Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: Gmtab1LdoPU78XWDMSIwApLarQYLVaUbqAbqqF36Ev4=
Subject key identifier: 2A:75:6D:E2:28:EE:4F:6C:A9:4B:3A:E6:F5:9C:22:98:A1:C8:D7:AE
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019D265FA680C2B7E730FDBC1D6A8245958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0B29
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: ii3qpK3zhpqn90lBPLqUwXbZSM1NWB/iWOHv7dG129w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a6:80:c2:b7:e7:30:fd:bc:1d:6a:82:45:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=2a756de228ee4f6ca94b3ae6f59c2298a1c8d7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:cb:10:8b:00:23:57:1b:09:fe:bc:27:cb:
8e:fd:28:8e:a8:26:64:61:b4:e8:d2:3d:85:72:9d:
61:d8:fd:f5:97:a5:41:e7:72:83:96:b0:e4:77:93:
95:6d:4e:f5:be:93:25:5d:12:4a:d7:e3:00:76:66:
dd:71:6b:0a:74:d3:92:62:93:66:db:8c:5d:93:0d:
56:c0:f3:9c:72:e6:18:85:fc:25:c5:71:df:0d:59:
d0:05:2f:1d:b6:4f:c5:4c:cb:34:d2:b7:9d:36:cb:
81:13:25:a8:8f:83:4f:aa:61:ad:0b:b1:9d:82:49:
51:dc:10:4c:2f:f3:25:c5:e7:29:a9:4e:28:e8:e4:
7b:bf:bb:61:56:2b:b9:32:83:70:24:f1:36:68:f0:
e4:77:ff:bb:23:bb:5c:7b:f2:e1:66:17:c5:23:25:
51:a4:27:4e:a6:59:43:7c:d7:b2:39:8d:5f:db:95:
c3:dd:7a:55:64:59:a0:2d:9b:c2:dd:1d:c0:0c:fa:
b0:a7:b6:4f:8a:34:6c:b1:be:61:5d:97:52:ce:88:
d2:c1:23:73:f9:57:e2:d9:72:46:6b:e5:b9:0c:42:
7f:1a:17:10:0e:b2:3e:4e:30:18:82:9b:cc:f9:95:
2f:03:b2:fb:c6:31:24:ff:20:c5:a6:6f:8e:eb:3a:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:6D:E2:28:EE:4F:6C:A9:4B:3A:E6:F5:9C:22:98:A1:C8:D7:AE
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4f:11:ce:c3:b0:0c:d4:20:c8:81:5c:71:59:48:da:61:62:
d1:f9:a5:f0:c7:69:59:73:15:ae:f5:83:8d:9c:ab:e2:48:4e:
3b:a8:88:1f:78:7b:ca:9d:48:35:0b:1f:aa:e6:64:85:e5:fb:
44:d9:28:6c:b2:44:aa:2e:e1:ee:a6:d9:e2:2d:98:9c:1e:45:
44:55:f8:d1:b4:c5:41:45:21:eb:51:93:a4:53:82:a6:23:40:
76:63:c2:96:92:60:03:97:94:72:b7:53:2f:f2:86:f1:83:32:
26:40:0f:f3:07:3b:8c:52:09:58:0c:ee:ed:3f:bb:30:21:16:
84:1d:6a:76:a9:06:1a:f3:57:b2:c4:ea:88:8b:a9:28:1d:84:
63:01:e6:bd:62:14:42:d1:fa:05:f1:35:ca:88:cd:36:39:f1:
26:85:61:ab:af:56:db:26:c1:c0:fb:ed:e1:0e:c3:19:ac:52:
2d:09:52:2c:12:9c:01:31:99:c6:d7:ba:90:8f:ca:6b:b5:83:
34:16:ca:f2:a5:d0:4d:ed:43:7f:c4:18:6d:65:25:14:8c:d4:
5f:dc:cb:51:74:92:fd:18:bd:01:8b:0b:2c:37:0f:1a:ab:58:
34:eb:5b:35:cf:f1:be:07:8a:87:77:26:11:fa:8d:90:1c:fc:
d8:23:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:11 2026 by rpki-client