Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: WyM5fbk/6MvOWfbO9NPMZe+7Xl/BcpkxiYF+uxAb0KU=
Subject key identifier: 13:6A:F6:08:EE:D9:1B:57:55:DA:47:8C:E0:7D:51:53:56:0F:D8:83
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 019D26966584346395378A20AD7307BCDD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 20:01:23 +0000
Manifest this update: Wed 25 Mar 2026 20:01:23 +0000
Manifest next update: Thu 26 Mar 2026 20:01:23 +0000
Files and hashes: 1: 7bhssnFALKXf6vwJgxr6iyB1j-E.roa (hash: Mq+fb+f7dnR1wdSCKsUAoyChLnoaaSkxAWMCvhi3v8s=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: T6q0XSfdHUWhOol7Z2Wpq+ZAdRqnB11Xk0h24MnJwzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:65:84:34:63:95:37:8a:20:ad:73:07:bc:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Mar 25 20:01:23 2026 GMT
Not After : Mar 26 20:01:23 2026 GMT
Subject: CN=136af608eed91b5755da478ce07d5153560fd883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:75:92:46:70:10:7d:38:d0:a4:5e:84:69:
c5:b3:db:7a:a4:97:d0:49:b5:1a:40:8c:de:98:9f:
a5:b4:bb:d4:bf:16:4f:aa:8d:95:97:5d:85:66:82:
84:e4:28:6a:ab:50:b5:0c:02:c9:a2:23:09:07:fd:
55:1d:c4:75:5d:3a:58:aa:e2:79:a3:2e:69:f9:80:
62:7f:71:5d:e3:4a:98:c7:7d:49:29:59:ec:c5:69:
1d:66:de:df:99:5d:fe:42:75:9d:ba:d2:30:c4:64:
3b:02:68:3f:79:d2:9b:7f:66:1e:28:ef:b6:68:29:
22:c8:20:88:2b:9c:0e:4b:e3:4d:72:83:3f:de:38:
24:fe:d1:3f:d5:09:35:15:71:30:d5:57:ab:c9:7a:
60:f8:9d:8b:9b:b5:9b:aa:09:b8:b3:8e:42:10:4f:
cc:cd:e2:dc:f3:1d:f1:40:dd:1c:e1:65:5a:9d:a7:
b9:7e:48:6c:ab:16:d8:8d:27:19:f5:1b:0c:fd:62:
18:90:d3:f0:00:a3:92:8c:f8:f5:32:f0:59:36:39:
b1:19:83:24:7c:a5:16:d0:12:f6:f8:1e:ee:e8:6f:
d5:2a:bb:7c:25:6d:8a:87:16:c4:76:a7:89:8b:e7:
da:98:33:b9:7a:c9:03:75:5d:85:f0:a4:f3:6b:60:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:F6:08:EE:D9:1B:57:55:DA:47:8C:E0:7D:51:53:56:0F:D8:83
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:f7:61:83:0e:71:0c:5a:1d:c3:ab:3f:93:d1:b7:f9:60:
ca:70:27:99:6a:64:57:34:d6:e4:d9:d9:6a:9f:b7:92:f6:53:
73:bf:cd:de:9b:73:67:3d:c0:bf:21:a0:e9:a4:4d:bd:a1:2e:
1a:b9:bf:59:ee:26:0c:fd:db:a7:31:84:01:a9:ab:1e:48:d2:
0d:b6:82:5a:47:0b:fd:85:60:82:e2:ec:c2:5d:2f:e4:f6:e2:
23:23:71:e9:75:5d:c3:eb:9e:d0:03:f6:35:89:2f:c8:cd:7c:
5a:12:46:79:6d:fd:7a:16:ea:87:e2:8c:8e:29:64:ac:d7:d1:
a4:cd:49:da:57:2b:fa:d4:ae:2a:93:1d:97:f6:83:56:62:7f:
bd:f8:9e:4e:a8:1e:fb:66:0d:cf:f9:59:6e:03:9f:0c:68:e9:
03:34:c9:d4:11:4a:10:4e:14:93:11:19:84:99:72:9f:8f:34:
a3:cd:cd:19:93:cb:cd:08:c7:87:b4:71:0a:80:e9:72:5f:d8:
84:d9:99:1d:0c:c5:5b:f8:63:ea:06:d1:bb:6b:c7:64:29:93:
83:67:2f:eb:c4:8b:fd:84:78:b1:32:d3:b0:11:bf:81:5f:50:
fd:a0:92:26:7f:26:28:c2:f7:2b:a4:75:d5:37:11:0f:ff:dc:
45:c1:35:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmWENGOVN4ogrXMHvN1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjYwMzI1MjAwMTIzWhcNMjYwMzI2MjAwMTIzWjAzMTEwLwYDVQQD
EygxMzZhZjYwOGVlZDkxYjU3NTVkYTQ3OGNlMDdkNTE1MzU2MGZkODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47J1kkZwEH040KRehGnFs9t6pJfQ
SbUaQIzemJ+ltLvUvxZPqo2Vl12FZoKE5Chqq1C1DALJoiMJB/1VHcR1XTpYquJ5
oy5p+YBif3Fd40qYx31JKVnsxWkdZt7fmV3+QnWdutIwxGQ7Amg/edKbf2YeKO+2
aCkiyCCIK5wOS+NNcoM/3jgk/tE/1Qk1FXEw1VeryXpg+J2Lm7Wbqgm4s45CEE/M
zeLc8x3xQN0c4WVanae5fkhsqxbYjScZ9RsM/WIYkNPwAKOSjPj1MvBZNjmxGYMk
fKUW0BL2+B7u6G/VKrt8JW2KhxbEdqeJi+famDO5eskDdV2F8KTza2A2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNq9gju2RtXVdpHjOB9UVNWD9iDMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3X3YYMO
cQxaHcOrP5PRt/lgynAnmWpkVzTW5NnZap+3kvZTc7/N3ptzZz3AvyGg6aRNvaEu
Grm/We4mDP3bpzGEAamrHkjSDbaCWkcL/YVgguLswl0v5PbiIyNx6XVdw+ue0AP2
NYkvyM18WhJGeW39ehbqh+KMjilkrNfRpM1J2lcr+tSuKpMdl/aDVmJ/vfieTqge
+2YNz/lZbgOfDGjpAzTJ1BFKEE4UkxEZhJlyn480o83NGZPLzQjHh7RxCoDpcl/Y
hNmZHQzFW/hj6gbRu2vHZCmTg2cv68SL/YR4sTLTsBG/gV9Q/aCSJn8mKML3K6R1
1TcRD//cRcE14Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:49 2026 by rpki-client