Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: Z7ZkICX6yHUwVT8/KttXJvPthS69DsOFNtChwl7W8p8=
Subject key identifier: 31:B9:EB:3F:05:4C:B7:DF:25:CE:49:D5:B2:E3:9C:FB:6A:27:59:63
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019F935B40D4D49976E288E2580DEFF054E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0298
Signing time: Fri 24 Jul 2026 09:00:58 +0000
Manifest this update: Fri 24 Jul 2026 09:00:58 +0000
Manifest next update: Sat 25 Jul 2026 09:00:58 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: xRLGcS/z57c9jKrXTEt/ctr1dcffm5WN4rDfT0QuML8=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:40:d4:d4:99:76:e2:88:e2:58:0d:ef:f0:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Jul 24 09:00:58 2026 GMT
Not After : Jul 25 09:00:58 2026 GMT
Subject: CN=31b9eb3f054cb7df25ce49d5b2e39cfb6a275963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:70:b3:8f:ad:a2:9e:48:20:e2:6e:8c:d2:
1b:3f:89:85:b0:0c:5b:1d:e1:e1:4a:21:e3:ae:3f:
0a:67:25:1d:4c:51:3d:6e:93:e4:35:c3:0f:bd:d9:
dd:24:0d:f0:8c:e2:26:57:51:5d:d8:0d:fb:da:b7:
03:12:c8:71:12:74:fc:78:1b:d3:fe:12:3a:c1:1f:
77:2d:ed:29:0a:45:b4:1b:3f:71:d5:f4:4f:c8:54:
cd:65:99:72:d5:a3:70:a4:c2:1f:42:4d:bf:1e:67:
53:87:3e:e5:42:02:3a:c9:bc:01:9a:dc:d7:cd:5c:
a6:7a:35:86:cf:5d:f9:e3:c2:0b:3c:a9:b7:80:00:
73:78:ed:14:d2:66:e4:90:55:cb:4b:05:09:78:ce:
ab:f9:69:f1:3f:ae:34:59:f4:4d:1b:ca:36:71:f7:
2b:49:29:10:f8:77:c9:56:ce:7d:4f:bb:15:7d:da:
95:b1:44:4c:25:75:1d:1d:a5:6b:03:52:c3:7d:de:
42:68:4b:d4:d2:a6:21:82:74:05:07:6d:53:1f:d1:
33:9a:16:53:1a:d4:f5:73:fe:cf:df:b9:70:a6:60:
91:a3:0a:fa:81:75:95:96:55:5b:d1:aa:fe:89:45:
b1:13:ee:30:9b:95:98:54:d2:f4:7f:c5:01:7a:7b:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:EB:3F:05:4C:B7:DF:25:CE:49:D5:B2:E3:9C:FB:6A:27:59:63
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3d:5f:07:92:1a:bb:f6:cd:de:ad:f8:84:3a:4f:2c:13:b6:
cf:bd:43:d0:93:de:f5:b6:6b:5e:6a:47:83:99:45:59:00:36:
ec:4f:44:95:11:ed:33:53:87:3f:9a:cf:85:93:c1:a7:08:44:
60:cc:fe:34:89:b5:a1:ed:e2:31:6e:a8:68:5e:d5:7b:dd:2b:
5b:4e:26:cb:27:40:fa:0a:03:b9:cf:96:0e:1a:6f:72:38:47:
83:78:cb:25:15:2a:91:84:6d:54:2a:29:59:44:f3:a0:65:44:
a9:3e:7c:f3:bd:a8:d4:68:05:2e:85:1f:08:cd:93:63:ee:55:
c2:43:ea:68:8d:71:f7:a1:ab:b1:69:6c:b9:8c:8d:a6:9c:eb:
15:8a:45:23:b1:52:da:72:fc:8d:7c:b5:32:10:f3:bd:71:7f:
68:99:c4:a6:e8:28:c2:d1:a2:30:b0:60:b7:f9:97:cd:52:58:
58:b6:a2:c7:b7:6c:0b:f5:ad:b1:88:d8:40:24:8a:d4:6c:0f:
de:59:0c:8d:68:cc:2d:b8:40:d1:18:c4:1b:e1:b4:08:c8:51:
89:16:2d:66:c8:80:da:40:45:19:b8:07:ee:5d:e9:7f:02:b2:
a1:51:f9:a2:b5:21:da:79:bf:fe:d0:0c:e6:cf:b8:4c:f8:72:
b8:54:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:28 2026 by rpki-client