Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: R+FLVoeIF619pI+yM3BhrPl1zas23f3pf1qMJKE9TOI=
Subject key identifier: 7B:14:3A:59:57:3A:AC:09:7E:1A:5C:44:8C:26:0D:B6:63:C3:6E:EF
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019E1EA2ABA14B1560F5930E2FB59C5ADB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:00:37 +0000
Manifest this update: Wed 13 May 2026 00:00:37 +0000
Manifest next update: Thu 14 May 2026 00:00:37 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: DgK8ACHUO6P26DEEKLcs1MiB1GKIB1n/+JdtYxKxfMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ab:a1:4b:15:60:f5:93:0e:2f:b5:9c:5a:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: May 13 00:00:37 2026 GMT
Not After : May 14 00:00:37 2026 GMT
Subject: CN=7b143a59573aac097e1a5c448c260db663c36eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:f3:a8:e5:cb:03:6e:16:22:a8:24:e6:4e:
58:6b:be:85:81:c5:f9:b3:ed:2b:7b:06:f9:33:f7:
b0:32:3c:9d:f9:84:3c:c2:eb:b6:c4:09:78:0d:28:
d6:7a:96:13:74:be:b3:91:9c:a3:2e:74:48:a5:be:
45:c7:ec:cd:15:72:20:fa:60:66:14:7c:50:3b:2f:
bf:85:77:7b:e1:e6:17:01:c2:97:50:bb:f9:e1:77:
64:cb:8d:1d:93:d7:16:67:c2:0e:a7:ed:b7:f8:f2:
7e:c1:39:85:e7:3a:b0:aa:9b:d7:56:1d:ea:6d:90:
4c:65:5c:d4:5c:ab:b7:e7:59:b4:8e:13:98:4a:7c:
94:6f:bb:89:79:ae:74:90:e3:46:75:d7:f5:cb:08:
03:93:8b:9c:c4:12:df:7c:0e:17:8d:28:c4:75:14:
b1:59:fc:d5:b2:6e:7b:16:9e:54:d1:8b:31:f6:b1:
77:01:65:c0:4e:02:2f:3a:b8:86:34:68:90:dc:4d:
77:cb:08:24:e2:77:72:de:72:2b:67:99:bb:66:f0:
ab:c2:62:82:f5:dc:4a:e7:71:c1:99:aa:33:88:76:
30:ec:08:65:56:bf:6d:91:a6:c4:d8:a5:dc:12:86:
bd:e3:a9:b2:ec:63:ab:1b:21:c2:72:44:2b:fb:21:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:14:3A:59:57:3A:AC:09:7E:1A:5C:44:8C:26:0D:B6:63:C3:6E:EF
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:5b:c0:49:59:23:47:c3:27:d2:6b:87:22:9b:98:45:34:
56:2f:b7:86:93:1a:1b:c2:af:3a:45:9f:b2:1c:b9:fb:0f:00:
3e:03:93:8f:d2:6b:a4:de:7a:12:46:69:01:e8:7c:55:78:9d:
46:cf:55:dd:0b:f9:68:28:38:4b:a4:79:3f:30:1a:ef:0a:26:
0b:3d:6b:34:09:7b:e8:d6:10:6f:18:71:4a:b2:2b:30:37:f6:
46:f8:b2:67:fc:84:e2:fd:d1:0b:da:5e:7d:06:66:35:80:c2:
44:ec:ae:e3:77:db:a5:ed:27:ef:cb:2b:7d:06:80:eb:ba:b1:
d5:ac:e1:06:5c:56:e9:03:28:87:f1:9e:3a:31:3c:77:94:1b:
db:80:60:2f:d3:4a:ee:b0:23:87:87:af:32:a8:2d:3e:eb:b5:
98:f5:60:d7:8e:ff:4a:f0:17:4d:46:c0:0c:c6:6d:a2:fc:6d:
d3:66:cf:38:5d:1d:12:e1:08:3d:c6:9a:d8:8c:4b:f0:17:48:
6c:33:6c:ea:d0:17:2a:fa:0e:72:3a:ea:b6:73:38:af:ee:1c:
9f:1c:ac:b2:ec:00:cc:80:04:3e:a9:1d:fb:11:55:b9:8b:af:
e7:53:41:ce:62:2e:97:f4:7f:a9:e3:91:9e:bd:b2:4d:8e:cd:
47:95:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:58 2026 by rpki-client