Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: 48o9GU0OmX2/KkZG0qbLNmffEiUgNddoMK9492daHRA=
Subject key identifier: 35:72:6C:A0:20:68:16:63:F8:F6:D4:8A:87:42:24:70:6A:45:08:1B
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 01A106269BFCE9E71E946BDA1C5E970A7D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0358
Signing time: Sun 04 Oct 2026 09:02:35 +0000
Manifest this update: Sun 04 Oct 2026 09:02:35 +0000
Manifest next update: Mon 05 Oct 2026 09:02:35 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: OyyAfhMT/UmZji+GeolAmkjr0mW4YEOAs9JKo8tkUIw=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:9b:fc:e9:e7:1e:94:6b:da:1c:5e:97:0a:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Oct 4 09:02:35 2026 GMT
Not After : Oct 5 09:02:35 2026 GMT
Subject: CN=35726ca020681663f8f6d48a874224706a45081b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:3e:79:db:71:12:23:72:c9:29:0e:d5:f1:
92:72:95:13:90:7e:c7:ed:b1:77:86:a6:ac:4f:d5:
f8:73:13:05:fe:b3:e4:d8:8b:3f:40:b6:c1:eb:2e:
6d:6d:b8:13:ac:71:32:b6:06:5b:29:5a:1a:22:88:
08:5d:69:06:f7:a5:df:bf:f8:56:d4:43:a7:e4:08:
af:e0:61:34:25:64:1e:b1:b7:a3:37:b9:60:2b:53:
a0:ee:f9:ff:d9:07:e6:2c:93:18:c6:f4:ff:01:2f:
01:9c:07:03:84:1a:ae:4b:7e:51:c5:da:9d:6d:c0:
12:75:38:e7:55:16:e4:6a:90:e2:0a:43:5b:fd:e6:
5a:27:b0:45:cd:ea:6f:4f:03:6c:54:e3:41:2b:64:
40:ad:2b:fc:e6:dd:58:f5:b0:3d:43:c0:08:57:ba:
b2:88:44:65:5c:de:3b:25:ab:08:80:0f:89:56:8f:
0c:49:b9:25:de:ef:fc:5e:c7:74:66:c1:c0:53:2b:
0d:88:74:a9:8a:6e:31:ac:0b:c2:30:63:a1:9a:4a:
70:d6:3d:2d:0d:0a:0c:be:93:f7:63:9b:e1:58:32:
16:00:e5:1d:6f:20:f1:69:c0:c3:88:7f:fe:85:ae:
cf:d6:66:66:45:c6:1c:4e:d8:d5:1f:9e:31:9b:d5:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:6C:A0:20:68:16:63:F8:F6:D4:8A:87:42:24:70:6A:45:08:1B
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ab:60:78:31:28:db:c2:07:66:2f:4b:0d:2b:8d:dc:e8:45:
42:36:4e:95:07:f3:3e:aa:df:92:7c:e8:01:92:6f:7f:53:ba:
e9:30:e2:f7:78:64:f3:71:c7:a4:12:f2:be:b9:39:ed:f1:a7:
c1:43:58:55:80:77:2f:2b:e4:56:4c:57:f6:f8:36:3a:ea:97:
30:a1:93:25:b6:c7:13:6e:57:16:e3:dc:7a:19:e5:e9:c2:95:
a2:7a:90:58:65:14:12:0f:73:b5:6e:80:5a:b0:58:98:71:c4:
a0:0f:d8:41:7e:0b:b5:64:b7:85:23:38:76:c9:f3:03:7a:62:
4c:03:8b:2c:75:2a:45:e8:17:57:89:4f:d4:1d:a1:38:73:59:
a3:fc:24:9e:f9:bb:78:eb:4c:67:6f:47:be:49:64:93:89:60:
79:de:e3:a2:49:63:87:5d:3a:b9:8f:6e:a0:29:2a:72:70:6f:
c3:38:c3:ac:f7:85:23:1e:0d:60:90:25:99:17:4d:aa:2f:61:
a8:a7:58:0c:93:a8:d4:ae:c9:9b:4c:6b:04:b1:e9:99:a9:91:
ff:14:9f:58:bc:1e:e8:88:de:89:ed:7c:d7:a6:b7:89:ec:1c:
5a:f2:06:0d:aa:a7:43:ae:3d:3b:96:57:0b:ab:7f:c4:ad:48:
64:1a:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:27 2026 by rpki-client