Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: 7ZDdHmueSnGastW1KsLYFQD+xgWyygoHFUEV8lxXdxY=
Subject key identifier: 4C:EE:1C:9A:4B:E2:6C:71:AF:E9:E6:0F:1C:D7:35:8C:B6:1F:5D:5C
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 01A1250BCFCE3074ADC2F1A76A3D842E376A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0368
Signing time: Sat 10 Oct 2026 09:01:33 +0000
Manifest this update: Sat 10 Oct 2026 09:01:33 +0000
Manifest next update: Sun 11 Oct 2026 09:01:33 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: ZHkpH5QdubJtnvXOivNZLaCD+q1J5Rop8bE+sQIUCY0=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:cf:ce:30:74:ad:c2:f1:a7:6a:3d:84:2e:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Oct 10 09:01:33 2026 GMT
Not After : Oct 11 09:01:33 2026 GMT
Subject: CN=4cee1c9a4be26c71afe9e60f1cd7358cb61f5d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:d4:ec:4a:39:e3:f9:53:f6:fc:3c:9c:7f:
0d:43:32:6f:ab:1e:78:04:c3:19:b4:1d:88:ef:9b:
80:47:36:8b:3c:60:08:b8:0e:4a:fb:8c:4b:37:58:
cb:86:d4:f1:a7:a3:7f:8e:62:8b:c6:4b:a9:76:ec:
b6:7a:1f:09:39:49:24:37:0d:1f:93:1d:ff:40:af:
21:6c:b8:fe:e5:40:46:3f:4c:fc:42:f0:69:7a:01:
aa:e5:26:86:83:58:b5:7b:bc:ab:ac:12:77:ee:04:
a5:72:5d:37:09:d1:a3:da:07:93:9a:72:28:4d:16:
19:63:f2:00:3a:04:bc:59:32:79:53:f2:9d:2b:5a:
53:bf:a3:2b:61:98:92:5c:8c:75:36:f8:65:4e:77:
a8:18:2d:ef:66:ac:78:c2:9b:c3:af:ba:88:8a:69:
9d:e2:b4:02:16:37:ba:a6:e1:bc:6e:1c:be:0e:3e:
fd:66:b7:62:0a:db:0d:3a:8f:b0:0d:a6:9d:9f:27:
f5:0d:00:0c:d1:e4:a8:0d:d6:d5:29:96:55:a1:c2:
93:7f:13:65:0c:10:47:79:3c:d7:be:db:31:24:e6:
f4:d1:0c:4e:cc:22:c6:4f:14:f5:c7:9e:86:b3:16:
c1:2b:84:73:23:f6:ab:7a:81:2a:a0:bd:a5:32:c6:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:1C:9A:4B:E2:6C:71:AF:E9:E6:0F:1C:D7:35:8C:B6:1F:5D:5C
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:37:23:c8:49:87:fa:da:b1:15:9b:8e:ab:03:c3:a5:97:82:
26:9f:1b:1f:81:8c:60:1d:98:b5:f9:ef:93:a0:81:08:02:c8:
51:e8:0d:ca:b3:c5:62:51:11:e0:3a:1e:0a:7a:4e:83:cc:22:
0d:81:7b:90:61:1f:53:f7:39:95:5e:97:ee:6f:b0:36:91:dd:
4e:fb:45:1f:49:0e:ef:ec:30:e6:ee:b0:cb:46:f3:d7:4d:9a:
2b:45:0a:3d:85:6f:99:41:da:4a:19:9a:66:70:17:01:14:b6:
ae:2f:e6:10:52:62:2d:09:93:0a:4a:ad:4c:4c:87:f7:65:61:
93:30:b4:cd:5f:53:a7:91:94:b3:b0:9e:6a:b4:43:7d:b4:29:
90:f3:bf:f5:f9:0b:12:2a:02:48:61:eb:f7:59:a8:10:6e:fb:
05:18:e4:8d:19:67:01:9c:83:9f:08:cb:bd:ec:11:b4:75:21:
f1:15:55:05:3a:42:9a:c6:e9:6a:2c:18:96:9c:40:fd:58:43:
e3:ac:4f:21:47:c8:96:16:28:10:e3:7a:47:41:b1:56:30:d2:
c1:5d:60:79:14:ce:13:5a:2f:8d:32:07:76:b1:4f:b1:ad:1d:
f7:16:a0:af:16:2e:92:6e:15:bb:74:9b:c8:24:e2:72:46:7b:
4a:e7:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:43:11 2026 by rpki-client