Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: Rf9k/HURE2V7YlZBlJ0QbvojUxKU4V037mpwDIgIsVw=
Subject key identifier: 37:00:C9:B6:FA:33:ED:AF:3B:B4:6D:C9:72:50:42:4A:C4:46:C1:B4
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 01A1DE71413493D7902A7CD08EC54A402995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 09:02:06 +0000
Manifest this update: Sun 15 Nov 2026 09:02:06 +0000
Manifest next update: Mon 16 Nov 2026 09:02:06 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: SPKgg9TGhlCirDSuYHufSMCE3tM36IoXAxiCYKFHMfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:41:34:93:d7:90:2a:7c:d0:8e:c5:4a:40:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Nov 15 09:02:06 2026 GMT
Not After : Nov 16 09:02:06 2026 GMT
Subject: CN=3700c9b6fa33edaf3bb46dc97250424ac446c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:0d:aa:95:6d:02:59:b0:87:0b:ef:36:ee:
a3:7c:5f:93:3f:eb:59:28:cf:61:e4:18:88:7b:dd:
36:26:90:21:ea:a6:c6:6d:1b:1f:d5:91:e3:0a:5f:
6f:84:12:38:28:38:43:59:4c:de:88:4e:d1:a6:53:
d9:e3:c5:82:33:ef:03:c5:29:e5:8b:44:4c:cb:c3:
00:bb:56:92:b8:cc:07:26:85:b2:5f:a5:b2:8e:96:
bf:05:9d:07:9e:8b:fc:62:b3:7b:4a:55:14:ac:a5:
5d:43:9a:e0:98:ea:06:11:0c:eb:a3:ab:ee:eb:41:
6d:ff:cf:13:17:70:02:ae:73:f1:70:20:49:b3:6a:
e5:db:43:cc:be:bc:77:07:57:8e:bd:27:1e:97:96:
4a:83:1e:d2:6e:90:a1:2a:b0:4d:33:88:24:cf:de:
87:ee:9c:15:01:3b:8a:27:ba:f5:59:2f:73:dc:1d:
dc:ac:c3:9f:ad:62:b3:bb:f8:c5:35:68:27:03:a2:
00:31:19:15:9c:0d:bc:be:28:c2:b4:9d:3b:25:ce:
be:da:55:36:ff:6b:d4:2d:f8:86:4a:a8:03:3b:73:
34:6b:c1:3e:f5:b1:e3:e0:b9:86:bb:94:41:ac:e6:
ed:35:ff:86:04:6d:4e:49:15:f9:d5:b9:e8:b3:42:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:C9:B6:FA:33:ED:AF:3B:B4:6D:C9:72:50:42:4A:C4:46:C1:B4
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:ef:ed:ad:4b:fa:bb:e2:ab:26:fa:e1:48:29:26:2b:d1:
41:6c:93:c3:03:07:6d:fa:2f:5c:0e:0b:dc:f3:21:64:31:6e:
8d:c7:29:06:fd:71:97:a3:9c:6f:cf:9b:10:3f:aa:cc:be:ff:
48:9f:aa:32:d8:20:ea:32:b9:e3:44:39:3d:92:85:f5:c1:e6:
0a:10:53:f7:26:ac:09:63:d6:b5:27:9c:84:67:74:78:cf:19:
1d:81:1b:b8:a6:ce:fd:ea:5c:94:dc:56:b8:c3:d4:33:fb:9c:
17:a6:2b:06:58:e1:f2:23:66:b1:e6:0d:c1:fe:0c:30:71:9b:
98:71:20:61:1a:de:8d:7e:da:af:df:07:68:31:4f:bf:81:2f:
47:70:70:35:7c:e5:92:44:95:a8:56:17:92:1d:10:99:19:5f:
90:5d:82:aa:ea:88:0c:cc:f6:d8:1c:3d:d5:9c:b3:7a:7a:d1:
5a:3d:05:f6:7e:25:38:9c:fb:30:22:92:e9:99:ac:2d:58:67:
37:75:fa:88:5e:46:93:86:a2:99:94:19:bc:e3:81:1d:c3:2b:
62:a0:a7:12:de:06:d5:8a:8b:18:79:ca:1a:e6:55:9e:d4:7d:
b8:5f:c3:58:8e:87:03:ef:53:14:db:db:93:11:82:78:ae:d1:
d1:a3:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:17:53 2026 by rpki-client