Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File: pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier: 57dzD/TsCLKj08mI1iL+8+V2yHtq6wPxbwzOVUP5jGM=
Subject key identifier: 45:9B:BC:C9:CF:30:4B:32:19:F3:BC:D5:F4:56:CB:85:37:4C:25:1C
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 019F935B0CC0EE3775351DD97C932D487279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:45 +0000
Manifest this update: Fri 24 Jul 2026 09:00:45 +0000
Manifest next update: Sat 25 Jul 2026 09:00:45 +0000
Files and hashes: 1: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: u96h/+j/0V2SZ7q51SYvuGugJSPdi4w2gUMS39J//H0=)
2: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (hash: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0c:c0:ee:37:75:35:1d:d9:7c:93:2d:48:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Jul 24 09:00:45 2026 GMT
Not After : Jul 25 09:00:45 2026 GMT
Subject: CN=459bbcc9cf304b3219f3bcd5f456cb85374c251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:96:8a:43:56:5b:cc:17:3d:9e:0c:d8:ed:
b0:47:df:8f:a2:dc:8e:e7:29:81:18:8b:39:9a:f1:
b9:61:d9:b0:a1:7c:07:ac:6d:f2:30:92:64:2d:b4:
89:c4:24:1e:80:b8:79:21:cf:92:71:be:50:f0:e1:
9d:1a:4f:6f:fc:2d:53:75:e7:01:ed:58:92:86:9d:
c4:68:71:5c:c9:29:35:d7:48:43:80:3f:ce:96:ce:
8f:1f:79:a5:c3:6c:3a:d4:14:cc:17:a3:32:92:ac:
3d:4a:01:fe:c0:c7:72:67:f2:9c:87:da:fa:7a:18:
14:b4:84:63:5c:01:1c:67:9f:75:43:70:0c:1b:95:
ff:b5:3d:1a:73:c4:c9:38:48:bc:58:22:96:c7:9f:
58:64:e2:69:94:42:c0:b5:65:37:94:44:a2:6c:a9:
7d:18:de:41:66:b1:f3:ae:f5:43:80:5a:c6:a2:96:
dc:1d:27:ab:2c:46:7d:c0:43:df:fc:3e:89:23:72:
da:f1:85:ca:57:9f:30:e1:41:c2:5e:b9:ba:43:7b:
3e:fc:6d:57:82:19:b5:28:0a:ec:01:5b:1a:d6:6c:
11:6c:54:23:21:bc:bf:9c:b3:f0:e9:63:9a:4b:fd:
b6:3a:5f:01:08:d2:9f:49:ae:2d:77:84:68:55:30:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:BC:C9:CF:30:4B:32:19:F3:BC:D5:F4:56:CB:85:37:4C:25:1C
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:cb:27:41:2f:71:17:8e:3c:06:f5:b0:df:e7:28:bb:c3:
7e:d2:57:0c:34:d1:88:87:32:98:35:d4:bc:ba:1b:c9:dc:11:
03:60:d3:7b:19:c8:51:7f:23:70:6f:17:a9:1f:92:ca:e9:7f:
a2:57:98:51:87:24:81:4e:50:3c:a5:dc:c6:a5:62:7c:6d:f1:
4c:8b:7b:64:34:8b:06:13:c6:07:d5:bf:cb:fe:ca:16:a7:54:
b2:86:49:d7:b6:0f:70:74:de:66:d8:b8:1c:da:42:01:87:b2:
55:87:67:1e:7c:f7:99:81:15:d7:2d:f5:21:52:e1:a3:f4:e3:
ce:3e:09:01:ed:c0:aa:b3:54:fa:f7:bb:86:ba:ac:03:0c:d6:
b4:b0:4a:b4:38:45:3f:88:f9:77:e6:ac:c0:0e:cc:42:cf:6e:
38:41:65:a7:53:9d:47:1f:f8:de:4a:f0:b0:fd:04:11:aa:b2:
6b:6e:55:2a:4e:b3:b6:e6:d5:bb:a6:f0:98:8c:5e:25:36:0e:
2e:40:08:f4:2c:71:2e:9e:50:c7:18:2d:c8:9b:b9:42:77:30:
cf:41:5a:68:8b:1b:7f:23:fd:62:f4:bb:de:62:af:55:e6:e1:
ef:59:98:fb:bb:a6:2d:ab:38:2d:ac:80:6a:43:90:7e:3c:1b:
60:8f:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:22 2026 by rpki-client