Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json)
Hash identifier: 8x0XRPFirtswOW+UP+tWnZs7jMR5o7rlRt09ZUpkLrs=
Subject key identifier: 9E:DA:A0:EE:73:81:53:C4:7D:97:12:52:09:62:55:B4:37:CB:4D:49
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial: 019D2960BF24091F9023F27C9136613B065D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
Manifest number: 0158
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=)
2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: s/Ck+YJK8F4bFuqXTp6cn2TxLeGOb3GyPBH54+0gPyQ=)
3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:bf:24:09:1f:90:23:f2:7c:91:36:61:3b:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=9edaa0ee738153c47d971252096255b437cb4d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:30:a6:65:c0:b1:04:45:f7:2f:36:c6:e3:
95:6d:5b:f7:33:45:f7:a8:b7:b6:a1:c1:de:37:e9:
87:b3:84:2e:ca:ec:35:6e:26:ac:84:35:44:e7:68:
b2:2c:51:6a:3c:15:37:c6:9c:01:7f:51:65:2d:e4:
0d:4d:22:d4:89:46:29:52:1f:73:20:3d:c6:e8:ba:
70:16:9e:2f:89:67:8b:62:0d:b3:cc:80:86:c0:bd:
67:98:79:a1:b5:f1:a9:f1:e9:6c:8d:65:18:e0:cd:
06:5c:85:ff:0d:83:83:34:70:46:be:37:f3:a4:05:
bc:19:fb:ba:d0:78:1d:f1:c4:70:35:a4:ad:0e:28:
37:92:5d:39:e9:fe:48:6e:be:7b:e8:35:57:33:02:
a2:d3:43:52:ed:6a:18:33:7e:db:ee:ee:e3:62:58:
97:17:7d:d6:30:e5:df:ce:cd:10:22:ea:9e:6d:bb:
f4:31:ce:39:4a:6f:63:83:89:37:2e:02:cd:05:82:
8c:00:a4:8e:1d:a8:9a:0b:78:11:d4:8e:db:9b:6a:
a8:8e:1e:0c:9f:ba:72:5d:2b:89:f2:a9:a1:9b:a9:
19:79:11:85:ea:c7:a2:fc:15:d2:f7:d0:93:e9:85:
81:39:b8:c2:a7:13:f7:1c:15:81:b2:9a:5f:69:df:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:A0:EE:73:81:53:C4:7D:97:12:52:09:62:55:B4:37:CB:4D:49
X509v3 Authority Key Identifier:
keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b3:68:e1:3e:59:cd:05:80:b0:07:d0:59:97:93:cf:13:b7:
bd:c1:4b:ac:3f:12:f7:80:ba:ea:2e:d8:81:3b:9d:60:96:04:
e2:28:ba:51:c9:e9:d6:85:ed:86:69:cf:14:77:b3:aa:92:5d:
e6:c3:d9:bc:bd:62:bf:d3:50:95:3f:26:91:2e:23:fc:88:ef:
b2:5c:f4:e3:20:8d:65:82:e9:67:9d:ac:9e:64:d9:9d:ec:00:
47:38:01:48:0b:1b:e3:bb:17:81:ef:ba:c7:7b:a6:25:f2:7b:
0b:9f:fa:c7:6e:2b:04:ab:f7:fa:68:6e:85:e8:f8:7e:23:59:
9c:e6:20:08:65:40:24:65:28:04:5f:f0:fa:74:5c:b5:a7:03:
98:85:75:66:b4:fb:c9:d6:2a:b0:84:b2:52:fc:3b:70:2c:80:
a5:e1:3b:40:69:d3:bb:b5:0a:45:18:35:08:ee:cd:bd:d2:73:
1c:1d:7e:0a:0f:8b:34:b7:d2:a0:ed:60:73:35:8d:17:74:8e:
81:0f:0a:0c:48:2b:83:46:65:4e:3a:60:d2:47:e1:2c:6e:c1:
f3:62:47:6b:ac:92:b8:b7:f9:f3:5a:4e:cc:92:46:5c:27:79:
6c:29:d5:e7:af:f0:cb:f5:8f:db:df:bc:a6:e9:8a:db:ca:c2:
b8:da:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:00 2026 by rpki-client