Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: zNgUcNdRO405mZpAkgyg1tXT0agINgN85v63Ffgu8+Q=
Subject key identifier: CB:D2:76:41:7A:76:7B:A6:72:7D:0B:F1:B5:70:3B:87:43:7A:00:33
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019E2091603F3D631D085E8BD565429FC376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 01D8
Signing time: Wed 13 May 2026 09:00:58 +0000
Manifest this update: Wed 13 May 2026 09:00:58 +0000
Manifest next update: Thu 14 May 2026 09:00:58 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: scG3bpI5G3k1kxtxH52QCBkxKqYMRKQKVWVTSFjLKDY=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:60:3f:3d:63:1d:08:5e:8b:d5:65:42:9f:c3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: May 13 09:00:58 2026 GMT
Not After : May 14 09:00:58 2026 GMT
Subject: CN=cbd276417a767ba6727d0bf1b5703b87437a0033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:dc:8d:fe:cd:78:c0:8c:07:d5:5d:56:f1:
a6:15:00:f9:61:b3:88:b5:32:37:a8:e0:d7:3a:b3:
1b:f2:d6:82:de:75:a9:2f:e9:6b:2e:6f:35:f5:e0:
3f:7f:2e:08:85:3b:33:35:c9:19:7c:83:14:7e:32:
4d:8d:07:cb:1a:07:04:d1:72:35:84:b3:b8:f3:04:
e5:c4:65:bd:8d:13:f6:fa:59:ac:65:52:69:9d:e7:
4e:e8:ad:d9:f4:1e:6f:19:a0:65:9f:d7:71:06:f6:
e3:84:c5:73:86:97:0c:2a:25:74:21:31:24:30:63:
8b:65:63:97:92:c3:3b:be:63:62:e3:de:46:91:02:
c5:00:d8:77:38:41:b3:26:47:78:04:0f:93:9d:79:
87:62:b9:d7:79:50:c9:29:39:1d:79:6f:a0:08:9f:
92:f4:da:4f:02:a4:d6:6f:00:d3:9a:40:78:4e:1d:
c9:9a:8e:f5:59:b5:b9:34:d4:17:a1:59:0b:19:b6:
42:81:6f:80:95:5a:05:bf:a8:4d:f4:b2:8b:30:18:
55:5d:df:25:8b:4c:b2:25:1f:07:93:58:dd:76:a2:
ee:58:9a:16:9c:af:38:d1:3a:74:fe:3a:8f:5f:6e:
9c:79:82:6d:21:2f:08:64:3d:d2:62:9b:74:ab:3e:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:76:41:7A:76:7B:A6:72:7D:0B:F1:B5:70:3B:87:43:7A:00:33
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:72:03:91:1f:99:d5:65:db:c4:05:8f:04:1a:2a:26:ee:
ad:09:27:c8:7d:ef:d7:1e:91:d1:11:b7:e4:4f:8c:e2:7b:58:
a9:ad:c7:17:31:f0:64:f6:e3:0b:06:ea:b1:1e:6c:38:34:7d:
c0:cc:3f:73:ce:01:f1:15:df:a6:b7:29:ff:8f:33:75:02:4b:
16:5c:ec:57:7f:49:3e:28:9e:48:9d:6f:b5:ed:b3:fe:4a:08:
6d:8a:e7:ec:bd:a0:14:c4:3b:15:d2:cc:97:62:f8:a8:3b:fa:
74:15:31:65:0b:0c:09:e7:9c:22:fc:8b:0e:e4:b4:09:30:8b:
a0:ff:45:1e:9d:a1:12:c7:15:3b:f6:2c:a2:ba:e0:06:06:0a:
d8:f4:e9:4d:2f:8d:be:5d:c8:95:e4:e6:f4:58:63:e0:4a:45:
cf:2a:36:db:69:ec:bd:cb:e4:7f:d4:5c:2b:9c:1d:3f:71:5e:
e4:82:19:a2:03:42:33:1f:4f:66:e2:ae:4c:e7:96:c1:fd:ca:
b2:3d:11:73:e8:5b:12:64:de:38:76:bc:ac:e3:ac:1e:5e:97:
19:fd:e1:e6:5b:72:06:59:69:b5:5b:81:53:af:f0:46:68:a2:
c3:b6:af:37:62:93:31:b9:63:e5:36:7a:00:0d:42:85:cc:a5:
a8:d1:1d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkWA/PWMdCF6L1WVCn8N2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx
NzFiZTMwHhcNMjYwNTEzMDkwMDU4WhcNMjYwNTE0MDkwMDU4WjAzMTEwLwYDVQQD
EyhjYmQyNzY0MTdhNzY3YmE2NzI3ZDBiZjFiNTcwM2I4NzQzN2EwMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJfcjf7NeMCMB9VdVvGmFQD5YbOI
tTI3qODXOrMb8taC3nWpL+lrLm819eA/fy4IhTszNckZfIMUfjJNjQfLGgcE0XI1
hLO48wTlxGW9jRP2+lmsZVJpnedO6K3Z9B5vGaBln9dxBvbjhMVzhpcMKiV0ITEk
MGOLZWOXksM7vmNi495GkQLFANh3OEGzJkd4BA+TnXmHYrnXeVDJKTkdeW+gCJ+S
9NpPAqTWbwDTmkB4Th3Jmo71WbW5NNQXoVkLGbZCgW+AlVoFv6hN9LKLMBhVXd8l
i0yyJR8Hk1jddqLuWJoWnK840Tp0/jqPX26ceYJtIS8IZD3SYpt0qz6oSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvSdkF6dnumcn0L8bVwO4dDegAzMB8GA1UdIwQY
MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt
OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk
LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdByA5Ef
mdVl28QFjwQaKiburQknyH3v1x6R0RG35E+M4ntYqa3HFzHwZPbjCwbqsR5sODR9
wMw/c84B8RXfprcp/48zdQJLFlzsV39JPiieSJ1vte2z/koIbYrn7L2gFMQ7FdLM
l2L4qDv6dBUxZQsMCeecIvyLDuS0CTCLoP9FHp2hEscVO/YsorrgBgYK2PTpTS+N
vl3IleTm9Fhj4EpFzyo222nsvcvkf9RcK5wdP3Fe5IIZogNCMx9PZuKuTOeWwf3K
sj0Rc+hbEmTeOHa8rOOsHl6XGf3h5ltyBllptVuBU6/wRmiiw7avN2KTMblj5TZ6
AA1ChcylqNEdcw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:56 2026 by rpki-client