Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier: JUESv0Rivp0yufbOEovsqo+PMdXkyLB1kL23GPF3Qs4=
Subject key identifier: D8:12:76:B7:F2:CC:40:6A:A4:3B:91:C7:D5:BF:5F:B4:12:A2:F5:8B
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019E1EA2FD23D503CB3FCC1BCDFE731877F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number: 018C
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: E9Axs/5owtvehGx8FWDXaWm97vdWNQNfpBUwE9LB7r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fd:23:d5:03:cb:3f:cc:1b:cd:fe:73:18:77:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=d81276b7f2cc406aa43b91c7d5bf5fb412a2f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:fc:4e:fe:bc:b9:39:8c:93:20:aa:36:f7:
0e:7f:ea:60:ff:2a:8d:a9:b3:f3:18:8e:2a:af:c8:
4a:78:eb:59:32:30:91:98:c0:7f:06:ab:eb:2b:96:
3e:ae:3f:e4:1f:42:12:63:24:58:e5:f2:2d:91:12:
ec:f5:3f:66:79:36:22:77:8c:49:02:e6:91:a2:e2:
ea:4a:8c:d1:05:0f:7b:49:05:77:ba:80:0f:6a:ce:
0c:2d:45:c2:95:33:1d:0f:8a:84:ac:84:ab:31:e8:
23:aa:14:78:e9:ac:9c:f8:58:13:29:12:09:5a:da:
cb:8f:90:06:e4:7f:40:f1:83:1d:74:a0:c1:d4:6c:
83:5e:46:0f:b3:28:f0:11:ea:2a:46:25:b1:f4:b5:
d8:fc:d0:eb:50:d7:8e:76:07:86:7c:bf:a1:21:1a:
88:77:a1:86:cf:de:76:cd:70:74:7d:21:c5:b4:93:
ae:33:10:2c:4d:db:df:e6:4b:c3:e4:cd:8e:3a:73:
26:04:2e:c0:fb:3b:fc:39:b7:37:2e:ca:34:91:ea:
38:e0:4b:6c:08:f3:02:6d:69:32:ad:5c:e3:cd:be:
c1:41:ac:21:04:84:73:9b:24:eb:db:8a:7b:8e:b0:
31:cc:da:13:e8:77:c9:6f:99:c6:6e:54:05:ab:f1:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:76:B7:F2:CC:40:6A:A4:3B:91:C7:D5:BF:5F:B4:12:A2:F5:8B
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c1:36:3f:db:52:55:50:64:c6:49:dc:d7:63:3d:6d:1c:31:
c0:82:9d:ed:a5:66:d0:2f:f4:e2:39:ca:48:8e:34:c9:95:d1:
97:d9:ee:3d:c9:88:92:17:26:4e:81:2b:1c:b1:0c:9b:09:fe:
9f:5a:47:45:ab:f3:d8:b1:58:86:5a:50:eb:66:45:1c:92:db:
d3:ca:0a:7f:18:08:24:5c:1d:ad:a4:7e:d8:43:cc:72:fd:9d:
bd:e7:7a:57:c2:47:dc:8f:c6:d2:f4:4f:1c:72:0b:b8:7c:1c:
33:5e:17:df:54:34:36:5a:6e:96:5f:b1:c8:2a:60:bf:55:65:
ca:5f:ef:ea:f7:3f:68:e5:ce:c3:36:77:a3:36:97:d8:db:64:
52:0e:40:b3:ce:e0:06:65:5f:ab:21:cd:0c:55:ff:46:11:b1:
01:34:63:0c:13:ad:38:56:1d:06:76:13:b8:be:a6:dc:8b:85:
67:02:cb:53:33:31:9c:72:e2:3a:c7:72:5f:db:3b:2d:37:1a:
62:a8:bc:cf:f0:54:7d:8f:bd:9b:81:6c:b7:13:d0:3a:ee:fa:
c6:bd:6f:70:82:f1:c9:db:29:97:f9:99:e8:3e:5a:60:78:d5:
a5:a6:62:d9:ba:68:19:58:a8:0d:93:a9:fa:db:3a:c2:3e:8e:
df:19:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:22 2026 by rpki-client