b4:
51:1a:a9:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxoF/DrKbkI6IuKUTuHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj
Zjk2Y2EwHhcNMjYwMzAxMTkwMTQwWhcNMjYwMzAyMTkwMTQwWjAzMTEwLwYDVQQD
Eyg1OTMwMTIzYjc4YjQ4ZmVjZTBiYTg1YWI4M2FhZjljNWE4ZDAyOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UW6FCJ3hR4ET9o/UTjACVxKujjd
ccoFAAIByw1KJQYSKEajmmuQexkNbzlBpFxx+/osvLWdzlqNQPs5pY0bY1c5bpB6
bIz8SPqKYIrJLJWFMDcdB4x5+y8s9OaZO+gF5Wshru0bsE/zwGjrYZvKg1f7XPeF
XOeJZfjeikmMEXJYZOW8duE+qmzJA5IzuWdAny+BMfcrYS73jKobErxQuu+V0Urt
K7YBaYT+Mz0baZsmj1e/X84uxXcwq0UfpO9CeMJ97w3IeVo2Q16EKceb8krB/2f1
gzqmgK38yI33uKfHu1ccs7SMsZLuHEsX6P7xtSCgVBKYnRRE1v6m0J3JSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkwEjt4tI/s4LqFq4Oq+cWo0CnpMB8GA1UdIwQY
MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt
MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2
LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDVoQW98
Wb52Ixd+TgkuXgZkSDDB2xMFy+Yqi0UyruPB/SY46soTlSOMUhRU0pC6onBlLGAD
CfGj+pFFcmYHLQbHjWklPLgK6Z9DXuGTqcdq6Q3FNfGtCvhF8c2vWTxzlepHzKE8
NA6VVLhywuJ4h96K4JiuTFaCam9bokodBVZQ6ufEdaZQQlK2aDjtbE4atBRgtJ0N
Jc+AGQUakMO4s86aLZtu2idkPQYL9YaM/Jz6PDsnMOf7Km/Opxwb0q3pnnPoZae3
M6atqtbDZIDY6o6w/tndUhtA5Iwko5Y7hG3o4vahkFJPP0DVEpwhxFh0lcqAcf6G
rYUUQ2q0URqpYw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:46 2026 by rpki-client