Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File: pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier: kqMI+Pm9czm/2Amrxo6wbNLlMOQZwx3C+MToHL8BnIU=
Subject key identifier: 9F:F7:85:9B:CA:E1:60:63:87:6F:EB:EC:F2:43:21:FA:4C:33:3B:09
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 01A0D3F064C13A26586F4EBD0D8DAE04B281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:22 +0000
Manifest this update: Thu 24 Sep 2026 15:02:22 +0000
Manifest next update: Fri 25 Sep 2026 15:02:22 +0000
Files and hashes: 1: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: t+8+UBTO6ScIt6KNHGSvsyMfWp9spbfTVEkRNAsdGVQ=)
2: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (hash: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:64:c1:3a:26:58:6f:4e:bd:0d:8d:ae:04:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Sep 24 15:02:22 2026 GMT
Not After : Sep 25 15:02:22 2026 GMT
Subject: CN=9ff7859bcae16063876febecf24321fa4c333b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:38:a8:ad:a7:d5:fc:2d:94:a4:4d:0b:52:
2f:77:72:f9:7c:5a:82:d9:77:19:a0:96:ee:fc:e9:
e1:ca:a0:18:13:f0:00:3c:47:57:96:d8:4e:a6:5a:
7a:a1:92:4d:b2:d8:1f:25:c7:84:9e:c7:6d:3b:db:
6a:78:ff:cc:d1:51:14:0f:7e:02:7d:36:eb:89:da:
c3:5e:78:f1:b7:25:0c:b9:95:42:16:8c:4f:49:ba:
a8:1f:92:2b:c0:df:f9:da:8c:5d:d6:25:ba:46:25:
59:05:b8:41:3d:ba:43:b4:08:2f:e3:4f:da:04:62:
78:f1:65:67:ba:b2:2c:96:37:e3:9c:56:e7:6c:81:
be:90:86:3a:56:60:12:5a:19:40:52:0e:61:be:7e:
9f:85:9c:6a:c7:06:11:28:59:a0:79:9d:13:b6:53:
b9:87:18:ca:72:fa:d2:f2:87:19:c1:85:df:67:c4:
71:49:19:19:39:6f:f8:3d:96:01:1a:1a:9b:63:62:
b4:17:e1:d3:db:8f:dc:58:b1:0d:31:7c:98:9a:8f:
57:01:dc:b6:89:0b:2f:3c:99:85:b7:9b:89:57:d1:
22:70:24:da:c8:8e:3c:b5:78:d2:d8:66:ce:ae:46:
56:09:9c:5f:b0:cb:33:bd:bf:22:10:65:93:fc:68:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:85:9B:CA:E1:60:63:87:6F:EB:EC:F2:43:21:FA:4C:33:3B:09
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:d9:8d:d4:e5:1c:a1:c1:c9:32:1e:2d:42:4f:d8:b4:76:
76:af:dd:6c:0b:25:09:95:d4:53:90:b6:b5:45:4e:eb:ab:3e:
62:4d:7c:f7:26:2a:b7:08:4e:63:0b:bb:f7:f3:2d:f2:df:ef:
46:0f:bf:3d:f9:16:50:9b:4a:95:c9:4d:ab:a5:94:7a:76:67:
26:10:98:5a:b6:96:38:c3:19:b3:b3:7a:ea:fb:f4:cf:d6:ff:
69:e2:9d:98:58:15:f3:24:67:29:b3:aa:55:c5:47:f0:6e:3d:
42:63:f4:ab:00:8a:79:5b:9f:47:0e:9d:89:77:24:ba:b1:f2:
4c:8a:c4:b0:b6:1e:50:71:58:42:99:e1:60:e6:56:b9:06:37:
29:39:aa:f9:b1:b9:28:8b:7c:ee:11:97:00:2c:bf:c7:8a:82:
3a:cf:42:af:ae:02:33:77:c3:63:17:6d:d3:c2:55:39:a8:97:
f3:83:6d:ce:11:50:14:db:07:be:19:70:58:19:38:04:be:2b:
d2:14:73:ae:ed:51:8a:c4:77:1f:ad:f7:95:52:fd:f2:26:13:
fe:d2:17:98:47:63:94:2c:39:31:4a:2c:5d:06:4f:f1:3f:3c:
30:a0:59:6f:e9:f2:54:fe:a0:4a:3b:2e:5b:cc:91:90:69:fc:
a0:1c:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:15:33 2026 by rpki-client