Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: RCykDTg1ND1S0yaxZ2b5C2e3q2itB4isvx/NSS0p6f0=
Subject key identifier: 00:9C:0B:81:1A:36:74:51:93:A5:FB:7D:81:D9:CD:A9:62:8E:26:12
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019D2961C01EDD06954B6D9D9B11D03D2F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 010D
Signing time: Thu 26 Mar 2026 09:02:45 +0000
Manifest this update: Thu 26 Mar 2026 09:02:45 +0000
Manifest next update: Fri 27 Mar 2026 09:02:45 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: kc4PDqH0dCKDxtJaw3cmy0rngbOEZf8DUDLw9c4r/sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:c0:1e:dd:06:95:4b:6d:9d:9b:11:d0:3d:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Mar 26 09:02:45 2026 GMT
Not After : Mar 27 09:02:45 2026 GMT
Subject: CN=009c0b811a36745193a5fb7d81d9cda9628e2612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:06:ac:cd:22:95:ff:31:b1:17:98:d6:9f:
c9:25:af:b6:e6:0b:9f:22:46:5d:3f:f9:d1:fd:2e:
e0:d0:22:80:cb:4a:a9:2a:7b:9e:fc:ce:a3:02:a9:
36:26:f1:e3:62:3f:db:27:b8:e3:06:b7:ed:64:e8:
5f:4d:6a:77:47:5a:48:56:27:ec:d8:c5:cb:eb:50:
0b:88:7c:1a:8e:47:f5:9b:99:fe:a1:a7:fc:62:7d:
d6:41:47:cd:e9:4a:16:e3:0c:6a:08:bb:95:17:75:
a1:d2:47:85:cb:49:33:ba:92:d3:14:0b:37:80:2a:
1d:4c:08:05:74:f2:5e:b7:cd:ee:b1:00:06:b5:4c:
b2:9b:b4:24:a4:c7:12:02:e7:0e:5b:d9:2e:cd:14:
33:d0:33:ec:69:d1:e5:a9:ae:51:b7:19:38:9b:f1:
5f:be:75:03:96:66:87:5c:27:1e:e7:67:42:78:9a:
22:04:09:77:bb:6b:39:71:d1:b9:d0:d9:67:c0:fd:
e1:15:02:0a:4b:7d:bd:9a:0b:a2:3e:e9:80:2e:7d:
f3:9b:d7:8c:e0:a0:33:96:ed:ba:52:83:21:4f:67:
0a:70:67:99:f5:cc:ee:09:d3:0c:41:30:9e:50:59:
d0:45:a3:cb:56:8e:a9:9a:19:4c:8f:58:e1:05:af:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9C:0B:81:1A:36:74:51:93:A5:FB:7D:81:D9:CD:A9:62:8E:26:12
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:eb:e9:48:cb:f5:0c:25:48:a4:be:c4:18:7e:8e:48:bf:
72:84:8e:5f:87:6e:b9:df:5a:88:77:ff:f5:62:54:86:37:e6:
ec:e7:4b:9b:89:7d:2e:01:e1:f6:c2:4b:cd:0d:aa:69:b8:4f:
c9:70:13:9c:91:48:a3:22:3e:10:44:4b:ba:4a:6f:bf:7d:17:
7a:e7:bf:f0:ad:50:e2:8d:92:af:7e:b5:26:1e:15:41:3e:b8:
ac:f0:97:2d:d9:5c:75:04:3f:61:ff:c3:b7:db:d4:60:56:75:
84:23:44:5f:e4:67:2a:63:5f:a4:03:e4:02:d2:b3:d4:5f:a1:
43:99:9b:f1:ba:94:cf:38:c6:18:e8:93:27:99:e8:e4:37:c2:
a3:b6:6f:73:12:dc:7f:53:2f:05:8d:5b:9c:71:0c:ee:25:69:
91:8c:4b:fb:4e:2b:e1:f6:8c:48:41:0e:2d:c1:28:5d:92:d7:
eb:08:f7:1b:c9:53:0f:ef:21:e8:ff:40:21:46:15:c0:3d:98:
f0:f2:15:a5:c5:30:bb:95:60:04:0f:71:8e:16:67:d8:40:72:
3c:e5:83:82:a0:84:95:11:43:38:2e:61:e5:f0:12:8b:5b:71:
61:68:7f:40:49:1f:77:7a:a3:91:9d:9c:49:1b:2b:b4:30:09:
77:90:a1:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYcAe3QaVS22dmxHQPS8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk0YzQwNDcwYzZkYjk4ODAxZjdiZDA2MGRhYzk0MWU5
ZGQzMTYwHhcNMjYwMzI2MDkwMjQ1WhcNMjYwMzI3MDkwMjQ1WjAzMTEwLwYDVQQD
EygwMDljMGI4MTFhMzY3NDUxOTNhNWZiN2Q4MWQ5Y2RhOTYyOGUyNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuoGrM0ilf8xsReY1p/JJa+25guf
IkZdP/nR/S7g0CKAy0qpKnue/M6jAqk2JvHjYj/bJ7jjBrftZOhfTWp3R1pIVifs
2MXL61ALiHwajkf1m5n+oaf8Yn3WQUfN6UoW4wxqCLuVF3Wh0keFy0kzupLTFAs3
gCodTAgFdPJet83usQAGtUyym7QkpMcSAucOW9kuzRQz0DPsadHlqa5Rtxk4m/Ff
vnUDlmaHXCce52dCeJoiBAl3u2s5cdG50NlnwP3hFQIKS329mguiPumALn3zm9eM
4KAzlu26UoMhT2cKcGeZ9czuCdMMQTCeUFnQRaPLVo6pmhlMj1jhBa9vJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACcC4EaNnRRk6X7fYHZzalijiYSMB8GA1UdIwQY
MBaAFKXZTEBHDG25iAH3vQYNrJQendMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgt
NTY2MzFmZjY3MmQxLzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgtNTY2MzFmZjY3MmQx
LzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMbr6UjL
9QwlSKS+xBh+jki/coSOX4duud9aiHf/9WJUhjfm7OdLm4l9LgHh9sJLzQ2qabhP
yXATnJFIoyI+EERLukpvv30Xeue/8K1Q4o2Sr361Jh4VQT64rPCXLdlcdQQ/Yf/D
t9vUYFZ1hCNEX+RnKmNfpAPkAtKz1F+hQ5mb8bqUzzjGGOiTJ5no5DfCo7ZvcxLc
f1MvBY1bnHEM7iVpkYxL+04r4faMSEEOLcEoXZLX6wj3G8lTD+8h6P9AIUYVwD2Y
8PIVpcUwu5VgBA9xjhZn2EByPOWDgqCElRFDOC5h5fASi1txYWh/QEkfd3qjkZ2c
SRsrtDAJd5Ch0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:36 2026 by rpki-client