Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: /M3zhuzeIeFqNO1ZKlT7DgHbpNI8aQJZ/PjIlKdQFx4=
Subject key identifier: 53:69:49:F3:8A:71:71:68:66:C4:E1:0B:6F:BB:FF:57:1F:19:3F:7A
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019EC2C9C17CC7E728B1B5E8D68D54D4118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 022C
Signing time: Sat 13 Jun 2026 21:01:02 +0000
Manifest this update: Sat 13 Jun 2026 21:01:02 +0000
Manifest next update: Sun 14 Jun 2026 21:01:02 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: 5IczLBQObMCdwmfuc5QuNJ/s78V9u8P3m2NX/ys4M2I=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:c1:7c:c7:e7:28:b1:b5:e8:d6:8d:54:d4:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Jun 13 21:01:02 2026 GMT
Not After : Jun 14 21:01:02 2026 GMT
Subject: CN=536949f38a71716866c4e10b6fbbff571f193f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:2b:2a:55:34:65:33:f9:15:79:d3:d7:db:
e9:eb:a0:b4:45:5a:5a:42:90:c1:ab:12:8a:bb:19:
39:a4:88:28:99:9b:b5:dc:02:b0:9a:51:d9:a3:49:
27:5e:cc:1e:b5:80:b0:b6:32:78:0c:3a:08:6e:55:
ca:79:89:0b:0f:8f:84:fd:e7:de:dd:a6:ee:b1:a0:
9e:96:3c:fc:3c:0c:84:be:38:c4:a6:94:11:da:ef:
4b:51:4f:77:f2:25:34:92:f9:24:f4:74:ef:33:2f:
96:dc:5c:ea:07:e4:ba:86:57:c9:42:67:b8:7a:35:
6e:0d:4c:19:21:f4:3d:6f:61:90:39:e8:ff:8a:a3:
05:e3:c4:86:d8:88:1d:82:f8:63:e7:76:8e:1e:e8:
90:1c:03:5e:0f:34:a1:94:e6:6e:be:b7:b1:b1:09:
a9:af:ed:a9:6f:c1:bb:e5:8e:b9:01:f0:09:e8:64:
fd:7f:70:3e:96:8c:95:79:cd:e2:34:5a:1e:02:fc:
e0:3a:31:6e:86:91:85:94:05:b7:3c:c3:c8:de:7e:
88:0f:19:e9:f0:c1:fa:b3:5a:6e:54:ee:41:fc:55:
37:f1:c7:29:cc:02:99:e5:91:c9:6c:46:da:df:a4:
28:e2:e8:ec:3c:5c:02:fa:3c:b5:13:c5:b2:32:b0:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:49:F3:8A:71:71:68:66:C4:E1:0B:6F:BB:FF:57:1F:19:3F:7A
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0a:4f:e9:cb:5a:d1:a9:99:60:61:13:8e:d2:0c:d1:90:2d:
ee:6c:e7:40:72:3c:3a:58:d8:1c:29:9c:f7:cd:b3:ae:e0:c0:
83:8c:28:74:28:73:78:b2:4c:58:bd:60:18:73:00:88:dc:34:
4f:88:52:73:4b:97:a0:b3:9c:64:24:82:4b:23:e2:dd:3e:15:
38:6f:f7:a1:12:10:fd:42:94:77:9b:d7:e4:ea:9b:46:eb:b9:
a1:d2:12:f4:ed:a4:a3:7a:ed:a3:d0:62:53:e1:d7:9e:d8:ae:
60:be:1b:c9:d0:6e:91:e9:80:54:c4:66:07:ae:4b:f3:7c:2e:
c7:d0:cd:c1:ec:bf:68:ac:1c:04:86:ef:f8:29:2a:ca:20:fb:
0e:14:ea:96:14:40:70:1d:6a:7b:83:19:68:e1:aa:bb:46:f6:
72:be:fa:cf:73:dc:ad:53:c3:4c:61:64:c7:5c:30:50:c9:e4:
da:09:9c:2c:a3:d6:00:86:10:7e:a5:4b:ad:a9:cf:18:c9:05:
30:79:37:1b:bf:c9:58:57:9d:11:64:52:de:f1:86:f8:86:1d:
3d:91:f9:9e:76:90:ea:c6:c1:10:31:4d:f8:3e:31:da:6e:51:
3e:12:8f:0a:4e:36:b0:8b:92:03:29:28:92:a8:e2:d3:37:78:
f9:aa:a9:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CycF8x+cosbXo1o1U1BGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx
NzFiZTMwHhcNMjYwNjEzMjEwMTAyWhcNMjYwNjE0MjEwMTAyWjAzMTEwLwYDVQQD
Eyg1MzY5NDlmMzhhNzE3MTY4NjZjNGUxMGI2ZmJiZmY1NzFmMTkzZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvIrKlU0ZTP5FXnT19vp66C0RVpa
QpDBqxKKuxk5pIgomZu13AKwmlHZo0knXswetYCwtjJ4DDoIblXKeYkLD4+E/efe
3abusaCeljz8PAyEvjjEppQR2u9LUU938iU0kvkk9HTvMy+W3FzqB+S6hlfJQme4
ejVuDUwZIfQ9b2GQOej/iqMF48SG2Igdgvhj53aOHuiQHANeDzShlOZuvrexsQmp
r+2pb8G75Y65AfAJ6GT9f3A+loyVec3iNFoeAvzgOjFuhpGFlAW3PMPI3n6IDxnp
8MH6s1puVO5B/FU38ccpzAKZ5ZHJbEba36Qo4ujsPFwC+jy1E8WyMrBoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNpSfOKcXFoZsThC2+7/1cfGT96MB8GA1UdIwQY
MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt
OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk
LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwApP6cta
0amZYGETjtIM0ZAt7mznQHI8OljYHCmc982zruDAg4wodChzeLJMWL1gGHMAiNw0
T4hSc0uXoLOcZCSCSyPi3T4VOG/3oRIQ/UKUd5vX5OqbRuu5odIS9O2ko3rto9Bi
U+HXntiuYL4bydBukemAVMRmB65L83wux9DNwey/aKwcBIbv+CkqyiD7DhTqlhRA
cB1qe4MZaOGqu0b2cr76z3PcrVPDTGFkx1wwUMnk2gmcLKPWAIYQfqVLranPGMkF
MHk3G7/JWFedEWRS3vGG+IYdPZH5nnaQ6sbBEDFN+D4x2m5RPhKPCk42sIuSAyko
kqji0zd4+aqp1A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:28 2026 by rpki-client