Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: YN+/sozoh3WVmaFZnOCN2aCXexSqBTtdAPSDzL4FMaY=
Subject key identifier: 4D:17:5D:13:B2:DF:A8:63:80:8F:0D:13:A4:5D:35:6B:93:2D:D0:8D
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019D27727E69EB35CED93B58F19ED6AB3E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: 19o425avIHn2PYW03Wr/aH9AQgZljWShA373CCxy0k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7e:69:eb:35:ce:d9:3b:58:f1:9e:d6:ab:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=4d175d13b2dfa863808f0d13a45d356b932dd08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:32:0f:5a:91:f0:83:7c:97:a5:00:46:c9:
17:da:50:38:92:a3:c3:f7:75:3f:86:cd:6f:00:f5:
43:eb:e3:7f:da:a9:b8:3d:e6:92:1d:ba:51:e3:cc:
ba:fd:0c:3c:65:4d:63:42:1a:b6:fd:df:50:50:21:
3a:de:2b:40:0f:46:df:fa:d3:f2:e8:8f:47:78:0b:
b0:1f:e3:a4:a0:4c:4d:8b:2a:35:c9:bf:be:bd:6d:
42:82:42:a5:de:d9:6a:9f:46:88:47:79:75:63:84:
a1:9b:22:f8:d2:f2:6e:64:56:ab:be:4e:e8:36:71:
75:8f:fb:59:e7:2c:8f:6e:4f:9c:fc:8e:36:69:f3:
15:29:fe:03:fa:59:e5:75:56:9b:d0:5a:dc:99:c7:
70:30:ef:98:42:71:91:4b:ed:45:51:c9:fe:e8:0b:
5f:b7:fb:3b:91:10:bd:8d:68:b7:70:fe:7b:b9:7b:
61:3e:69:4a:74:d0:07:6c:5c:39:83:c0:0f:b1:4c:
82:97:be:10:6f:ec:a4:2b:67:36:86:81:ce:b9:51:
78:8c:19:65:e6:c9:03:cb:95:a7:22:d8:3a:ea:7c:
a1:a1:5a:c8:c9:9c:99:d7:e0:d5:22:ed:11:bd:0a:
17:06:7c:ad:41:84:17:c0:34:bc:7c:7f:d3:83:ba:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:5D:13:B2:DF:A8:63:80:8F:0D:13:A4:5D:35:6B:93:2D:D0:8D
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:db:cf:ef:80:e9:91:75:95:67:cf:67:99:c6:53:2e:b2:f0:
3f:07:c6:ee:b8:56:28:82:ac:86:7c:f9:dc:87:90:55:14:dc:
11:4b:5f:a9:37:59:4b:8b:13:e2:66:99:36:ae:66:90:be:30:
04:13:2b:ed:76:ba:f4:4f:74:e0:fc:ca:fe:2d:0a:3b:b6:b3:
cf:1e:a6:78:a4:68:ae:72:52:2a:25:0a:fd:e2:40:13:f2:7d:
87:cc:1e:71:8b:f6:d4:dd:bb:47:43:cd:b5:f1:2f:f2:e2:a1:
ac:d1:8a:ef:72:cf:bd:6f:bf:f0:ef:7e:7e:ad:7a:8c:e2:5a:
1c:97:e8:5d:e1:69:53:e4:7f:8f:b4:6d:3a:d2:b7:43:35:8c:
54:3c:5d:56:df:cf:30:b0:30:71:05:b4:91:b7:3b:56:b5:d6:
41:0c:a5:4e:ac:05:18:a2:75:81:c0:e4:1c:c2:a3:3b:6b:e5:
8e:bb:94:50:54:9d:ff:9d:bc:0e:f7:a8:ff:32:42:8a:21:69:
9f:6d:64:66:8f:c6:a4:ea:b4:7f:ac:8e:92:f8:a4:e2:92:0f:
bb:a5:39:c1:8b:0e:b4:f1:63:b0:a3:4f:be:3f:4e:09:4d:e5:
ad:99:ea:25:69:3e:77:91:a8:83:ca:08:02:a8:cc:34:01:44:
a2:dc:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:16 2026 by rpki-client