Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: D/V9t0TMWg11vhxUPD3+yzpSNXGaGZyGDuMUWlJWLqg=
Subject key identifier: 06:EB:AD:21:42:2A:EC:54:E2:E3:D7:70:F8:D5:6B:CB:57:EA:A2:18
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019DA4F95302E7B106DC70A669982040AFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0198
Signing time: Sun 19 Apr 2026 09:01:36 +0000
Manifest this update: Sun 19 Apr 2026 09:01:36 +0000
Manifest next update: Mon 20 Apr 2026 09:01:36 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: 16uJyqp20d75IoEfp/+tQ4Pp35EyxUpzRi7teTDMh2U=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:53:02:e7:b1:06:dc:70:a6:69:98:20:40:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Apr 19 09:01:36 2026 GMT
Not After : Apr 20 09:01:36 2026 GMT
Subject: CN=06ebad21422aec54e2e3d770f8d56bcb57eaa218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:44:e7:89:37:76:ac:50:c1:db:ba:0c:f3:
5b:a7:f6:7e:5a:61:7f:08:d2:88:76:9c:0d:72:be:
fd:6d:b7:dc:df:ea:44:d7:cb:17:78:a1:e3:e9:61:
fb:79:2f:5b:ca:df:ab:ef:69:28:20:b5:c8:4c:72:
d1:b4:d7:00:77:0f:9a:b5:4b:80:4a:bb:75:0a:67:
f2:c7:bf:40:21:1e:a0:28:6f:fc:f8:c1:77:02:bb:
38:65:a6:42:d4:50:62:dc:c4:22:e6:d2:2b:96:d7:
41:00:f2:d6:91:ee:dd:53:66:e9:be:f2:ca:82:95:
2d:8c:c6:10:5b:5c:c2:60:d1:41:e8:de:61:73:2e:
3e:e7:4e:0a:d4:2c:76:8e:81:04:fd:6b:44:49:6e:
4d:aa:e5:41:44:df:8a:54:a9:bd:b1:7f:f4:9b:a0:
f7:dc:ec:aa:bf:f3:58:33:2e:07:ea:50:e0:27:2d:
e7:8e:df:76:aa:44:68:4c:42:be:4d:bf:a4:ef:5e:
19:28:18:3b:b0:a3:cb:27:5f:01:93:6f:91:e0:48:
b3:bf:d3:02:99:9d:be:ff:b4:f3:63:69:27:d9:2e:
89:98:89:b0:0c:42:d6:0c:ce:0a:93:6d:6d:f6:77:
4a:49:9c:8f:16:96:e6:58:63:6c:d5:c3:aa:3d:dc:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:AD:21:42:2A:EC:54:E2:E3:D7:70:F8:D5:6B:CB:57:EA:A2:18
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:33:40:9c:b5:f7:de:18:93:56:a8:96:99:b9:6f:4f:bc:
12:73:d7:46:e4:3e:70:2e:a9:23:4d:26:93:27:ef:77:b2:e8:
78:c8:ac:b4:3a:17:11:3d:8e:8f:54:b3:8b:be:fd:8e:d7:f2:
89:b3:6e:08:d5:c2:de:4c:86:21:e4:d8:61:76:e8:34:28:92:
8a:94:3a:cb:66:e9:e7:5f:4a:0b:b6:69:2b:73:94:a4:23:2e:
b2:28:82:aa:aa:b5:6e:9a:fb:09:23:8a:fd:47:ae:88:70:10:
d4:6e:af:c7:56:3b:08:83:25:32:51:ce:f3:b0:f4:d8:09:d5:
b9:0b:d8:31:bd:99:65:54:d1:0f:f3:5a:1a:f2:c4:23:e6:d2:
9d:be:27:e6:6b:ed:6b:02:8c:e4:7f:45:3c:ec:0e:5b:97:d5:
13:23:86:01:ed:74:05:2c:ec:3e:0c:b1:28:71:57:9d:7c:d3:
fb:97:7c:44:6e:e7:d5:19:06:9d:43:f4:84:aa:0c:e5:c4:00:
36:4c:ea:f1:d4:88:47:90:b5:79:fb:3d:73:37:c3:bc:76:0b:
9d:b6:54:e4:ca:69:b3:6a:cb:43:49:73:6a:a0:98:44:af:18:
e5:fa:3c:b1:f1:d5:73:30:75:e5:e3:69:f7:60:87:15:dc:d5:
26:1b:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:07:59 2026 by rpki-client